Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          ZsJ3a3jZc1Bp2zxtXZ8wWaEk6A7r9zzlj8b1BO/uO+Q=
Subject key identifier:   42:B6:F6:4C:CC:AD:3E:B8:B9:FE:45:ED:E8:12:F3:FD:5C:E4:6A:E1
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1A04
Signing time:             Thu 16 Apr 2026 16:21:23 +0000
Manifest this update:     Thu 16 Apr 2026 16:21:23 +0000
Manifest next update:     Thu 23 Apr 2026 16:21:23 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: Jb/AsBkhJBJNMtDR6Rn5hgvutERXua7pTlEA9XdqPu0=)
                          2: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: xTvz/yps8vEycKM//nqlnS4ox9bS9MQ57m0G0j3M6AE=)
                          3: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: hFWF9lfVPT/OyTzdVJzJyrHvTWCjIwiA+KMrKU4YqSU=)
                          4: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: WkOGv0z8Ach2j5QKTGVdZSS4odRu7QjJXvA4xXQ5j6o=)
                          5: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: sbI32dMx96QI+Wi62W/45tSZM80fUbaJGeJFssGV9fY=)
                          6: 21730760B3A411F0B1142735C4F9AE02.roa (hash: wGPJw8ZliwkIBnCBo8VYgVbtlsaUb9p9JmAcRlsLNUI=)
                          7: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: bJsvmUyY4RkQ9FdjlARrJUmiaMImRmXsWePN2NAKgqM=)
                          8: 3003BB4EB3A411F0B8845739C4F9AE02.roa (hash: 8kZjJfE5pI5U07OBtYa4V/xyWj0ZIzuRisNkfVOEOCo=)
                          9: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: NtX2eRx6m9cXHVNSq5ktUCiNpQ4Z5Y/tKPABtSLiW/I=)
                          10: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: JEcn/9B8Awu/7FN0JbgiVmV0IQuJy4AWOfY9DwppJBc=)
                          11: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: lGTRILhEhDPLWRonyW8b0jYuBpwifzJ2fmgZ5UrgD3U=)
                          12: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (hash: kiTijfwuDJBjSDruEwl19WUyZNT5RsPyE5yzdyDzuKY=)
                          13: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: w5KK0dpPJkSroJtQqR7K+fP2tpqQLY4TbQ+zuXDn5l4=)
                          14: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: 2IX9G4OV8Ryb3IfNLa83GKbrkZZU9ZFrDQ7HXBTkjwY=)
                          15: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: MxNMu33nSxH3nkySgYna6TFMgCrTGm9llS5odYJxI1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6855 (0x1ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Apr 16 16:21:23 2026 GMT
            Not After : Apr 23 16:21:23 2026 GMT
        Subject: CN=69e10c83-bf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:5e:09:fe:aa:d2:7a:42:5f:f0:30:99:73:
                    b5:0f:13:60:96:04:f1:b0:1f:bd:32:ea:90:15:99:
                    70:88:c8:30:f0:06:af:ff:37:31:bd:e2:7e:82:ea:
                    5f:07:aa:68:f4:bd:e9:a5:a3:00:2f:dc:ab:e7:c5:
                    04:06:49:eb:87:03:cc:6b:27:ff:ef:f1:57:d2:a9:
                    32:50:5b:7e:1f:ec:4a:08:b7:06:a6:31:2b:dd:e2:
                    29:29:23:d7:1b:a0:4d:67:0b:c5:e4:ae:56:3e:1b:
