Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
File:                     U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json)
Hash identifier:          iq6fxdXnhfGNafxPOUFsNSGmHSg1aQauVInNKk+QdfI=
Subject key identifier:   EB:35:9B:C5:BA:8C:D6:2F:E9:22:B9:3A:98:B7:45:E6:CB:5B:C4:21
Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95
Certificate issuer:       /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
Manifest number:          010F
Signing time:             Fri 17 Apr 2026 05:44:43 +0000
Manifest this update:     Fri 17 Apr 2026 05:44:42 +0000
Manifest next update:     Fri 24 Apr 2026 05:44:42 +0000
Files and hashes:         1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: MSX/HzevvjnB63HprQPW5gHvH3ra5ZEQUQkiCF/YVOs=)
                          2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: iV/MInNHo2LobUXyb+9etutWIXIjmkHKsXN/PC7Q7A8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl
                          rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95
        Validity
            Not Before: Apr 17 05:44:42 2026 GMT
            Not After : Apr 24 05:44:42 2026 GMT
        Subject: CN=69e1c8ca-1605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:c3:af:aa:02:fe:bc:e9:a6:3f:4b:9d:db:
                    5e:33:f2:6f:35:be:1a:f3:4b:6a:a0:6d:a9:a2:4d:
                    2c:86:f9:9f:d7:84:f4:75:da:17:93:3a:3f:5a:9b:
                    c1:72:94:b9:d5:e1:35:80:24:b4:82:47:d2:55:f2:
                    5c:ec:6e:5e:30:fc:b4:3f:7a:12:28:33:0b:4c:fb:
                    14:a6:1f:a0:de:72:10:0a:c1:d5:fa:3d:a9:c1:c8:
                    05:80:8e:3b:e6:b3:d2:d4:48:ee:0d:32:87:77:5c:
                    c2:a0:91:d1:70:8f:21:4c:d7:36:f2:7d:9f:c5:98:
                    52:80:20:36:f7:fe:f7:ed:5f:45:6b:78:06:fc:e8:
                    53:83:09:82:ff:30:c8:d0:02:8f:a5:74:77:9b:c9:
                    fb:97:4f:07:0e:98:1f:39:9a:aa:54:26:64:92:9b:
                    23:2d:6d:6c:38:e0:4f:6e:89:d4:bb:26:c9:d0:ef:
                    9a:dd:4f:11:3e:b0:84:28:9e:88:b4:87:0e:96:dd:
                    30:8f:80:c3:aa:4a:ee:ec:56:b0:dc:93:d1:c5:2e:
                    d0:34:89:4b:98:12:62:77:5b:6b:61:e3:6a:69:be:
                    43:8e:07:21:f5:9e:a5:dc:6e:d4:4e:ed:f8:5c:ce:
                    d8:3d:92:97:e3:e3:fe:4e:bc:76:79:ca:bd:27:14:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:35:9B:C5:BA:8C:D6:2F:E9:22:B9:3A:98:B7:45:E6:CB:5B:C4:21
            X509v3 Authority Key Identifier:
                keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:ba:7e:ab:17:d5:f0:20:3c:20:df:9c:63:ac:c5:a8:2d:
         87:5f:ac:e0:17:4d:29:47:d2:66:6e:2f:05:85:d4:42:34:fc:
         d2:82:69:80:28:4c:d3:72:ef:41:77:f9:9a:f5:b4:f6:ed:be:
         1e:ef:eb:31:00:d6:c2:ea:37:b3:17:93:03:59:50:5b:6d:0f:
         be:7e:94:87:78:81:df:d1:d5:2b:a9:ff:1f:78:7a:da:b3:ff:
         a5:7d:f1:b3:69:1a:1e:99:89:a2:7f:45:77:09:f9:b2:ec:dc:
         59:a2:ad:23:c6:60:1b:01:e1:23:35:74:40:2c:d5:88:67:5a:
         9a:c0:4b:2e:b7:b0:99:b0:d7:47:67:14:a9:93:4e:93:a3:1d:
         f9:c1:6f:30:7c:5c:56:11:48:90:4a:40:9f:c8:cd:70:dc:71:
         8c:2a:54:84:02:de:a4:15:37:61:d3:4a:9a:aa:32:0d:c7:5c:
         8e:fc:65:31:2a:80:e2:06:de:7e:ef:76:f8:cd:fc:65:72:83:
         81:d5:19:11:a3:63:a7:e9:4d:ed:3e:d3:4d:27:bb:d0:52:a1:
         13:b9:be:ec:12:3e:89:cb:ae:af:c4:40:db:f4:99:3c:56:7a:
         87:b0:8a:78:93:80:28:64:ef:cb:4f:15:80:4a:a3:4b:18:b4:
         0a:f1:2f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:16 2026 by rpki-client