Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File:                     uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier:          sErwgzG4MR11T5VKjvIuuJUVbB0fN9BcjvI5uOuFinQ=
Subject key identifier:   8C:E0:E7:AB:7B:C9:6F:58:DF:B2:76:C7:2F:EF:A5:60:1A:3D:E5:76
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number:          C0
Signing time:             Wed 15 Apr 2026 06:30:42 +0000
Manifest this update:     Wed 15 Apr 2026 06:30:42 +0000
Manifest next update:     Wed 22 Apr 2026 06:30:42 +0000
Files and hashes:         1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: VIrODIdhDHipdUfURJDMI41vyqgMEAeFciD0tP/9Jzs=)
                          2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: prE9EyvOyNfHIglYsxqj47xctVFyrjvR30YVs38FCp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Apr 15 06:30:42 2026 GMT
            Not After : Apr 22 06:30:42 2026 GMT
        Subject: CN=69df3092-eaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:16:a7:d0:e8:c2:b0:b1:5a:64:57:0a:68:
                    67:67:e8:5c:cc:ab:1c:2c:a5:e1:ab:f7:8e:73:c7:
                    1c:54:71:45:96:8d:cf:3c:2b:d3:e8:ae:e2:ef:11:
                    58:f9:f7:cd:20:79:8a:ac:eb:a2:39:04:e6:11:96:
                    d3:a8:9d:67:9c:fc:79:c4:d0:d9:2b:b7:99:6f:55:
                    ca:21:97:6c:0b:8d:5d:e2:24:97:99:1d:36:55:9b:
                    b7:bb:c6:77:16:9e:87:e4:55:62:e9:40:dd:8f:74:
                    08:b3:5b:46:20:32:cf:ca:13:7f:d9:65:31:ea:4a:
                    ca:4e:61:4a:88:93:48:a1:95:de:7c:3d:72:6c:71:
                    ff:12:fa:d2:14:64:db:d3:c3:f1:f1:e6:75:c7:8c:
                    13:c6:ae:c7:73:f5:e9:3f:95:43:d7:c9:67:ed:40:
                    17:f6:53:f4:3e:1e:6b:af:16:a1:9b:af:1f:b6:bf:
                    91:9f:38:f8:71:2b:75:d4:bb:b4:fe:6e:6d:49:09:
                    09:6b:08:65:8a:fa:c5:ad:19:69:bc:d8:2b:de:f3:
                    de:a0:3b:94:ee:0e:45:10:2d:8d:df:7a:6f:79:b6:
                    aa:a2:44:15:da:84:01:a2:23:22:88:75:55:c8:06:
                    b7:d5:97:45:10:c2:db:8b:b7:e7:e2:a2:72:5a:e9:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E0:E7:AB:7B:C9:6F:58:DF:B2:76:C7:2F:EF:A5:60:1A:3D:E5:76
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8c:a1:e7:8d:eb:71:ba:3b:62:b3:48:e3:31:62:78:da:4e:
         3b:40:33:5b:31:3d:b1:86:bf:0b:54:08:03:70:1c:dd:e3:1d:
         48:26:9a:4b:dd:6e:99:9e:f5:60:65:2a:e1:b1:0c:99:c3:33:
         d3:fe:d9:b1:07:67:85:b7:85:0c:f4:8f:22:5f:a0:ef:47:fa:
         ec:88:5f:5b:47:d2:2d:55:3e:f4:54:c1:83:96:70:ae:b1:f8:
         72:38:6d:80:4b:d8:fa:0c:e4:81:15:83:91:09:bf:c0:30:23:
         4d:29:42:a5:5a:5b:8a:9e:af:12:00:2e:ac:e7:a5:9a:73:cb:
         17:ea:5c:d9:09:2c:84:78:35:fa:1f:70:26:d7:b3:4a:b3:5f:
         2e:a7:c8:1f:3f:69:ae:1d:77:37:fc:3a:68:4b:e8:ef:62:3f:
         ad:7d:31:ce:ff:a0:81:d3:ea:3e:63:3e:b8:96:ff:eb:15:24:
         0e:54:79:71:2c:7f:5a:26:2d:19:05:c9:aa:69:67:26:1a:88:
         76:2f:27:ea:de:50:60:25:28:79:04:78:a9:b8:0e:84:5c:03:
         89:2e:0d:2e:71:5d:92:9c:2f:f7:b0:5a:52:0a:88:15:6c:9d:
         f4:07:9a:0d:c2:16:03:b7:81:98:f0:c4:16:bc:bf:2e:07:21:
         ca:37:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:13 2026 by rpki-client