Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
File:                     uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json)
Hash identifier:          vNM9SVK49NtL2kD099FfvezoURMksKyMzyCTcRsLOQc=
Subject key identifier:   68:DE:8A:D8:8B:F7:8F:DB:00:67:90:91:93:B4:51:BE:38:29:49:73
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Certificate issuer:       /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
Manifest number:          9E
Signing time:             Wed 15 Apr 2026 06:57:16 +0000
Manifest this update:     Wed 15 Apr 2026 06:57:16 +0000
Manifest next update:     Wed 22 Apr 2026 06:57:16 +0000
Files and hashes:         1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: tcjwAz1R6V7a6Aj7b/IiO6AlvE60wt7nYIDyzHthxD8=)
                          2: 48B17B5CB4CD11F094AF5C23C4F9AE02.roa (hash: 3dDTLwP/OlJ6lL+bKftpywhzpFsx4/+TC1PCWUv+oec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
        Validity
            Not Before: Apr 15 06:57:16 2026 GMT
            Not After : Apr 22 06:57:16 2026 GMT
        Subject: CN=69df36cc-59fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:d9:09:ae:af:ac:6a:bf:73:99:4b:34:ff:
                    86:dc:24:fb:f5:75:14:32:17:5d:0b:a9:38:8b:8a:
                    de:0e:a1:4c:40:4c:3d:2c:7a:9b:60:c0:fe:b8:cf:
                    57:b1:4a:ea:1a:6a:89:55:ca:88:96:b8:c0:ee:b1:
                    31:20:da:a5:a2:82:48:78:b4:6e:9b:39:58:11:ef:
                    99:f6:28:a2:e5:9d:3d:db:59:e0:3a:32:67:84:ba:
                    3c:51:41:35:d3:ea:a5:2f:c5:2a:53:2b:16:03:c7:
                    cc:17:0a:5c:26:12:ce:9f:dd:e0:a0:68:59:3d:c6:
                    a9:17:d1:a2:0e:78:a3:62:b9:a9:88:02:5b:b0:d6:
                    58:f0:47:a4:a3:0b:b2:fc:81:5d:86:34:ab:47:b9:
                    0f:81:aa:88:4a:52:b7:20:e9:ce:d6:4f:12:73:81:
                    e9:8c:39:73:bd:81:3f:ae:81:0e:c6:eb:b8:46:69:
                    22:f2:80:43:69:e5:8f:13:2e:cb:e7:c5:5f:de:55:
                    eb:85:38:90:b2:fe:59:dd:e1:1a:5e:2a:3e:88:a5:
                    ec:90:ec:a7:27:1d:36:b7:ff:6e:25:0f:c9:8c:df:
                    c4:7e:e5:20:8d:80:e4:28:15:0f:c9:2f:b0:1b:d7:
                    26:32:05:4c:4a:3e:e2:3f:52:6b:da:71:24:1b:82:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:8A:D8:8B:F7:8F:DB:00:67:90:91:93:B4:51:BE:38:29:49:73
            X509v3 Authority Key Identifier:
                keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:c3:98:2e:07:c5:2e:82:25:b7:87:78:53:79:49:fe:24:
         7d:e6:be:d4:f0:16:67:36:4f:1b:d2:77:5c:4a:60:71:48:19:
         d4:d6:a7:61:41:1a:31:c5:6a:ca:43:c2:58:7a:20:32:d4:a8:
         df:e4:d0:da:b5:d7:86:ae:2c:47:bb:56:64:fd:b1:f9:2a:12:
         06:09:7e:f1:34:b0:5b:0f:64:c4:cf:1c:bc:54:88:4d:83:f5:
         89:df:ba:6e:e9:2d:7d:e2:c8:ba:61:e1:d6:77:ba:57:c4:72:
         10:6e:ad:ca:74:98:6d:9a:3e:a2:82:56:2d:40:f7:5f:8f:48:
         c3:dd:b7:00:5a:71:9f:bf:9b:8f:77:fe:fe:08:33:06:23:fe:
         25:ca:5e:9b:c6:c0:83:f2:aa:16:0b:83:5a:de:03:f5:7a:af:
         a3:f3:4f:87:a1:e8:2e:f0:65:d7:2f:65:56:39:2f:7e:43:7b:
         a0:4f:9c:82:fc:1d:c8:f9:02:39:d0:46:53:93:80:66:5b:09:
         5a:6f:a5:c1:a8:91:7c:87:91:e9:33:2f:91:c6:ae:45:f3:86:
         fc:84:e2:bb:c0:b6:d8:06:5b:bb:79:aa:bd:c5:9a:45:cd:36:
         99:7c:73:00:9c:59:8e:19:7a:1c:5c:4f:43:c9:f4:49:34:61:
         de:1d:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:16:41 2026 by rpki-client