Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File:                     UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier:          E3uDLALJFLZED244QvxfPM6hOOMrJlNRsME7u/EUqw4=
Subject key identifier:   8F:DB:3B:92:EE:B0:CD:8D:19:A1:D5:3A:42:B3:E0:AD:71:EC:A5:C4
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer:       /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial:       19D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number:          19D1
Signing time:             Thu 16 Apr 2026 16:19:02 +0000
Manifest this update:     Thu 16 Apr 2026 16:19:01 +0000
Manifest next update:     Thu 23 Apr 2026 16:19:01 +0000
Files and hashes:         1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: sH4VDIOkXsySiA+olj9aJ1YCTPyFznLxAAMV1desHM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6609 (0x19d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
        Validity
            Not Before: Apr 16 16:19:01 2026 GMT
            Not After : Apr 23 16:19:01 2026 GMT
        Subject: CN=69e10bf5-2bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:eb:31:78:33:b3:1e:86:37:14:0e:3b:85:
                    b7:3b:af:6c:1f:75:5d:25:e7:45:af:08:84:a8:ee:
                    a4:00:fb:a4:c4:ad:a6:c8:ac:c3:b4:d8:5a:27:fc:
                    00:a0:57:00:eb:e5:54:c6:4c:ea:af:2d:f8:4a:c8:
                    ee:fa:24:db:54:6f:1a:70:44:db:0e:19:e8:2b:21:
                    c8:d2:9e:02:85:d8:02:64:65:23:00:38:29:72:26:
                    1c:0a:3c:6b:93:0f:11:e4:6f:46:34:13:da:87:93:
                    87:7b:da:5f:68:ef:36:75:dd:cc:14:14:69:bf:c7:
                    ad:7e:3e:25:d0:f5:c1:eb:a6:9d:3e:e8:1b:e5:0f:
                    9e:11:0e:15:49:b5:70:db:d3:07:c8:5b:ef:3f:80:
                    02:d7:eb:c5:1c:5d:7a:27:b3:64:61:eb:1b:fe:1c:
                    85:08:06:d9:4a:8d:73:35:5b:33:6b:ea:6e:30:9e:
                    ba:4a:e1:90:7f:3f:79:a7:e1:8f:0a:a5:b6:22:af:
                    60:c7:dc:21:0d:29:5b:22:67:13:60:9b:2b:60:72:
                    89:ce:7c:a5:a1:5f:4a:61:f9:1f:a7:a2:f9:19:3b:
                    00:db:59:00:4c:ee:87:a3:6a:42:e7:6b:fb:0d:9a:
                    fb:c6:6f:11:9b:ec:ae:20:86:31:72:a9:a9:0f:e3:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:3B:92:EE:B0:CD:8D:19:A1:D5:3A:42:B3:E0:AD:71:EC:A5:C4
            X509v3 Authority Key Identifier:
                keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:39:b1:79:8e:0b:6d:4c:b8:c2:7b:b5:0f:2b:bf:a3:d7:
         3f:21:3d:bf:f0:8b:21:97:42:0e:5e:4f:5a:b1:48:e4:8b:f4:
         04:36:b8:db:4d:30:ee:f3:48:60:05:48:70:b3:9a:29:b1:51:
         70:c0:82:d5:af:57:21:d1:92:5c:05:65:d7:58:8a:e3:46:f1:
         4e:13:44:da:a9:92:41:6c:3e:75:f5:ee:0a:38:4f:57:98:03:
         65:d2:03:3a:b2:d6:9f:75:7d:1d:c4:7d:14:29:99:04:2f:e4:
         b5:ec:99:f0:0d:20:0a:bb:37:b7:10:99:04:e7:46:cc:dc:d5:
         05:07:5f:a0:bd:50:46:a0:92:48:65:bb:e0:73:d6:bd:ef:6e:
         b5:c4:b7:d3:e7:03:71:8c:a4:2c:77:0d:cc:9d:f0:c5:b7:4e:
         f5:50:e7:72:78:9a:d2:29:93:3c:f5:81:ee:42:c2:82:01:71:
         66:82:27:61:b7:9e:1a:be:41:01:58:7c:3b:42:2f:c7:63:10:
         ce:e5:a7:1a:da:9c:be:cd:eb:13:df:53:d0:7d:b8:30:68:66:
         f5:20:1a:dc:41:6f:75:08:e7:a5:e5:1d:76:4e:52:e1:fd:95:
         58:61:c5:39:2e:d4:a6:7a:06:58:c1:a4:6d:f1:b6:e1:2d:1d:
         02:c2:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:12 2026 by rpki-client