Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          YlsmSlHxZEOpNX/m3IkHefFIlNfG4qV8mPFo/+vvV+A=
Subject key identifier:   20:70:9E:83:28:0B:E8:77:17:52:B5:02:5F:C0:A8:78:81:75:B4:88
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       2139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          2116
Signing time:             Thu 16 Apr 2026 15:54:02 +0000
Manifest this update:     Thu 16 Apr 2026 15:54:01 +0000
Manifest next update:     Thu 23 Apr 2026 15:54:01 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: 5CWt/lJs6AxYY51ueXpKXgv4XMDDthmeQE92MfuhID4=)
                          2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ybHfR/5xx3UHYBd525TGkptsJesZi6Lna1QGzoVxLoo=)
                          3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: IX69yIubs1cdWLw+u1/cJ2ESvxKouHlRxob5F2MvTs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8505 (0x2139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Apr 16 15:54:01 2026 GMT
            Not After : Apr 23 15:54:01 2026 GMT
        Subject: CN=69e1061a-f59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:dd:08:1d:a2:d0:27:d5:11:c4:16:a7:91:
                    3d:d4:40:be:ea:3f:f9:5b:28:7e:78:95:25:39:b5:
                    b6:ed:22:48:66:5e:e5:16:0d:10:02:34:c2:b2:b3:
                    7d:d4:b3:db:06:80:da:24:f7:7c:1a:2a:fe:a0:15:
                    7b:b2:90:ff:0e:28:51:59:2e:e7:4d:30:cf:c6:76:
                    42:d8:6d:15:2b:7c:5f:e4:bd:bd:0b:fb:07:7d:81:
                    22:65:9c:0b:f9:71:53:7d:17:3a:ad:2c:77:dd:58:
                    07:61:7c:b5:d6:be:23:13:cd:7c:cb:22:24:98:c6:
                    86:9c:b7:20:65:2f:1a:07:f9:c8:f4:6a:73:30:6e:
                    34:d0:06:c9:d0:04:7d:f4:7f:0b:7d:5a:fa:6d:ee:
                    39:f2:4d:5c:65:e0:06:96:0f:8c:40:5a:3d:dc:8b:
                    16:0a:24:b7:63:f3:7e:31:f8:98:30:55:6b:ba:eb:
                    a6:3d:59:05:1c:00:d3:b3:52:ff:2a:d9:fd:9d:bf:
                    45:c9:e3:40:bf:ab:10:4d:2b:be:88:a5:08:0b:bc:
                    19:de:da:8f:d5:8c:42:7b:53:ad:c8:7c:67:79:f8:
                    df:a8:6b:80:3f:77:6a:e0:8b:c6:22:20:bc:eb:10:
                    89:a7:91:dc:48:f7:6a:cf:4e:75:2f:b1:18:22:e4:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:9E:83:28:0B:E8:77:17:52:B5:02:5F:C0:A8:78:81:75:B4:88
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:96:4c:9a:2e:a7:c6:0d:cb:d3:76:5a:a8:46:b7:47:cd:
         a2:9a:09:ab:49:22:dd:9b:5e:58:50:59:a0:2d:52:77:e1:a3:
         0f:bd:c2:26:ba:53:ea:50:93:29:bb:b5:51:1b:30:06:33:99:
         9a:64:dd:f3:64:c5:c3:1f:8f:f4:da:7b:3d:52:ec:34:39:5f:
         b8:e4:2b:e0:c3:57:b0:b8:af:7c:fc:b7:a9:da:72:25:6b:87:
         a5:0d:37:e5:d7:16:26:fb:54:d8:38:68:25:21:6b:b3:cc:2e:
         f2:6f:06:c2:00:b7:15:03:64:82:ec:8d:aa:02:b5:58:9c:09:
         e1:4e:5f:84:37:db:ff:e9:04:bf:fc:35:e8:45:5e:b4:15:33:
         e7:04:71:2e:df:e0:dc:13:dc:71:6f:e0:e9:e9:5b:55:b1:ab:
         15:04:a5:4a:d7:da:e3:bf:01:da:ab:2d:01:4b:15:3e:4c:ae:
         7a:1b:b2:c4:fa:23:44:66:5a:b0:aa:3f:f4:26:54:5e:47:82:
         94:74:20:87:7b:08:c2:f0:ca:f4:03:0a:93:41:9f:28:19:d9:
         a2:01:b1:e3:3f:bb:b5:f7:8d:80:11:41:99:40:9c:ed:84:dd:
         6b:43:16:c4:c4:96:7f:fb:4f:32:72:68:e3:31:bb:90:eb:df:
         fc:4b:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:03 2026 by rpki-client