Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
File:                     u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json)
Hash identifier:          lwuyQZR9HpF1cbPfLv1wR+ixg+ZoEBof9IkqosxrQ7I=
Subject key identifier:   DD:F7:5B:36:5E:DF:39:E3:B7:09:16:07:59:63:52:8F:DB:45:D6:D8
Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
Certificate issuer:       /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Certificate serial:       0416
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
Manifest number:          0403
Signing time:             Fri 17 Apr 2026 00:23:39 +0000
Manifest this update:     Fri 17 Apr 2026 00:23:38 +0000
Manifest next update:     Fri 24 Apr 2026 00:23:38 +0000
Files and hashes:         1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: BkSUUcj/B90NE1b653WfWIllw774rir0Ub2I1d+J5Qc=)
                          2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: GCF/9VMFmjdFmy3bYTGGRnKSNfUmeGJXgemnhDHWC2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl
                          rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
        Validity
            Not Before: Apr 17 00:23:38 2026 GMT
            Not After : Apr 24 00:23:38 2026 GMT
        Subject: CN=69e17d8b-312b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:27:b9:11:b1:e6:14:82:56:73:47:60:50:
                    ed:b5:a2:96:fb:91:f8:44:b9:ec:b2:d1:69:b1:00:
                    58:b8:33:dd:f8:ec:45:d5:93:fa:d6:77:88:ec:ec:
                    ba:24:31:47:fe:92:43:36:48:30:43:af:3e:bd:72:
                    43:1e:95:fe:f8:08:5e:51:f1:8a:73:a4:9a:fa:2c:
                    b4:27:93:7f:73:82:f1:11:1a:43:e4:ac:61:cf:ee:
                    77:93:dd:3b:d5:f7:54:f0:36:98:64:68:fd:72:39:
                    5d:fb:6d:52:d6:cf:2f:2b:4e:24:e8:7e:1a:9b:b0:
                    61:e5:76:b7:ed:92:c3:fa:b9:93:3d:b8:a5:f8:60:
                    4e:d3:ed:af:b2:97:bc:2a:bc:cd:6b:92:77:37:53:
                    0b:ec:7d:d5:b5:7b:2b:97:8d:ba:5d:c8:12:39:81:
                    de:8d:b9:ed:5e:bc:34:11:d7:77:88:4c:30:09:a3:
                    03:07:08:b7:32:89:03:a7:c3:94:5a:da:fc:f1:6c:
                    0c:15:de:f5:d8:94:cc:05:3e:22:60:a0:19:ed:c0:
                    0d:f8:70:b4:b6:fe:be:c9:6e:26:89:e7:3a:c3:d8:
                    c4:07:a9:d4:35:94:a4:21:a8:60:85:57:4e:09:6b:
                    12:a3:b5:f2:53:f1:dd:d6:39:3d:ca:d5:9b:53:ba:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F7:5B:36:5E:DF:39:E3:B7:09:16:07:59:63:52:8F:DB:45:D6:D8
            X509v3 Authority Key Identifier:
                keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:f7:53:09:b0:7b:6f:b5:29:53:06:84:83:66:36:16:f8:
         15:39:ea:41:02:87:af:e2:92:c6:8f:f8:3b:24:f7:f2:77:3a:
         fc:a3:4e:55:e2:3b:bd:e7:3b:b2:a2:2a:a3:e0:fe:6b:51:1b:
         dd:42:47:bd:da:c8:ff:d0:7d:d9:a6:78:cb:06:1c:de:dd:f4:
         24:90:8d:63:37:4c:3d:ea:95:08:a0:cd:7b:83:e9:6f:41:ae:
         aa:29:7f:58:78:f6:37:e5:ee:37:90:44:d9:c7:bb:57:1b:5d:
         35:38:95:aa:0f:75:02:59:6e:9e:57:9d:40:8e:f5:00:3d:25:
         1f:de:74:34:cc:8e:06:4a:43:80:cd:25:6d:22:f5:28:6c:22:
         42:fa:bc:13:9b:9c:0a:0c:5d:22:36:35:2f:6e:f4:fb:f2:25:
         5b:35:e6:d2:2b:85:7f:9b:25:02:43:f8:2d:e3:74:30:04:c6:
         c6:91:e0:dd:60:2b:48:e3:aa:29:30:db:53:31:ac:8d:44:b2:
         f9:24:21:c5:fa:9a:c5:33:4b:8e:78:89:5e:47:7f:65:d2:ad:
         2f:04:4f:95:a4:20:a2:ef:de:9e:51:1b:aa:36:d1:77:db:90:
         c4:87:da:46:4c:19:71:2b:0b:33:52:b1:7c:e9:ba:31:c3:40:
         29:70:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:33 2026 by rpki-client