Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
File:                     -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json)
Hash identifier:          ucMmsw54pNf1sAURaDZHdBeU3CAGsU/A/BrCDfFSICI=
Subject key identifier:   C7:D6:DF:6A:9C:97:81:49:DB:74:CE:05:A5:EE:43:B9:94:75:D4:54
Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
Certificate issuer:       /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Certificate serial:       0CE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
Manifest number:          0CD4
Signing time:             Thu 16 Apr 2026 18:19:50 +0000
Manifest this update:     Thu 16 Apr 2026 18:19:49 +0000
Manifest next update:     Thu 23 Apr 2026 18:19:49 +0000
Files and hashes:         1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: eqAW0lgnr/+ZJ/EjJSv+b5FAPlLpBAcEJPYBsCZ+grc=)
                          2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: D0GEA8Hwvgy327FVQRo8UrdiZ6su6qYeHtaXvrPJkes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
                          rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
        Validity
            Not Before: Apr 16 18:19:49 2026 GMT
            Not After : Apr 23 18:19:49 2026 GMT
        Subject: CN=69e12846-ea77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:47:9f:17:f0:44:c4:d6:91:3f:f7:1f:99:
                    96:3e:38:65:b4:9a:e4:fb:27:ac:cf:af:05:cf:8f:
                    cb:ca:ae:dc:aa:fc:6e:b2:90:0a:0f:59:97:29:f9:
                    b8:fb:fc:5c:81:09:92:d9:42:bf:f3:85:23:4f:6c:
                    35:12:e1:29:aa:8d:19:b0:de:d0:2f:67:eb:07:87:
                    f4:4a:29:7e:93:7e:02:74:fc:40:9e:8f:86:ea:59:
                    56:a5:c8:50:70:50:b6:45:01:2b:ee:3a:ee:37:13:
                    aa:4e:47:56:f1:90:1a:12:cf:9e:d6:88:a6:56:1e:
                    c9:dd:64:05:1f:b2:dc:24:b5:a1:14:1a:a0:7c:24:
                    7a:a6:af:da:9e:59:ed:04:96:6e:0c:1f:54:2e:6b:
                    61:d2:6f:42:b6:5b:a4:5d:5e:52:47:9d:40:5d:d6:
                    b8:d4:ac:63:2e:9b:39:af:5a:f3:c5:e8:ff:c5:1b:
                    eb:9f:38:db:f7:b7:85:91:ef:7b:f0:dd:5a:7d:5a:
                    5b:36:13:a4:e1:78:8d:e0:6e:e2:64:4d:f1:47:a9:
                    e1:ea:ea:74:21:54:29:63:6a:ed:ef:17:e9:b3:06:
                    b8:f6:7f:68:fb:28:d6:b4:e7:40:57:93:f2:8d:6b:
                    87:dd:a9:fc:ba:3e:d4:b0:b9:f7:5a:44:20:e9:a4:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D6:DF:6A:9C:97:81:49:DB:74:CE:05:A5:EE:43:B9:94:75:D4:54
            X509v3 Authority Key Identifier:
                keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:10:30:ff:f2:e1:3d:34:b0:36:02:41:8c:b5:6c:a3:78:
         a4:8e:a6:90:5b:65:5a:fa:a2:4a:e6:db:14:af:60:1d:47:6b:
         94:1e:6b:97:a9:ff:5d:2a:01:e4:c7:45:c3:2e:78:8a:47:a3:
         ca:de:93:9f:04:b8:7c:8c:45:61:5a:f6:1c:34:7e:72:2e:55:
         96:7e:b4:85:4a:cc:01:61:67:83:a9:6a:df:cd:e8:81:91:3c:
         f9:fd:b7:46:84:5f:59:82:bc:60:fe:cc:77:63:39:4d:f4:43:
         ad:c3:76:8c:a4:d6:46:ab:35:98:03:3d:07:10:c0:7d:c6:7b:
         35:2e:b4:9b:49:90:06:9c:39:0d:21:db:41:31:97:02:19:40:
         25:15:c0:78:f1:d4:22:5f:43:09:25:a2:db:e5:41:f0:0c:48:
         7f:77:7b:1a:ab:26:bc:5a:29:7e:90:4f:b3:64:05:9c:4d:80:
         16:cf:d2:83:a3:46:e7:8a:41:6d:94:0f:48:a7:75:55:ea:5a:
         f6:23:4e:b6:4d:89:ab:e0:6e:16:a1:05:a6:c3:8e:50:07:08:
         b1:a3:0f:be:3e:33:20:6c:e3:3b:b7:ad:fb:0f:32:a4:cd:2a:
         7c:d5:c0:53:a3:10:56:b1:03:73:55:18:95:39:16:8c:42:5e:
         f1:3e:dd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:23 2026 by rpki-client