Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
File:                     ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json)
Hash identifier:          cHZCnQ7y3tKoa8bxR9DHpaB43qBQy8NyQzk3efXJipw=
Subject key identifier:   68:CE:45:F8:9F:82:DF:0A:0F:36:90:25:A0:53:56:40:E8:07:E9:EE
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Certificate issuer:       /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial:       0B0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
Manifest number:          0B04
Signing time:             Thu 16 Apr 2026 19:15:22 +0000
Manifest this update:     Thu 16 Apr 2026 19:15:21 +0000
Manifest next update:     Thu 23 Apr 2026 19:15:21 +0000
Files and hashes:         1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: 5zbNPADWxhDtVbxZg+D/vPwbOXAKmrQuYimEtJvDe7c=)
                          2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: R1rlYcsCi8CSVIACxllh01Uvohkay9HT1gj9YqXkxQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2829 (0xb0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D
        Validity
            Not Before: Apr 16 19:15:21 2026 GMT
            Not After : Apr 23 19:15:21 2026 GMT
        Subject: CN=69e13549-217d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:21:10:75:ac:f3:31:5f:3e:86:38:9a:b4:
                    48:b5:0f:18:ff:b5:31:c0:d3:54:ee:ff:d3:4d:16:
                    44:cc:4f:05:ab:51:3c:20:32:e6:0e:e9:e1:ef:f6:
                    f1:96:10:de:77:6b:81:94:7a:47:ea:c4:7d:a3:71:
                    83:fc:84:98:97:41:85:82:41:f3:1e:1e:f1:77:e3:
                    6a:b3:33:03:33:3f:f5:0b:ce:a0:0f:49:c3:df:24:
                    3d:60:8f:fb:20:63:87:13:7b:7f:84:f0:08:35:e5:
                    68:e0:fb:2e:3a:77:14:b3:3f:4b:f2:c4:9e:df:d4:
                    f6:97:72:90:8f:0c:6a:1c:35:41:c9:14:6c:2a:b2:
                    2d:64:45:77:15:63:36:a3:bb:ed:6a:af:46:c6:f2:
                    78:50:59:d2:6e:47:4e:75:2e:e2:67:ab:9b:16:60:
                    da:f2:8c:0b:71:37:df:e0:d9:a5:8e:52:ec:f4:d1:
                    bb:e2:55:aa:2c:71:d1:83:1c:11:ef:66:45:1f:02:
                    45:76:f3:c7:c4:44:9d:60:d5:ee:4d:4d:d2:06:d5:
                    76:07:a8:04:c7:e8:e2:5b:19:87:55:ba:a6:d7:d0:
                    46:44:d8:fb:81:18:c0:48:9b:47:37:cb:0d:e0:87:
                    e6:2b:86:5f:fb:ad:84:ad:ff:f7:fc:75:ee:e2:2f:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:45:F8:9F:82:DF:0A:0F:36:90:25:A0:53:56:40:E8:07:E9:EE
            X509v3 Authority Key Identifier:
                keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:42:b8:35:d0:f4:8d:6b:3d:b2:f1:81:21:3a:71:1b:87:f7:
         8a:d9:0c:93:26:71:7c:e9:da:db:fb:2d:6f:8e:e9:10:dc:8b:
         c2:07:09:61:8f:08:38:f9:bd:60:c4:ae:22:cf:cf:3b:9f:d3:
         53:9f:82:78:ef:1a:c4:0a:e7:6c:36:d6:d9:47:e1:07:ea:3f:
         cf:e5:74:61:2f:51:e7:54:73:6b:80:6c:4d:da:22:8b:36:1c:
         70:e6:31:88:55:6d:49:36:16:48:95:3b:5b:f5:45:bf:8d:cd:
         e9:51:61:2b:d3:3a:e2:de:50:86:d2:c1:29:53:bf:67:45:b2:
         62:c6:7e:08:ef:89:45:4c:b2:71:92:b3:9e:cd:6b:52:51:3a:
         5d:f1:10:61:ad:9b:c0:10:64:31:46:04:26:1a:8a:25:c8:de:
         3d:71:65:07:0e:82:74:ae:08:24:71:a0:35:c7:7f:16:c9:10:
         f6:15:ff:8f:11:a5:75:ac:7f:c2:ba:c2:b4:ea:91:c7:7f:72:
         b9:1a:dd:ca:71:2e:78:3c:ba:29:96:b3:94:9f:df:de:69:a1:
         99:29:16:72:c8:ca:8a:c9:20:a7:36:f2:be:80:db:1c:fa:d9:
         7e:e4:8f:8f:b7:08:0e:e3:76:8e:2b:fd:a2:16:74:4e:29:f6:
         d9:b3:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:34 2026 by rpki-client