Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
File:                     UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json)
Hash identifier:          qqispTYPICDSTe2ZQTJwkB9aazgOI8SNLfvz0YluvyE=
Subject key identifier:   3E:A2:9A:0E:46:98:1C:F2:54:2B:4A:64:09:11:6B:9E:30:C7:56:66
Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
Certificate issuer:       /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
Manifest number:          0809
Signing time:             Thu 16 Apr 2026 21:04:32 +0000
Manifest this update:     Thu 16 Apr 2026 21:04:31 +0000
Manifest next update:     Thu 23 Apr 2026 21:04:31 +0000
Files and hashes:         1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: GhOnEykbGUyUPMxHtYoixr+/peBtlD5fZpks0ewKO/0=)
                          2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: Fs+wJCtSlXLyDLA5Jgh5KCmg3uh+8nfqlZjrLNA7VBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl
                          rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
        Validity
            Not Before: Apr 16 21:04:31 2026 GMT
            Not After : Apr 23 21:04:31 2026 GMT
        Subject: CN=69e14ee0-4491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:00:8c:f3:88:a8:7c:95:3b:61:16:4b:c4:
                    cb:7e:1b:90:8e:d7:1d:68:16:e0:da:18:e4:ab:31:
                    a4:74:6c:2e:f2:e1:24:cc:e4:21:28:d6:bc:cd:24:
                    16:5f:6e:e9:02:1a:6c:82:ba:51:2e:39:a8:bd:50:
                    c6:07:cb:ca:a4:2a:89:1a:6d:39:03:e7:5c:5e:05:
                    85:4e:d5:e2:71:43:5a:ce:b2:7b:de:28:ea:19:1e:
                    b4:05:12:eb:db:16:48:04:ac:d7:2e:73:e9:93:9f:
                    4b:fb:ef:bf:29:01:79:c7:40:42:1d:fc:b0:2e:f4:
                    0e:ed:da:6b:6f:3b:c2:90:65:35:97:59:9c:7c:98:
                    49:09:27:a7:e8:2c:28:82:e7:94:83:f6:22:bc:1e:
                    a3:40:d5:68:44:d5:c5:4d:98:18:99:3f:fc:d9:c2:
                    81:bf:50:c7:46:bf:64:5d:82:6e:a1:72:f7:bf:1b:
                    4f:33:64:d8:cf:64:bd:e3:d2:df:14:15:cf:1f:15:
                    a0:6c:82:c7:8e:ef:8d:e8:da:11:ea:6e:f3:5a:20:
                    3c:e2:53:d8:e0:55:d9:b8:99:86:7c:db:5a:32:08:
                    db:18:da:37:d0:58:be:bd:9e:8c:b7:b5:bc:89:42:
                    7b:bb:03:78:85:83:14:04:98:6c:03:ff:04:a5:32:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A2:9A:0E:46:98:1C:F2:54:2B:4A:64:09:11:6B:9E:30:C7:56:66
            X509v3 Authority Key Identifier:
                keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:dc:54:c8:98:96:d9:2b:e0:20:d6:8f:19:6a:4f:9c:c0:
         5e:7a:de:2f:70:72:89:ae:9c:dd:22:7b:e0:89:9b:42:b4:bd:
         f9:6a:d2:35:7e:64:cb:ea:9e:70:41:b2:0b:f5:2f:05:4e:d4:
         f6:26:3b:80:a0:ea:95:12:8e:2f:49:65:79:3d:46:2e:7f:24:
         b0:85:ab:43:b7:76:fa:89:4d:83:12:f8:11:14:98:97:83:1b:
         96:a4:cb:a7:41:d5:b0:58:68:33:ce:e7:63:fd:d2:c9:33:8c:
         bf:32:3d:d5:dc:8e:d0:af:2e:e1:aa:27:68:4c:aa:d0:16:27:
         36:4c:1b:cd:84:8c:59:3b:96:4d:e7:20:2b:0c:08:f3:20:78:
         65:60:22:81:42:a5:c4:6f:98:81:76:59:a4:0d:09:cb:c5:0e:
         41:0e:e5:b3:78:e6:52:70:ef:3b:29:ab:7a:33:10:63:95:ca:
         a4:18:d2:15:3c:41:55:aa:8e:12:28:b8:ce:f1:f6:07:50:24:
         2f:8c:03:9d:68:31:d0:17:08:fa:d5:1c:79:fd:96:b3:2a:18:
         0d:6c:03:71:da:d7:c7:18:0c:57:54:7d:5e:45:28:7d:5a:59:
         f6:af:86:3c:f5:ee:29:c0:24:b8:62:fb:ed:c7:2e:87:b7:82:
         bd:44:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:11:17 2026 by rpki-client