Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          y2ORchp71jOdCLeAtKOCx67rXO2F1wWG5fj6bNk62zs=
Subject key identifier:   5E:6C:3F:D5:BF:38:BD:1A:03:7E:92:DC:10:15:22:BD:7E:98:DB:CE
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          06D2
Signing time:             Thu 16 Apr 2026 22:16:32 +0000
Manifest this update:     Thu 16 Apr 2026 22:16:32 +0000
Manifest next update:     Thu 23 Apr 2026 22:16:32 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: pF3FvD7P22NAOhbi7ULKnojbFq9dLLl5IK/F91g2f7g=)
                          2: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: jX0r26D7eTQAmi/KLRW0k/yca+QffQLV4qa7gOF/TdI=)
                          3: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: L6hABI5kNyEHBTZ/cEYXuskG1lk2aNB/iJZmFIuNgZo=)
                          4: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: UEUSncbvcRYXE+6AzGdqUvKwJ/u7rXG3RrB+0He5Cnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Apr 16 22:16:32 2026 GMT
            Not After : Apr 23 22:16:32 2026 GMT
        Subject: CN=69e15fc0-fe7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:3f:c0:88:42:0d:e2:ed:65:48:38:dc:0a:
                    a6:dc:14:89:77:f3:6e:8c:b5:71:46:0b:15:d1:9c:
                    a7:41:4b:d4:aa:02:e1:e7:fe:14:e4:3e:05:84:15:
                    58:3b:49:2f:c5:62:41:97:cb:82:55:4f:60:4b:5d:
                    4b:28:3c:5e:68:f1:b9:1f:93:0c:bd:b7:bc:a9:42:
                    a9:91:52:a9:d2:3e:9f:f8:d4:7d:5b:26:95:06:8e:
                    87:da:d6:0a:67:9b:31:df:c7:4c:79:9a:26:09:7f:
                    87:d0:5d:b2:3b:f9:fb:64:1b:81:ba:e6:fe:8f:3f:
                    d2:68:bf:a7:b4:78:18:3e:67:6c:34:2f:0c:bb:c1:
                    2f:1f:f3:0a:b9:9b:74:a4:6f:bf:08:06:d9:2f:eb:
                    42:2f:a9:45:6b:b9:14:29:ec:45:9a:ab:b7:e8:04:
                    9c:55:4f:b3:e0:de:5f:27:c4:2c:5d:03:10:fd:13:
                    c8:2d:6c:31:5d:b8:c0:12:a2:e5:85:75:06:cd:1e:
                    aa:34:3c:6f:84:73:ae:4f:d3:b1:ae:f6:eb:68:94:
                    71:45:67:06:9c:b2:14:d8:32:30:4d:23:48:3a:19:
                    9b:f8:93:74:67:72:73:a8:e6:81:c1:8c:8a:b3:19:
                    2e:49:cf:e7:b9:b0:41:a3:94:b4:a3:66:d6:24:5a:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6C:3F:D5:BF:38:BD:1A:03:7E:92:DC:10:15:22:BD:7E:98:DB:CE
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:63:07:eb:5b:8a:b2:a2:84:fd:6d:af:40:34:17:0b:aa:8e:
         f3:77:b3:7d:cc:2c:9c:23:85:1d:eb:74:f2:b8:d3:d5:2c:3d:
         c5:e7:7c:7b:11:2c:61:63:9d:14:09:35:b8:31:e4:81:d7:72:
         58:89:7a:40:13:70:5e:58:a8:4d:42:c3:82:bc:69:80:63:39:
         86:2c:03:f0:ef:e6:86:2b:92:ad:bd:5f:31:d7:24:82:0b:63:
         ab:c0:cf:fc:30:a7:04:c5:3a:dd:96:dd:e3:d5:66:19:35:e4:
         33:95:06:e1:d9:3c:ff:49:19:c4:22:db:b6:de:e5:d9:94:2d:
         8e:22:3c:76:eb:4a:f1:f7:9f:ab:41:37:bf:34:ce:20:47:2f:
         ee:f0:47:8b:48:43:42:11:46:c2:2b:2d:6d:54:62:04:f5:65:
         50:74:77:3b:f2:cb:04:5f:b5:8c:45:88:b8:4b:93:50:b3:47:
         6d:4f:f0:78:8b:9a:53:10:3e:2c:f2:d7:f3:1d:a1:3a:8d:82:
         eb:5b:20:fb:d8:8f:f9:3d:f9:0c:5d:9c:01:a7:ff:1b:1a:25:
         b6:53:5e:0f:b2:5f:ed:e7:74:d3:ac:2c:81:e6:36:13:79:37:
         58:61:3f:f3:e7:2f:4a:97:12:72:51:76:a9:d6:19:de:ca:2e:
         63:25:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:16 2026 by rpki-client