Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
File:                     uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json)
Hash identifier:          KbubdqjkUK0OXPueo5MMIxBKSSuS1TE21c78FOxdjQI=
Subject key identifier:   1A:FD:DE:06:11:07:0B:31:C1:44:54:6E:51:89:6D:99:86:07:4B:FF
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Certificate issuer:       /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
Manifest number:          028A
Signing time:             Wed 13 May 2026 01:53:16 +0000
Manifest this update:     Wed 13 May 2026 01:53:15 +0000
Manifest next update:     Wed 20 May 2026 01:53:15 +0000
Files and hashes:         1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: oYLoTCebYosscUbxoIbvPVHb+W4Ni7A/vkelQZuOKKg=)
                          2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: ogU/j3OOcAMtUhqvFDXyTh+nM/5Ri8VmgPSxYiiE5to=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
                          rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
        Validity
            Not Before: May 13 01:53:15 2026 GMT
            Not After : May 20 01:53:15 2026 GMT
        Subject: CN=6a03d98b-0e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:28:96:c5:c2:3f:30:bc:da:16:5b:e3:67:
                    db:07:42:e6:2c:51:fb:7c:5e:76:b9:04:97:14:0b:
                    59:70:67:0d:46:14:3b:89:35:1c:60:6a:ff:4f:ab:
                    9d:20:22:3e:68:22:80:5b:a4:b8:e6:47:2e:a6:d3:
                    b4:cf:e6:c5:66:96:36:ee:6d:54:84:98:c7:2f:d6:
                    14:dd:96:b6:77:dc:f9:a4:c1:e8:72:c6:68:f6:31:
                    cf:ea:1e:28:c4:c7:9f:2e:e6:e1:c0:96:22:a5:e0:
                    6b:75:ef:ca:6a:bf:6f:12:5d:80:75:aa:e4:68:21:
                    40:c7:2b:6a:6c:74:bb:c5:bc:5a:f8:d8:de:aa:cc:
                    91:dc:cd:ce:b9:20:37:43:76:e8:42:35:c6:73:05:
                    73:6f:fd:02:26:bd:af:d0:69:be:7d:01:d6:34:b2:
                    3a:ef:01:2d:be:71:84:ff:bc:60:c9:a4:fe:b3:54:
                    04:e8:2f:b6:aa:1d:eb:59:75:0a:48:e4:ff:f2:c6:
                    35:a9:fa:8c:52:3b:ad:63:d1:4c:ed:17:b8:13:3e:
                    8f:17:a9:c1:37:dc:20:d1:ea:9b:8f:a5:f1:76:5b:
                    12:b1:9f:da:8d:13:ea:fd:1a:b4:db:f3:47:05:e2:
                    c5:66:94:95:8d:83:a6:48:ec:ed:c9:2a:4a:41:1b:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FD:DE:06:11:07:0B:31:C1:44:54:6E:51:89:6D:99:86:07:4B:FF
            X509v3 Authority Key Identifier:
                keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:68:fb:cc:da:57:b4:7c:19:b1:23:e3:50:76:ab:49:c3:d8:
         6a:a1:a6:20:d2:a8:f9:f7:66:1d:1d:76:9e:c1:38:40:a7:5b:
         90:88:1d:92:ad:56:16:28:bb:0c:b7:01:b4:99:91:7e:ea:8c:
         ce:69:96:48:94:97:f7:49:46:8b:1f:95:d6:6a:1a:6d:51:51:
         d0:1d:69:ab:6a:12:75:ab:eb:c2:09:b5:de:36:4d:e3:eb:e4:
         10:a3:2c:70:0b:00:65:c5:0a:de:9d:5c:48:f6:b3:ac:8b:19:
         1c:02:c8:1c:4b:e3:b4:54:53:08:d7:f5:e1:fa:e6:f4:48:fc:
         f2:50:99:a6:c1:d6:9f:dd:c8:32:3f:35:89:30:c5:eb:17:a4:
         9e:cc:ab:dd:3f:bf:63:b7:7a:2f:6d:a4:11:36:34:46:90:3e:
         74:b4:d0:3b:d3:bd:c7:69:8e:b4:3c:85:12:ae:8a:60:35:d2:
         5d:b5:61:f4:2e:9f:71:d5:29:94:8e:06:85:71:7e:57:1b:24:
         71:59:96:8e:8a:14:53:ef:81:84:8e:48:1a:74:31:72:39:ec:
         5a:03:77:bf:b1:95:ab:a3:ab:67:d2:78:f4:14:04:9b:1c:4c:
         ea:6b:7c:92:bf:05:8e:9f:7f:a9:62:61:a8:21:df:39:c1:25:
         05:67:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:37 2026 by rpki-client