                    2d:e0:c6:63:02:3e:b9:99:bf:90:e2:cd:2b:ac:1b:
                    53:6e:97:64:7f:90:8b:b2:78:1f:37:4e:23:66:52:
                    86:bd:90:50:84:3a:9c:33:2c:0d:01:6c:a9:0a:33:
                    be:ce:8a:b0:e3:3d:b3:ee:c2:ec:d3:b6:4c:69:7f:
                    d3:a9:81:45:61:85:61:af:72:0f:0b:cd:d7:3c:b5:
                    91:5a:77:8e:1c:3d:22:c3:d9:76:e8:f7:8b:38:df:
                    b8:e7:43:8b:e8:6f:f4:e2:9d:89:15:e5:7d:ac:d8:
                    3b:b3:75:48:9b:ab:fc:47:cf:9d:69:cc:40:1d:84:
                    52:a8:e9:f4:a5:81:67:a6:3b:50:b2:7d:d2:fa:7d:
                    32:5f:da:ae:55:3c:c2:fe:06:2d:ea:33:76:02:cc:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B6:F6:4C:CC:AD:3E:B8:B9:FE:45:ED:E8:12:F3:FD:5C:E4:6A:E1
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:48:b7:21:f1:9f:d8:d9:ad:92:cb:1c:8f:ef:6a:5f:c5:
         b7:06:a3:01:04:34:dc:6d:db:df:9a:4e:0a:b7:2f:6a:3d:f0:
         37:76:86:b8:51:5a:d1:a4:75:88:c1:74:5c:0c:47:ba:30:ab:
         cc:98:d5:4b:cc:b4:07:07:21:72:f5:73:28:f0:1f:18:b3:fb:
         a1:1f:15:ae:ba:1d:9e:77:f0:0f:bf:a8:06:52:2c:2e:cf:ac:
         16:14:6f:f2:8c:4c:c7:a7:75:8f:d3:9f:3f:fc:fc:86:0d:1f:
         a3:b7:f6:ad:1d:5e:f8:42:e0:69:74:14:21:c4:37:b7:71:72:
         43:b7:d1:f7:e0:a5:4c:f1:1c:8b:72:4b:76:66:93:14:3a:3a:
         5d:69:77:5b:e2:fa:a5:df:d0:b4:02:61:f3:f8:00:90:0b:89:
         c6:7c:ad:3f:63:ea:a6:2b:a9:7d:4e:ed:8f:36:8c:7e:a0:db:
         78:b3:af:6e:0d:73:9e:d6:e4:6c:f7:e5:10:b0:1f:37:ec:03:
         2a:3f:98:dc:9b:e4:eb:f7:9c:c5:5a:c5:f0:a7:03:7f:98:33:
         48:ea:69:32:7f:40:99:c5:47:b5:d3:ea:ec:ac:8c:87:3d:fe:
         13:db:2c:08:99:34:eb:60:83:57:0e:a8:21:87:c3:7c:e5:13:
         dc:9f:7b:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2
RjhFRDkwMDUwHhcNMjYwNDE2MTYyMTIzWhcNMjYwNDIzMTYyMTIzWjAYMRYwFAYD
VQQDEw02OWUxMGM4My1iZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8iNeCf6q0npCX/AwmXO1DxNglgTxsB+9MuqQFZlwiMgw8Aav/zcxveJ+gupf
B6po9L3ppaMAL9yr58UEBknrhwPMayf/7/FX0qkyUFt+H+xKCLcGpjEr3eIpKSPX
G6BNZwvF5K5WPhst4MZjAj65mb+Q4s0rrBtTbpdkf5CLsngfN04jZlKGvZBQhDqc
MywNAWypCjO+zoqw4z2z7sLs07ZMaX/TqYFFYYVhr3IPC83XPLWRWneOHD0iw9l2
6PeLON+450OL6G/04p2JFeV9rNg7s3VIm6v8R8+dacxAHYRSqOn0pYFnpjtQsn3S
+n0yX9quVTzC/gYt6jN2AsyfYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEK29kzM
rT64uf5F7egS8/1c5GrhMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC
ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkFENy9GOEJBQkFDQThCODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAw
enp6UFU2dmZodDV2anRrQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuJpItyHxn9jZrZLLHI/val/FtwajAQQ03G3b35pOCrcvaj3wN3aGuFFa0aR1
iMF0XAxHujCrzJjVS8y0BwchcvVzKPAfGLP7oR8VrrodnnfwD7+oBlIsLs+sFhRv
8oxMx6d1j9OfP/z8hg0fo7f2rR1e+ELgaXQUIcQ3t3FyQ7fR9+ClTPEci3JLdmaT
FDo6XWl3W+L6pd/QtAJh8/gAkAuJxnytP2PqpiupfU7tjzaMfqDbeLOvbg1zntbk
bPflELAfN+wDKj+Y3Jvk6/ecxVrF8KcDf5gzSOppMn9AmcVHtdPq7KyMhz3+E9ss
CJk062CDVw6oIYfDfOUT3J970g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:28 2026 by rpki-client