Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File:                     R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier:          fFoz0ifMpmL08C13eX+Y02hDQJPHJOzHS+NkkYHUG9w=
Subject key identifier:   38:60:DA:4F:E1:46:62:05:6C:33:78:38:2C:BF:B9:F9:C3:B4:DF:D5
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number:          0197
Signing time:             Fri 17 Apr 2026 04:03:48 +0000
Manifest this update:     Fri 17 Apr 2026 04:03:47 +0000
Manifest next update:     Fri 24 Apr 2026 04:03:47 +0000
Files and hashes:         1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: rvZY5wd31MsbTC+rES8QmNDEFIYfEBGkAyk8hhRAsF8=)
                          2: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
                          3: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: Apr 17 04:03:47 2026 GMT
            Not After : Apr 24 04:03:47 2026 GMT
        Subject: CN=69e1b124-99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:d2:bd:ca:62:bc:8a:3f:2d:41:ff:05:61:
                    cc:88:83:3c:1f:b1:2e:51:aa:34:15:df:bd:9a:77:
                    28:af:78:45:92:e2:7f:bb:02:04:2a:3f:82:78:6c:
                    a0:6e:6d:23:dd:33:4f:95:7f:11:80:9f:97:38:0f:
                    12:32:c6:fe:05:ed:88:b1:bc:45:37:16:80:c8:7b:
                    84:b4:20:aa:54:47:a7:45:a1:6c:a9:21:ad:1d:c3:
                    01:ea:d7:c7:e2:28:9c:7e:81:18:3a:3e:5b:49:82:
                    a0:57:51:09:46:41:b5:42:c3:8e:cd:c8:d4:9b:5c:
                    d8:82:05:6a:1b:8a:b1:94:bd:5c:ea:73:fb:3a:b7:
                    6d:2e:2d:47:43:72:0f:4a:5c:02:6f:3d:d6:e2:ec:
                    d6:eb:ac:31:f6:eb:28:20:02:c0:4e:a8:c7:f4:92:
                    f9:45:57:09:14:4c:f4:ea:e3:4b:8d:ad:22:0f:f3:
                    49:fc:6b:4e:91:3b:1a:74:50:30:e2:6d:b7:d8:22:
                    bc:66:9e:9c:d9:9e:3f:98:ae:5a:1c:6c:a9:f1:a9:
                    09:d9:e8:e1:b7:5f:92:7f:09:2e:36:9f:8b:fe:c6:
                    b3:13:de:67:86:94:a3:de:ab:4f:2f:df:2b:b2:4f:
                    bd:83:ba:56:51:72:dd:2c:2f:80:05:13:eb:72:d9:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:DA:4F:E1:46:62:05:6C:33:78:38:2C:BF:B9:F9:C3:B4:DF:D5
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:65:f9:75:9a:b6:24:8d:38:55:5d:84:4f:e8:e5:87:51:
         0b:2e:69:b5:f6:b9:c0:40:2c:00:b9:2b:58:0d:a9:a8:a1:3f:
         5a:60:30:3f:58:77:9e:69:4f:fa:cc:86:b8:6b:e0:82:41:85:
         85:2c:bf:e2:c9:a0:8c:65:d3:b6:2a:96:74:51:9f:d9:fe:00:
         0d:ed:b1:01:38:47:85:b1:ef:3a:6e:22:13:1c:55:41:a8:0c:
         a4:f8:44:96:6a:d3:c0:1c:63:25:54:c3:2f:95:41:f3:96:df:
         f7:2e:8f:34:cd:55:fd:ba:d1:06:0a:14:47:66:0b:04:e5:ba:
         45:f2:31:d5:c0:d4:15:8e:85:a9:ce:ed:a9:c5:0d:ec:08:43:
         df:1b:b2:e4:a4:1a:5e:55:15:37:9b:0d:cc:79:12:54:3e:01:
         37:89:ae:53:f3:2a:66:c0:7d:5b:21:ff:dc:1d:71:86:7b:88:
         b4:e4:d1:8e:d3:c0:34:8d:f2:33:1e:68:ad:86:e0:dc:4d:7e:
         70:86:1e:96:6b:a4:33:31:11:8e:82:b7:ed:f7:c1:dc:6a:e3:
         f3:13:ec:4c:35:04:4c:52:54:37:e7:3b:c8:6b:c6:00:15:a5:
         9b:77:df:23:f0:fb:1c:a8:04:70:65:33:4a:dc:4c:3c:3f:1e:
         5e:95:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:33 2026 by rpki-client