Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File:                     MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier:          H34uXtE+pose0+0xGzyh5IKLbtrYLDRe8R2GMgScE6w=
Subject key identifier:   22:9A:E9:97:5B:A4:C0:F9:EA:B5:41:9A:E0:D8:26:D8:F1:4C:A2:10
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer:       /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial:       0B75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number:          0B55
Signing time:             Sat 18 Apr 2026 19:08:39 +0000
Manifest this update:     Sat 18 Apr 2026 19:08:39 +0000
Manifest next update:     Sat 25 Apr 2026 19:08:39 +0000
Files and hashes:         1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: b5BfvQgi1Zlt9ZyS5Vwyva3V+TwYf5GH2bGVlVeeAqY=)
                          2: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: 4QsDMDAa6fXs4bWa6QotOZsAqIzC29boJI/VGeWpJB8=)
                          3: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: GN6iKRgWjN9l+X5yS7hj3dibra4NHS61ozVmkt7C+TM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
                          rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
        Validity
            Not Before: Apr 18 19:08:39 2026 GMT
            Not After : Apr 25 19:08:39 2026 GMT
        Subject: CN=69e3d6b7-b5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:f4:c8:90:09:c1:88:3c:52:14:76:47:dd:
                    fe:fd:ed:34:57:8a:5b:2d:ce:6c:2c:a0:10:b5:01:
                    75:9d:e8:bf:7d:5a:77:11:02:a1:d3:27:85:4b:9a:
                    e9:5c:01:45:bd:df:4d:3a:e1:f6:51:e1:e2:22:94:
                    f1:fd:bf:7d:78:41:7f:55:f4:57:d4:b9:47:dc:fa:
                    4f:31:98:05:c6:2c:b9:83:18:68:77:c5:90:ce:6b:
                    a4:10:35:62:9a:22:b3:93:45:55:1b:a8:1a:90:4f:
                    c0:aa:5d:25:e8:a5:be:e2:9d:31:6b:70:4f:33:c7:
                    cc:22:28:96:bd:e3:54:b3:9f:3d:39:6e:8e:2e:75:
                    fb:f2:0e:fb:42:0c:f9:db:87:b6:ae:b9:30:40:33:
                    fc:3b:8a:23:eb:57:c4:3f:06:24:6a:17:26:9d:fa:
                    09:ad:d5:bf:0e:8f:14:20:b2:27:1c:ac:2e:70:6a:
                    db:fd:5b:a5:84:fb:8d:d6:0f:3d:0e:1f:73:63:68:
                    af:9d:57:a3:06:93:46:a5:b7:55:06:53:8c:7e:5c:
                    db:6d:a2:4e:60:6f:6b:62:ab:91:61:b2:92:e2:8f:
                    60:93:b7:06:39:51:d5:cd:5a:5a:07:4f:5c:e9:0e:
                    77:2c:dc:44:fe:17:fa:85:44:63:5a:0d:66:13:a4:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:E9:97:5B:A4:C0:F9:EA:B5:41:9A:E0:D8:26:D8:F1:4C:A2:10
            X509v3 Authority Key Identifier:
                keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:27:5b:c9:75:6c:a6:7b:88:9e:67:30:2d:6b:84:fb:df:bc:
         c9:01:9a:a9:b0:f7:83:28:ec:d3:b2:76:a6:ab:18:83:66:aa:
         68:8e:53:b5:93:45:b9:f1:0b:ce:0b:d0:84:87:55:19:70:69:
         cc:96:50:61:e7:3a:33:7e:20:b5:50:78:c5:17:5f:fc:a2:ab:
         98:3a:19:cd:30:2d:7d:ff:bc:13:c6:80:03:de:41:24:cd:a2:
         87:99:75:40:2e:c9:78:40:ba:72:1e:28:43:49:52:90:e4:ef:
         8b:67:00:df:a8:41:3a:5e:a1:59:49:07:50:6c:04:9d:56:c8:
         47:4f:0c:f8:81:24:e2:d5:1f:8e:5d:3e:3e:16:8c:d4:49:53:
         89:8a:16:29:9a:e4:c7:e9:86:23:25:77:50:1d:5d:e7:05:55:
         24:8e:46:73:a4:d1:23:58:02:07:16:d4:a6:2a:12:38:7a:21:
         8c:b4:ea:7d:e6:a6:c1:15:6f:5d:12:7e:b3:29:73:8c:5c:e6:
         61:8d:a8:1d:3b:f9:c9:02:9f:fa:28:98:78:6e:83:b6:de:c0:
         2d:9a:a9:b0:ec:ec:e7:a9:92:3d:50:4f:aa:8b:fa:7e:1b:f6:
         c9:6d:36:7e:02:e9:ff:60:7f:3f:3f:57:7f:30:5d:2a:29:38:
         62:51:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:40 2026 by rpki-client