Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
File:                     U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json)
Hash identifier:          oLMYgv3ltA9BV3iVY1nIa4kM6q3DpnuaLL8KPVm10yM=
Subject key identifier:   B4:B5:AD:EC:59:81:CA:26:65:FC:1E:7B:70:35:47:81:51:38:97:BE
Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85
Certificate issuer:       /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
Certificate serial:       0D01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
Manifest number:          0CF4
Signing time:             Thu 16 Apr 2026 18:07:42 +0000
Manifest this update:     Thu 16 Apr 2026 18:07:41 +0000
Manifest next update:     Thu 23 Apr 2026 18:07:41 +0000
Files and hashes:         1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: l7Y0YUXmFhsFoJDLytwjb7LLOOyLqG093cEOyWq+blM=)
                          2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: tzJLBY8bc2irUv60IUC/jCk659W1kTuBCxqQtwS0zo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl
                          rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3329 (0xd01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
        Validity
            Not Before: Apr 16 18:07:41 2026 GMT
            Not After : Apr 23 18:07:41 2026 GMT
        Subject: CN=69e1256e-b363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:90:1c:49:6e:3f:dc:27:6d:0d:5b:09:13:
                    c8:d3:fe:4f:e8:bc:d6:79:57:43:78:24:ec:c0:77:
                    a8:f9:c6:1b:b4:59:96:c8:c4:46:b5:f0:43:be:af:
                    5b:70:2b:d5:1a:a9:f4:0f:aa:ca:55:e0:ac:de:d6:
                    5d:c8:61:aa:5a:f3:a9:ab:dd:a3:92:3d:c1:7b:28:
                    39:8f:6e:73:d9:20:7f:a0:e9:fa:1b:ee:25:b0:40:
                    b8:d2:ed:e8:7e:3c:10:7f:73:bc:cf:f6:e2:7f:66:
                    10:b8:88:8d:4d:3c:5a:a1:af:78:41:d4:f7:e3:c8:
                    29:b2:67:bc:87:55:e9:7a:a0:2f:41:c1:67:bf:40:
                    0d:5d:10:9e:26:bd:d9:ee:64:05:74:f6:cb:22:6f:
                    80:94:6c:00:9a:8b:d1:b3:79:73:13:cb:88:a4:5c:
                    94:6c:ed:fd:de:c6:e1:76:90:d8:8e:91:11:87:01:
                    a9:8b:56:a0:08:0c:95:17:a0:17:e7:f5:ab:24:d0:
                    a1:cc:0d:dc:c7:75:7f:42:7d:11:44:e5:cf:5a:c9:
                    77:2d:2e:df:08:00:87:9c:56:15:89:f2:19:0a:77:
                    e5:cd:9b:41:a6:f6:ef:7a:48:5b:44:6e:03:49:15:
                    6b:16:92:16:29:98:fc:b3:48:a0:77:98:ea:25:a1:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:AD:EC:59:81:CA:26:65:FC:1E:7B:70:35:47:81:51:38:97:BE
            X509v3 Authority Key Identifier:
                keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:ce:54:52:4f:19:3b:12:8b:c1:13:cb:69:72:23:7f:d2:
         56:f0:d1:9b:e0:23:35:f9:9a:09:05:7f:83:c5:97:76:02:6f:
         9a:5a:6d:17:98:fa:6c:bd:09:6d:bb:5f:4e:f6:07:77:01:6a:
         f2:99:e2:48:c8:b9:7e:c7:c8:fc:44:da:60:b1:14:82:fd:36:
         02:9f:c1:70:56:2e:a7:08:79:95:a6:89:35:f7:5a:f0:73:cb:
         3c:88:41:4f:4f:ce:34:ef:50:89:a6:af:3e:03:de:bf:80:4e:
         01:60:d4:ce:fb:4d:fc:84:4d:3b:1c:84:a7:7a:b4:53:f4:e8:
         14:b8:f0:ff:1a:f8:79:77:ce:af:d9:50:1e:aa:c5:73:b8:f9:
         43:48:d4:9d:40:c8:22:8d:ba:3b:91:b2:13:ac:55:0c:e1:06:
         cb:e6:26:c4:cd:f6:fd:8f:b4:9c:19:8d:0d:81:4d:1f:05:2d:
         70:dc:71:24:7c:e0:f3:e4:65:12:79:5b:9b:3e:40:c8:3a:74:
         45:98:a4:de:87:7f:18:2c:df:61:ee:12:03:6b:6c:83:63:94:
         d2:c5:7f:e3:45:0c:cf:d3:55:1c:41:61:61:58:26:7c:6e:da:
         3d:a1:b5:4a:82:07:37:c1:ee:88:e6:de:94:3d:23:1c:6d:6a:
         11:8f:e2:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2
NUI0REQ4ODUwHhcNMjYwNDE2MTgwNzQxWhcNMjYwNDIzMTgwNzQxWjAYMRYwFAYD
VQQDEw02OWUxMjU2ZS1iMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdOQHEluP9wnbQ1bCRPI0/5P6LzWeVdDeCTswHeo+cYbtFmWyMRGtfBDvq9b
cCvVGqn0D6rKVeCs3tZdyGGqWvOpq92jkj3Beyg5j25z2SB/oOn6G+4lsEC40u3o
fjwQf3O8z/bif2YQuIiNTTxaoa94QdT348gpsme8h1XpeqAvQcFnv0ANXRCeJr3Z
7mQFdPbLIm+AlGwAmovRs3lzE8uIpFyUbO393sbhdpDYjpERhwGpi1agCAyVF6AX
5/WrJNChzA3cx3V/Qn0RROXPWsl3LS7fCACHnFYVifIZCnflzZtBpvbvekhbRG4D
SRVrFpIWKZj8s0igd5jqJaEd/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLS1rexZ
gcomZfwee3A1R4FROJe+MB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0
NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP
bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl1/OVFJPGTsSi8ETy2lyI3/SVvDRm+AjNfmaCQV/g8WXdgJvmlptF5j6bL0J
bbtfTvYHdwFq8pniSMi5fsfI/ETaYLEUgv02Ap/BcFYupwh5laaJNfda8HPLPIhB
T0/ONO9QiaavPgPev4BOAWDUzvtN/IRNOxyEp3q0U/ToFLjw/xr4eXfOr9lQHqrF
c7j5Q0jUnUDIIo26O5GyE6xVDOEGy+YmxM32/Y+0nBmNDYFNHwUtcNxxJHzg8+Rl
Enlbmz5AyDp0RZik3od/GCzfYe4SA2tsg2OU0sV/40UMz9NVHEFhYVgmfG7aPaG1
SoIHN8HuiObelD0jHG1qEY/iSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:10 2026 by rpki-client