Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier:          q0sIG5VUAPutPsCLkS0oNB4iHYg2KpttjuH1ajAIkiI=
Subject key identifier:   6E:73:C7:D9:3F:61:37:E4:F4:34:CA:0B:71:79:07:D5:09:D8:83:CF
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer:       /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number:          0257
Signing time:             Fri 17 Apr 2026 02:03:24 +0000
Manifest this update:     Fri 17 Apr 2026 02:03:24 +0000
Manifest next update:     Fri 24 Apr 2026 02:03:24 +0000
Files and hashes:         1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: Xk3tTigeXkap03/AnOrQNpEmm8DnqvFqmXNbQLX7Xz0=)
                          2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: dfQicEx83KamzRMByyNJg2fEEP+DRBaHeaYlTc5tSSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Validity
            Not Before: Apr 17 02:03:24 2026 GMT
            Not After : Apr 24 02:03:24 2026 GMT
        Subject: CN=69e194ec-2e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:5e:20:1d:bd:48:11:94:a7:54:60:6c:5e:
                    ff:be:cd:3c:2d:b3:90:31:d7:d7:79:04:dd:b8:9c:
                    aa:8a:b7:b2:11:a3:05:b4:37:4b:75:c2:15:24:16:
                    42:35:42:0c:28:0a:26:d3:08:7f:d1:9f:76:b2:c0:
                    06:51:4e:da:1d:d6:74:ae:33:88:ca:85:ca:53:61:
                    17:4c:ac:60:24:ae:c3:e3:86:6f:87:89:03:ea:2d:
                    cd:df:e1:27:d0:6d:13:ab:52:cb:6b:1c:75:30:9d:
                    49:63:fd:fa:21:27:5b:be:8a:90:b3:52:b0:17:f4:
                    28:33:a4:64:4f:6e:c5:36:c1:9c:90:e5:f8:ed:fe:
                    5a:1e:74:ad:88:1b:81:5c:12:dc:c7:93:26:39:32:
                    f1:5b:17:89:11:f3:97:14:44:aa:30:e7:1f:9e:4b:
                    56:cc:ff:3d:c8:26:18:cb:a1:ac:cd:c6:97:6b:6d:
                    1d:73:32:99:da:b3:18:79:c3:3a:b2:59:ad:7d:bc:
                    ee:a8:67:27:99:17:ef:52:fd:21:10:25:2c:06:45:
                    9f:b1:c1:c3:03:82:fb:06:b7:83:c0:61:48:23:b5:
                    ee:58:86:39:65:d5:37:8b:00:1b:46:70:d1:19:29:
                    6d:a0:4a:12:e8:e7:0d:36:13:ea:44:a5:1d:28:16:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:C7:D9:3F:61:37:E4:F4:34:CA:0B:71:79:07:D5:09:D8:83:CF
            X509v3 Authority Key Identifier:
                keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c0:d4:23:22:aa:6e:c5:34:0b:f8:4c:3d:b6:84:8c:0e:4f:
         f5:69:19:f6:3f:23:83:34:a7:4a:70:a8:99:49:6e:9f:36:d7:
         ff:7d:4e:50:26:43:4e:9e:41:05:a5:04:56:61:e4:e7:80:cd:
         2a:96:5e:77:ca:20:bd:2d:4b:1b:fe:e9:2d:12:42:98:e4:0e:
         c3:9f:0d:e6:32:fd:40:15:33:6a:7a:6d:42:f7:b8:c3:d2:ea:
         bd:55:a5:18:54:2b:10:46:4e:b8:8f:77:8d:bf:d3:a0:6e:f5:
         a4:77:6a:79:da:64:db:6c:c7:22:72:d4:b0:14:a3:99:60:d9:
         ba:e6:b0:9c:ea:14:b6:e1:f6:17:30:d9:31:f3:76:81:ae:42:
         5f:0b:82:1f:19:f8:ef:bc:15:1d:e7:2e:d5:07:95:d9:07:58:
         ab:57:21:09:cb:7c:b6:1d:0b:98:ea:a4:8a:7a:25:bc:4f:f4:
         4a:f7:3d:c3:33:13:e5:a9:e9:ed:23:1e:f3:1e:55:4f:5f:f2:
         07:00:83:15:49:af:97:c4:35:e0:ec:12:c5:ed:8b:f4:98:fa:
         4c:eb:51:e4:ce:88:27:58:d2:bf:75:0f:5e:30:3c:7e:96:de:
         fe:44:96:0e:6f:bb:db:e5:0b:06:e4:b8:ee:65:c2:db:da:d4:
         c7:43:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:14 2026 by rpki-client