Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File:                     UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier:          1zO2aSWEQqCrqf6K3rcideYwKOTrYMvqq8pyEnAHiKs=
Subject key identifier:   82:70:6B:77:81:65:85:54:CD:27:D2:1D:B0:AF:F8:7D:9B:F8:5B:DE
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer:       /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial:       1074
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number:          1069
Signing time:             Thu 16 Apr 2026 17:19:02 +0000
Manifest this update:     Thu 16 Apr 2026 17:19:02 +0000
Manifest next update:     Thu 23 Apr 2026 17:19:02 +0000
Files and hashes:         1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: B7rWdLZfW7evm3FoLvMirTbJGjMzO1+EOFa9JP7FNmk=)
                          2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: jDSrI3tiBLuiSSNFQkVfzJSHxL6tqKpe8Wp+KW0eJyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4212 (0x1074)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
        Validity
            Not Before: Apr 16 17:19:02 2026 GMT
            Not After : Apr 23 17:19:02 2026 GMT
        Subject: CN=69e11a06-0f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:71:8c:f8:ee:fc:7a:11:a4:32:3b:77:64:
                    10:bf:c6:e5:96:50:c2:41:80:71:c4:db:6e:9d:ad:
                    80:8a:2c:19:73:74:54:5b:c7:51:24:38:69:d1:60:
                    7d:9c:9c:d4:38:1f:1c:11:dc:97:d9:4c:b4:37:0a:
                    29:ce:e5:53:66:db:66:d5:0d:52:ee:52:e7:3b:8b:
                    61:b4:da:db:67:a3:83:8d:2a:9d:d6:cc:26:b8:7e:
                    4f:be:6b:98:82:3d:0c:5e:03:ee:ca:a0:49:3b:18:
                    e1:20:78:76:61:4b:2e:fe:5a:de:52:1d:9c:04:aa:
                    9a:4d:e5:13:26:8f:bc:16:42:ae:d3:b9:74:70:70:
                    57:98:fe:7e:b0:f6:74:89:01:a2:23:af:68:a6:b6:
                    46:e4:04:64:5d:a3:95:46:e7:56:3c:72:6b:fd:a5:
                    da:3b:07:3a:5a:94:98:8d:50:c0:52:ee:35:69:4a:
                    c0:5b:8a:cd:f0:af:53:37:14:e3:ec:63:d1:2e:0b:
                    26:92:e6:1c:41:33:e5:12:d7:d8:f8:9e:32:92:23:
                    78:50:d8:eb:4b:85:de:49:a4:9c:a9:63:ab:f7:e3:
                    a7:9d:4f:a0:b1:e2:59:f6:25:19:86:15:a4:71:20:
                    95:50:5c:9d:10:c4:2c:df:bb:d9:5d:b6:ad:aa:99:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:70:6B:77:81:65:85:54:CD:27:D2:1D:B0:AF:F8:7D:9B:F8:5B:DE
            X509v3 Authority Key Identifier:
                keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8f:4a:f7:e8:e0:95:11:b6:3d:08:ff:74:3b:a5:16:0e:ed:
         70:c5:4f:1b:d0:d2:b8:84:49:5a:4b:86:6f:05:91:5c:62:ba:
         22:2c:bc:61:de:f5:58:da:ec:08:2c:93:0e:af:16:38:84:60:
         f6:dd:c6:9f:21:02:b3:8c:71:17:f6:bb:3e:0e:bc:fc:ee:bc:
         30:77:68:81:20:4a:a4:71:31:29:b7:b5:d3:a5:ab:4f:80:90:
         39:61:11:36:05:38:09:d3:73:d6:96:5b:e3:ce:cc:a5:06:14:
         8f:82:ea:cd:f9:e0:65:e6:73:29:ec:ae:94:fe:e0:04:4f:80:
         bc:4f:22:95:83:10:5b:46:e1:2b:d2:e5:aa:bf:42:4d:54:7e:
         93:04:25:27:63:6b:a3:6f:77:b4:0e:62:02:61:38:77:1d:8b:
         d4:8a:1a:f8:19:c6:a1:0b:e3:b8:2f:2f:74:39:3f:87:0f:65:
         97:2f:45:66:c2:c4:d6:d5:08:28:38:01:6f:24:a9:5a:27:e4:
         3e:96:61:36:cf:2b:c7:fb:62:ea:49:db:73:78:d7:eb:97:c7:
         90:81:fd:18:4e:a6:ad:55:e2:23:46:8c:9b:a8:4e:45:8a:b3:
         87:ec:8a:dc:62:f6:fc:47:25:f3:c1:ab:10:68:50:1e:13:20:
         ef:8b:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:53 2026 by rpki-client