Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File:                     UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier:          GOtms8nic5mHg+vA57Y/QRbtyGsBiJd1YXDJX8s5fLM=
Subject key identifier:   7E:A8:8D:B1:4C:93:9C:51:1D:02:EF:95:4B:50:0D:59:86:07:85:7C
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number:          0186
Signing time:             Fri 17 Apr 2026 04:15:40 +0000
Manifest this update:     Fri 17 Apr 2026 04:15:39 +0000
Manifest next update:     Fri 24 Apr 2026 04:15:39 +0000
Files and hashes:         1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: O9Jyv50EytmtgXDEyn6Fw/oqQND3ob/YlBXpkfxlHJc=)
                          2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: gqtTgTa/5S3Sd4RP8oatcAFjD99BV64g0IQPdSlFBu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
        Validity
            Not Before: Apr 17 04:15:39 2026 GMT
            Not After : Apr 24 04:15:39 2026 GMT
        Subject: CN=69e1b3ec-928e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bf:79:f3:4a:ae:27:db:93:17:12:e0:d2:09:
                    bd:bb:36:33:22:ea:3c:fb:6b:8d:d2:69:3b:6b:c3:
                    2b:2c:94:a2:cf:55:c4:0a:2e:ba:07:4a:87:37:89:
                    27:02:a6:65:74:99:ba:e8:94:9b:a8:8e:48:34:2e:
                    1a:af:4d:d7:a5:79:39:23:1a:03:50:fa:7e:c4:6e:
                    9b:a7:60:1f:13:54:8b:93:38:01:34:e3:8c:33:02:
                    23:23:22:40:04:f0:78:95:12:e0:41:11:48:c0:62:
                    09:38:e4:b0:42:69:76:5e:5d:55:ae:87:af:f1:2d:
                    92:5b:b4:2c:92:50:5b:c5:2e:8d:5c:5f:5b:7b:a0:
                    5d:2b:1b:07:c3:c5:f5:eb:cf:72:c3:53:aa:ca:a4:
                    0f:70:89:a1:7b:ef:c2:6a:ec:02:6c:9a:b4:cd:67:
                    e2:d9:c8:17:c3:57:bc:85:b4:fd:b7:9b:02:5d:c5:
                    84:ad:6f:31:4c:95:95:81:6c:52:e2:fe:ca:54:d1:
                    f0:6c:99:5d:77:4b:64:b7:ed:26:7e:bc:9c:15:78:
                    ae:c1:77:f8:79:6c:67:be:61:9f:b6:2c:94:e3:aa:
                    f5:8f:85:fe:bb:64:9d:62:a7:29:88:f2:7a:10:b5:
                    c7:cb:2f:30:d9:5b:32:19:51:af:97:41:3b:dc:ad:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:8D:B1:4C:93:9C:51:1D:02:EF:95:4B:50:0D:59:86:07:85:7C
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:10:e3:16:0f:24:bc:82:48:ef:74:90:4b:d3:08:62:28:
         f6:22:a1:38:29:28:a2:a4:7a:14:70:cc:c9:9a:9d:2e:93:2f:
         17:26:11:e0:e5:82:65:37:35:89:90:ff:59:50:ef:6d:e9:be:
         d3:30:be:75:dc:48:72:e5:b5:3f:2d:be:61:b3:23:56:76:d8:
         38:80:c7:ab:78:b4:61:d4:66:37:28:5d:8c:c1:d1:47:1e:74:
         07:65:cf:17:f1:60:54:3f:42:32:ad:8e:18:e7:e9:49:cb:66:
         59:c0:a4:08:da:d0:11:9d:51:9e:e8:4a:f0:6a:62:6a:9f:d6:
         ea:e9:cf:7d:04:6e:20:a3:15:cc:2e:69:c7:df:d2:01:f4:4c:
         74:fb:05:4b:ae:45:bd:d3:93:82:60:4a:7f:85:1e:a8:d8:d5:
         38:79:d7:08:d0:fe:1d:22:25:a0:b7:a3:86:d2:b6:f5:d2:47:
         f4:eb:9f:58:c9:5d:2b:b6:3b:23:9c:d8:57:e2:5b:a3:eb:e8:
         94:d7:a3:81:c6:94:6b:51:87:92:74:7c:d6:a0:12:71:f1:0d:
         d6:95:34:d2:66:8e:05:f1:cd:af:23:d8:c2:78:1e:3c:f0:bb:
         56:29:70:f8:99:5e:ba:7a:55:b2:30:cf:10:bb:b6:b6:e4:2e:
         19:11:d4:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMxOEUxMTAvBgNVBAUTKDUwMEY5MjAwRUI4NkRDNUZEMDZEQjc4NkMwQ0VBNDUy
RDBDRTcyMzAwHhcNMjYwNDE3MDQxNTM5WhcNMjYwNDI0MDQxNTM5WjAYMRYwFAYD
VQQDEw02OWUxYjNlYy05MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkr9580quJ9uTFxLg0gm9uzYzIuo8+2uN0mk7a8MrLJSiz1XECi66B0qHN4kn
AqZldJm66JSbqI5INC4ar03XpXk5IxoDUPp+xG6bp2AfE1SLkzgBNOOMMwIjIyJA
BPB4lRLgQRFIwGIJOOSwQml2Xl1Vroev8S2SW7QsklBbxS6NXF9be6BdKxsHw8X1
689yw1OqyqQPcImhe+/CauwCbJq0zWfi2cgXw1e8hbT9t5sCXcWErW8xTJWVgWxS
4v7KVNHwbJldd0tkt+0mfrycFXiuwXf4eWxnvmGftiyU46r1j4X+u2SdYqcpiPJ6
ELXHyy8w2VsyGVGvl0E73K0cWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6ojbFM
k5xRHQLvlUtQDVmGB4V8MB8GA1UdIwQYMBaAFFAPkgDrhtxf0G23hsDOpFLQznIw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzE4RS82QTkwQUY4NEVC
RjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNGX1FiYmVHd002a1V0RE9j
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBLVNBT3VHM0ZfUWJiZUd3TTZrVXRET2NqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzE4RS82QTkwQUY4NEVCRjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNG
X1FiYmVHd002a1V0RE9jakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArJ4Q4xYPJLyCSO90kEvTCGIo9iKhOCkooqR6FHDMyZqdLpMvFyYR4OWCZTc1
iZD/WVDvbem+0zC+ddxIcuW1Py2+YbMjVnbYOIDHq3i0YdRmNyhdjMHRRx50B2XP
F/FgVD9CMq2OGOfpSctmWcCkCNrQEZ1RnuhK8Gpiap/W6unPfQRuIKMVzC5px9/S
AfRMdPsFS65FvdOTgmBKf4UeqNjVOHnXCND+HSIloLejhtK29dJH9OufWMldK7Y7
I5zYV+Jbo+volNejgcaUa1GHknR81qAScfEN1pU00maOBfHNryPYwngePPC7Vilw
+JleunpVsjDPELu2tuQuGRHUZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:48 2026 by rpki-client