Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File:                     3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier:          jsldLQD3zUW7HkB26mHExpqpOtNfom3ajzzD6OH9Tk8=
Subject key identifier:   B3:B1:C0:C1:FE:84:B9:1F:40:F8:33:20:EA:95:58:D2:EC:E3:D1:74
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer:       /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial:       2AD1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number:          2AD1
Signing time:             Thu 16 Apr 2026 15:32:33 +0000
Manifest this update:     Thu 16 Apr 2026 15:32:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:32:32 +0000
Files and hashes:         1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: BfKjVhW3+hwJ/mef5ATfT5O2z2cW19z30f3EyZ1opzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10961 (0x2ad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
        Validity
            Not Before: Apr 16 15:32:32 2026 GMT
            Not After : Apr 23 15:32:32 2026 GMT
        Subject: CN=69e10111-ea09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:5b:e7:06:4e:5e:e1:3a:46:ba:83:b1:1d:
                    71:ea:6a:bd:9e:f4:c5:3c:6a:26:6f:bc:dd:b0:8a:
                    93:08:60:02:61:b8:8c:41:61:6f:ff:87:29:d3:bd:
                    06:f7:0b:36:24:84:85:3f:06:af:a1:b8:d5:5d:20:
                    2f:d1:d9:bb:86:de:fd:e6:9b:57:32:48:bf:be:cb:
                    02:99:39:dd:8b:63:ac:60:3f:31:b7:ef:78:fa:19:
                    9d:96:50:08:08:8e:30:d0:0a:42:81:02:b4:91:96:
                    35:8d:18:52:ec:8a:1b:f9:45:49:4d:a6:d5:ff:ed:
                    78:20:7d:6e:29:d7:cf:3c:23:55:34:80:3c:33:39:
                    b1:0a:32:39:6e:65:26:0c:3f:d1:bf:89:73:4d:f8:
                    45:6a:0e:39:e1:9d:15:c3:2d:16:26:47:d5:dd:c4:
                    0f:87:cb:df:a4:58:b3:6a:85:0b:b7:53:e8:68:2e:
                    f7:38:31:1c:6e:d6:98:14:75:02:da:a7:00:58:d5:
                    8f:59:42:83:f3:98:d5:89:5e:ba:91:78:6c:35:96:
                    a7:93:a2:72:a6:be:1b:23:69:b0:bf:97:21:a7:61:
                    c1:29:fd:db:ff:be:52:a5:0a:9b:a6:77:7e:a9:37:
                    c0:68:a7:b1:cb:9e:ef:f4:d2:b6:73:1e:d8:df:68:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:C0:C1:FE:84:B9:1F:40:F8:33:20:EA:95:58:D2:EC:E3:D1:74
            X509v3 Authority Key Identifier:
                keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:19:09:17:cc:23:e8:40:fd:8a:cb:8b:c0:fe:66:6e:3c:66:
         59:fd:54:92:1b:60:66:e9:98:b7:fa:c3:27:70:29:c4:c5:38:
         4d:f6:d2:8a:75:6c:4a:82:aa:3e:a0:fc:a0:c8:e0:05:91:fd:
         cc:bb:f0:59:d6:79:3b:8f:81:e2:53:ce:a9:cd:83:21:d0:9c:
         b7:e4:1b:ef:31:00:f9:ad:60:ea:08:f0:b3:bc:81:69:af:03:
         f4:c5:4c:ed:cf:df:da:a5:60:24:6f:10:bc:5d:33:82:d8:13:
         26:b8:95:a0:30:6d:0a:da:4b:96:44:04:f5:a2:b9:41:d9:2a:
         bf:03:4a:46:76:ee:99:88:80:f4:8f:80:0a:1b:8c:6d:78:88:
         a6:52:b9:bd:71:bf:2a:ea:78:10:30:04:7b:1d:0a:4a:f0:74:
         74:e1:82:1c:0d:9a:27:67:17:b9:c9:83:45:3d:b2:54:01:11:
         30:f5:8c:6b:bf:ab:cb:46:8b:72:62:4a:9f:ed:1a:c2:86:83:
         37:1c:6e:9e:f1:0b:02:7a:b9:49:68:e7:a4:33:38:28:4e:fe:
         27:c1:52:23:3b:70:02:ae:7d:d0:40:44:1a:84:e8:34:79:7a:
         a7:97:6f:64:66:21:3c:72:ac:d5:ad:33:22:35:b7:4f:ee:3a:
         27:2a:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:06 2026 by rpki-client