Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
File:                     uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json)
Hash identifier:          cQFwWxSzeScBJqjEcH/ZWkP1taDXC6kNDDipcCuOGCg=
Subject key identifier:   9D:38:89:13:D9:7A:CD:7A:B7:2D:F6:6C:F5:2B:75:DC:32:46:EA:1E
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Certificate issuer:       /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
Manifest number:          77
Signing time:             Fri 17 Apr 2026 07:28:03 +0000
Manifest this update:     Fri 17 Apr 2026 07:28:03 +0000
Manifest next update:     Fri 24 Apr 2026 07:28:03 +0000
Files and hashes:         1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: pQW1AKl3mO5n0IYj05sEnVJtkNduiF0jDw6Kbfce9yE=)
                          2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: /PEfcsPOZLF1b+5hUz53HClo8QR/oPzgzlje9Rn4Axc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
                          rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
        Validity
            Not Before: Apr 17 07:28:03 2026 GMT
            Not After : Apr 24 07:28:03 2026 GMT
        Subject: CN=69e1e103-b65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:25:dc:76:6a:ad:b8:24:c0:90:d6:ce:a4:
                    7f:29:da:c7:ea:8a:e7:fe:68:db:e9:f2:9a:37:2b:
                    3d:77:da:de:56:f3:49:81:63:d0:c0:d5:80:18:37:
                    95:6b:4b:0f:82:ec:7e:ad:a3:d0:fc:bd:1c:0f:44:
                    c4:f7:9f:24:80:12:ed:05:b5:1e:43:a6:bf:b4:b8:
                    0a:96:b8:1c:75:37:9a:39:ad:5e:93:81:2c:12:ff:
                    29:cb:08:c6:5c:d8:52:a7:d0:92:87:a3:da:3f:78:
                    dd:82:ce:18:8a:e6:54:14:2c:a2:34:0d:94:41:87:
                    46:a9:5e:74:b0:71:c3:41:1d:1c:cd:5e:65:e8:81:
                    72:41:fa:2d:7a:f4:01:20:3f:cf:ba:b4:03:a8:f0:
                    7a:cd:6d:3c:87:8f:3a:ff:2e:21:f3:26:43:0b:b6:
                    c9:0e:87:94:e9:14:f8:1a:75:07:5d:db:41:11:34:
                    6c:37:20:06:86:fb:6a:d1:aa:41:04:a6:72:a8:c3:
                    07:09:ff:f3:81:02:22:c6:b6:db:53:2e:ed:df:90:
                    62:f1:12:64:21:eb:26:40:0e:19:3f:13:33:0a:94:
                    a4:81:6e:dc:77:e2:7f:e0:76:28:59:18:1e:40:3c:
                    23:ee:e3:ff:61:de:98:0b:55:17:be:44:bc:0e:a5:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:89:13:D9:7A:CD:7A:B7:2D:F6:6C:F5:2B:75:DC:32:46:EA:1E
            X509v3 Authority Key Identifier:
                keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:a7:1b:f8:86:fe:25:9e:51:97:0f:7b:c9:28:26:f6:6a:
         7b:74:b8:a2:4d:50:8c:e9:de:1d:e5:1c:7d:f7:3f:6f:98:75:
         1a:5a:42:90:a1:3d:23:1f:59:35:72:13:93:63:35:bc:c4:a4:
         99:1e:d7:c3:fd:b4:6e:a6:f0:5f:66:75:9e:3b:5a:4e:32:b0:
         0d:2a:11:5c:cc:de:f2:cc:43:6b:17:f2:d2:1a:48:87:3d:ba:
         cc:f3:3f:23:a0:ea:53:ff:0e:09:ff:6e:f7:b9:3f:b1:89:7e:
         17:28:98:a6:61:6c:67:a6:f5:23:b6:8d:09:0d:6f:81:5c:61:
         3b:31:38:4b:40:eb:bc:f5:6d:0f:fe:80:2c:46:03:1c:69:1f:
         53:1b:db:ad:eb:d9:10:67:5b:8e:23:f6:5b:cd:10:b7:07:39:
         4d:4a:3e:67:c9:79:9a:c3:ed:f0:8a:36:53:5b:47:05:c9:6d:
         10:d1:34:81:0b:95:59:23:36:9b:00:bf:24:f8:0b:80:b3:eb:
         11:d2:a9:f2:15:f4:d4:01:a3:08:a8:8d:f8:b7:a9:3b:b0:41:
         b9:33:9b:90:f7:ef:bd:eb:08:c4:45:5c:ba:c8:07:0f:4e:9e:
         a4:9b:3f:9e:f7:ef:33:a2:4f:cc:4b:73:5c:ee:bb:58:7d:74:
         87:ea:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:26 2026 by rpki-client