Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File:                     c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier:          TK2svyPeV+q83cMgRM8ggNNpf/22i7hjSBpRZv0zfqY=
Subject key identifier:   34:39:DB:51:CB:3F:0B:2E:22:0C:8A:0B:8C:05:EE:02:A3:92:FF:22
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer:       /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number:          013A
Signing time:             Wed 13 May 2026 05:30:17 +0000
Manifest this update:     Wed 13 May 2026 05:30:16 +0000
Manifest next update:     Wed 20 May 2026 05:30:16 +0000
Files and hashes:         1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: CY1IDWJSs9A94y76n6Y6gfSn8iDZL+1kxI9X2yzCY8k=)
                          2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: E1+S92xguMTIBmtHmrSoXrOV41uAwtTiK5fggn3/D/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
                          rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
        Validity
            Not Before: May 13 05:30:16 2026 GMT
            Not After : May 20 05:30:16 2026 GMT
        Subject: CN=6a040c68-63cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:ad:78:8f:de:4e:18:98:6a:21:e4:b5:9a:
                    14:65:58:83:f1:a1:7f:8a:58:8d:8b:04:4b:f5:47:
                    dc:46:8d:8c:d4:e5:44:c2:29:79:b9:4c:f6:56:7c:
                    22:8f:30:96:a3:ef:49:76:d0:08:ef:9b:84:09:0b:
                    c2:ae:6d:0d:69:0d:77:1d:29:a3:7d:f3:2d:27:1f:
                    a7:ef:de:9a:8d:f9:ec:3d:73:8b:bc:97:40:02:87:
                    81:a2:c2:30:77:9e:4a:b0:fd:08:9e:f5:3d:39:f8:
                    bf:3b:a2:94:8f:14:09:6e:8a:d6:32:a8:de:51:38:
                    75:b2:50:9c:90:7f:0c:d1:5e:ce:e4:2c:b4:e3:b3:
                    18:8a:65:84:4e:f3:32:9b:d2:34:c0:d4:48:cd:4e:
                    fd:0c:f5:9f:1f:db:e0:fa:e2:5b:38:d7:76:ff:0b:
                    1e:36:dd:4e:e3:a4:e2:86:06:7e:e4:e2:07:5c:6f:
                    5c:a7:00:fc:51:8d:41:70:9f:15:ad:ba:96:16:61:
                    b8:fb:f3:8b:9a:ba:d6:5c:aa:d8:21:ad:f6:ae:70:
                    28:57:0e:b5:50:04:f6:46:34:19:95:db:a6:63:22:
                    fb:97:49:a8:91:36:d4:e0:4b:a8:a7:b8:b5:bb:be:
                    e7:19:c0:61:2e:b5:15:b2:af:70:85:a9:28:f6:fa:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:39:DB:51:CB:3F:0B:2E:22:0C:8A:0B:8C:05:EE:02:A3:92:FF:22
            X509v3 Authority Key Identifier:
                keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1d:e2:44:ef:d9:8b:21:c5:72:73:0c:38:b5:e0:52:b5:8c:
         38:c7:d6:8f:3e:89:34:e5:e0:b2:fa:5b:13:d8:e2:31:1d:ea:
         02:60:ee:6d:2f:b0:98:c4:db:ef:c5:5d:92:74:20:39:0d:cb:
         34:60:bd:3b:9b:fc:38:b9:54:60:e5:1d:8a:07:cb:fc:42:d1:
         db:eb:b1:f5:82:54:97:51:e8:0e:e8:45:33:7b:cf:4a:83:ee:
         af:24:19:fd:fb:95:5f:1a:1a:ea:54:91:ed:c1:a7:79:79:fe:
         cd:bd:8c:9e:a6:9a:7e:0c:07:51:14:8d:2b:e2:a7:3c:8c:c6:
         9b:97:08:9c:5b:47:a8:5c:fd:0c:49:33:fe:dd:e4:14:0b:a3:
         d4:cc:de:2a:30:c8:82:9c:f5:79:49:82:a4:0f:c7:6b:78:0b:
         d8:91:9d:60:bf:fb:cb:c5:df:d0:c4:5a:8b:39:59:d9:15:3c:
         42:48:1d:6a:40:96:97:7c:ea:49:42:68:8b:96:a1:c0:49:98:
         22:2d:e2:58:e8:80:bf:a3:0d:73:3a:0c:4e:be:ec:a3:51:62:
         69:fd:ac:75:55:e4:e1:89:5c:e1:4d:e3:fc:a8:f4:0b:0d:04:
         52:9e:02:05:72:5e:db:ff:83:4e:51:c7:f2:cf:7d:06:45:a8:
         bf:2b:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:21:49 2026 by rpki-client