Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File:                     0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier:          6pvzE8Estu6pkOM//mgGPNf0oIxYn3eR705sAkZ7TX0=
Subject key identifier:   B4:3A:13:02:61:82:F7:94:8E:8A:0C:18:37:86:7D:C6:C1:A2:6D:9C
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer:       /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial:       0B87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number:          0B7D
Signing time:             Tue 12 May 2026 19:11:25 +0000
Manifest this update:     Tue 12 May 2026 19:11:24 +0000
Manifest next update:     Tue 19 May 2026 19:11:24 +0000
Files and hashes:         1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: Uz8WxXah4UMmMwepuqsqzWqbOWS4CHHT0KqezNHefwk=)
                          2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
                          rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2951 (0xb87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
        Validity
            Not Before: May 12 19:11:24 2026 GMT
            Not After : May 19 19:11:24 2026 GMT
        Subject: CN=6a037b5d-4e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:16:18:9d:f3:1d:e5:1d:bd:1b:b5:76:5a:
                    02:27:1e:73:e4:bc:77:be:b2:c5:28:26:38:9a:ce:
                    96:1d:6d:d1:aa:f8:ac:f1:74:1d:d1:d3:3c:f6:42:
                    0e:51:82:e2:2d:8c:bc:e2:6d:0f:0e:ff:2f:21:c1:
                    1e:23:6b:bd:89:ff:50:31:01:79:15:c6:3f:69:51:
                    f1:3b:5f:91:4a:a9:ee:c4:cb:ea:e1:a5:5a:d7:d9:
                    0e:0d:fa:fb:74:f9:89:64:27:59:39:ff:38:ec:bc:
                    35:7e:e7:5e:65:52:22:68:f7:a1:b9:d8:d8:bd:32:
                    88:67:d6:78:25:83:b3:d2:cd:d7:27:72:d7:9e:d0:
                    7c:d8:b5:50:c9:23:65:64:a4:1d:60:61:3d:3a:6b:
                    ad:43:3e:05:80:51:b8:cb:f8:b4:e1:94:c8:8f:88:
                    51:d5:b2:4a:ca:51:12:7c:9c:3e:88:6f:b5:bb:a1:
                    3a:d0:ee:43:ee:cf:61:20:7d:14:9c:3a:a4:90:79:
                    df:b9:70:75:34:63:3f:53:c8:ff:a5:ce:03:99:31:
                    b6:32:8f:d2:59:8e:82:17:2c:98:a4:53:89:db:67:
                    8a:97:63:97:08:ba:72:dc:d9:68:e9:14:7a:02:54:
                    80:a5:3e:65:4f:25:e1:1d:94:3e:bc:2d:40:07:16:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:13:02:61:82:F7:94:8E:8A:0C:18:37:86:7D:C6:C1:A2:6D:9C
            X509v3 Authority Key Identifier:
                keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:6d:aa:d8:b6:eb:d1:b2:a6:8e:79:96:a4:9c:63:ba:6f:
         21:a8:de:7f:0f:41:f5:35:3f:4a:e9:47:9e:1f:3b:e3:f9:bf:
         5d:3e:e1:43:a3:19:4c:32:32:14:ea:e5:cd:e7:6c:cc:b8:7b:
         d4:ee:fb:ca:3c:07:d4:5c:33:7f:b8:28:01:ef:c4:4f:45:7a:
         cb:1a:70:9d:4e:7b:80:54:34:6e:ec:88:8c:fa:b0:52:f0:5e:
         7c:f2:c9:6a:2f:e3:0b:48:62:bf:ac:b4:07:7c:9e:10:f9:d0:
         76:5c:22:cb:09:a9:ba:02:b5:c0:90:ac:3f:18:f4:27:2d:51:
         6b:90:55:d3:57:e8:49:4a:ba:2e:3b:dc:18:a6:9b:83:22:93:
         7c:c1:5d:0d:45:f7:ef:ee:78:4f:44:41:14:2b:f5:30:10:f4:
         5c:a6:55:7e:70:d1:da:6a:cf:b2:f1:85:5f:a0:a4:83:28:61:
         d9:03:bb:c8:7b:a8:0b:6b:29:8b:1b:44:df:5a:db:41:7d:b9:
         86:9d:e4:8f:98:46:25:dd:c7:8a:1d:3b:94:d4:a4:78:1d:e0:
         bf:6f:2f:7a:db:b0:de:ad:79:6a:85:5d:ba:d2:52:7d:c3:57:
         4e:38:b2:de:5b:6b:53:86:a8:5f:93:de:69:2f:72:01:93:5e:
         cf:21:e8:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw
MDAzODEyREEwHhcNMjYwNTEyMTkxMTI0WhcNMjYwNTE5MTkxMTI0WjAYMRYwFAYD
VQQDEw02YTAzN2I1ZC00ZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzocWGJ3zHeUdvRu1dloCJx5z5Lx3vrLFKCY4ms6WHW3Rqvis8XQd0dM89kIO
UYLiLYy84m0PDv8vIcEeI2u9if9QMQF5FcY/aVHxO1+RSqnuxMvq4aVa19kODfr7
dPmJZCdZOf847Lw1fudeZVIiaPehudjYvTKIZ9Z4JYOz0s3XJ3LXntB82LVQySNl
ZKQdYGE9OmutQz4FgFG4y/i04ZTIj4hR1bJKylESfJw+iG+1u6E60O5D7s9hIH0U
nDqkkHnfuXB1NGM/U8j/pc4DmTG2Mo/SWY6CFyyYpFOJ22eKl2OXCLpy3Nlo6RR6
AlSApT5lTyXhHZQ+vC1ABxaO6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQ6EwJh
gveUjooMGDeGfcbBom2cMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF
RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU
UUh5VkIwNXJWclFBQTRFdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD0ptqti269Gypo55lqScY7pvIajefw9B9TU/SulHnh874/m/XT7hQ6MZTDIy
FOrlzedszLh71O77yjwH1Fwzf7goAe/ET0V6yxpwnU57gFQ0buyIjPqwUvBefPLJ
ai/jC0hiv6y0B3yeEPnQdlwiywmpugK1wJCsPxj0Jy1Ra5BV01foSUq6LjvcGKab
gyKTfMFdDUX37+54T0RBFCv1MBD0XKZVfnDR2mrPsvGFX6Ckgyhh2QO7yHuoC2sp
ixtE31rbQX25hp3kj5hGJd3Hih07lNSkeB3gv28vetuw3q15aoVdutJSfcNXTjiy
3ltrU4aoX5PeaS9yAZNezyHotw==
-----END CERTIFICATE-----
Generated at Wed May 13 19:07:02 2026 by rpki-client