Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
File:                     uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json)
Hash identifier:          TQrhA401BYZdOqQ4Ije9jJYTr+SvYo02llE1VOf69fI=
Subject key identifier:   5D:8D:B6:22:F4:BE:25:C6:06:45:65:DE:14:52:B3:55:38:C2:61:C8
Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
Certificate issuer:       /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
Manifest number:          0576
Signing time:             Thu 16 Apr 2026 23:12:22 +0000
Manifest this update:     Thu 16 Apr 2026 23:12:21 +0000
Manifest next update:     Thu 23 Apr 2026 23:12:21 +0000
Files and hashes:         1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: xEd7vAkTJAZJTcWTEVzeh5KTenOkv7pIZgL8b0jfu8E=)
                          2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: LYizx8+s0eAkkoRCIZeouc33G+ruq6po3v7yIz992CU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
                          rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
        Validity
            Not Before: Apr 16 23:12:21 2026 GMT
            Not After : Apr 23 23:12:21 2026 GMT
        Subject: CN=69e16cd5-92c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:45:70:30:3a:d2:84:e2:96:64:19:22:6f:
                    68:c5:62:78:f9:bd:e7:ca:a2:3d:e8:2c:f0:27:66:
                    6e:b5:d1:5f:ca:8a:59:a4:11:21:8f:44:96:5c:6e:
                    fe:47:e6:50:05:22:e2:c2:4d:61:47:e1:16:b3:fe:
                    43:0b:d7:f6:97:7e:ba:9b:b5:44:af:c8:78:75:55:
                    c1:dd:42:8a:1c:aa:95:b6:e8:40:7c:e7:95:eb:7e:
                    b4:d3:0e:3b:18:2c:3f:02:cc:02:a6:1e:25:1c:55:
                    5a:8a:df:28:4c:dd:01:d2:10:4f:8a:6b:00:98:db:
                    b9:76:b4:75:89:08:a7:c9:e3:b5:6c:74:e2:9d:96:
                    1d:cf:5b:52:19:82:1a:b0:36:d6:b3:1a:56:c5:0c:
                    94:55:8f:ab:43:d6:22:a2:ca:e2:ee:55:39:3e:72:
                    05:f9:98:51:8b:ad:2b:b1:05:d6:2a:ae:e5:b2:49:
                    d1:b8:7c:0d:5a:0e:fc:4c:f6:51:f3:f9:ab:32:ec:
                    ac:32:d1:19:e6:b8:2f:54:95:26:a2:9b:4d:e9:21:
                    64:43:c7:df:c0:43:0c:fb:35:98:57:ef:5f:b0:c7:
                    fa:60:6c:6e:74:f8:18:65:81:aa:83:7c:25:03:d8:
                    d2:c1:26:74:b9:d0:04:c4:3e:55:f2:61:eb:c2:8b:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:B6:22:F4:BE:25:C6:06:45:65:DE:14:52:B3:55:38:C2:61:C8
            X509v3 Authority Key Identifier:
                keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:59:68:91:9e:d2:3e:16:86:8a:e1:ad:4a:f2:f8:65:15:
         c8:4d:dc:b3:78:b3:80:0c:30:a4:2b:84:fb:46:d2:be:57:48:
         ac:6a:ca:19:78:9e:63:9e:aa:e4:16:04:70:ad:db:86:d2:2c:
         bf:6e:be:2a:60:17:0a:7e:ad:81:fb:05:d4:83:d3:99:f3:79:
         c4:1a:04:a4:0a:dd:43:23:80:6f:dd:cd:e4:ba:42:41:bd:ac:
         d0:4d:e4:64:26:7f:c2:c7:85:89:dc:e3:a4:92:b1:f6:2f:ec:
         eb:36:d4:95:aa:67:1f:2f:1e:f0:5d:22:0a:fc:9b:b7:67:59:
         6c:28:48:7e:49:5b:cd:a3:8b:b2:f0:fb:88:d1:d7:2a:91:40:
         4f:06:62:ff:c9:c6:ad:78:e9:ac:8f:3a:d9:5f:be:0b:67:3d:
         73:89:0b:1a:e7:8a:c3:21:5d:a2:41:63:bb:f6:25:bb:02:4e:
         b0:84:a0:5d:5b:a3:a7:99:99:0a:15:6a:2f:8d:23:bf:e9:56:
         13:28:a8:46:2f:d1:02:23:99:09:53:a4:1d:47:0f:1d:11:30:
         a5:03:36:b7:87:e5:24:ec:85:31:d3:54:55:9c:02:3f:52:d5:
         1f:d1:e0:b7:73:ba:00:d9:be:24:fb:57:74:b1:a2:82:02:5f:
         4b:6e:54:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE
NEEzOTE2OTIwHhcNMjYwNDE2MjMxMjIxWhcNMjYwNDIzMjMxMjIxWjAYMRYwFAYD
VQQDEw02OWUxNmNkNS05MmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpdFcDA60oTilmQZIm9oxWJ4+b3nyqI96CzwJ2ZutdFfyopZpBEhj0SWXG7+
R+ZQBSLiwk1hR+EWs/5DC9f2l366m7VEr8h4dVXB3UKKHKqVtuhAfOeV63600w47
GCw/AswCph4lHFVait8oTN0B0hBPimsAmNu5drR1iQinyeO1bHTinZYdz1tSGYIa
sDbWsxpWxQyUVY+rQ9Yiosri7lU5PnIF+ZhRi60rsQXWKq7lsknRuHwNWg78TPZR
8/mrMuysMtEZ5rgvVJUmoptN6SFkQ8ffwEMM+zWYV+9fsMf6YGxudPgYZYGqg3wl
A9jSwSZ0udAExD5V8mHrwovIgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2NtiL0
viXGBkVl3hRSs1U4wmHIMB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw
RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr
eHE1c0pJbE5CUG5VbzVGcEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK5RZaJGe0j4WhorhrUry+GUVyE3cs3izgAwwpCuE+0bSvldIrGrKGXieY56q
5BYEcK3bhtIsv26+KmAXCn6tgfsF1IPTmfN5xBoEpArdQyOAb93N5LpCQb2s0E3k
ZCZ/wseFidzjpJKx9i/s6zbUlapnHy8e8F0iCvybt2dZbChIfklbzaOLsvD7iNHX
KpFATwZi/8nGrXjprI862V++C2c9c4kLGueKwyFdokFju/YluwJOsISgXVujp5mZ
ChVqL40jv+lWEyioRi/RAiOZCVOkHUcPHREwpQM2t4flJOyFMdNUVZwCP1LVH9Hg
t3O6ANm+JPtXdLGiggJfS25UiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:29:17 2026 by rpki-client