Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File:                     uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier:          SCtuQYcFTLriAGCXlcMSzalQX8ZhshVyHwInf45VPls=
Subject key identifier:   82:AD:14:16:25:71:13:1F:0D:A9:65:E5:34:E5:68:11:14:B2:69:5D
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer:       /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial:       038C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number:          038C
Signing time:             Fri 17 Apr 2026 00:41:22 +0000
Manifest this update:     Fri 17 Apr 2026 00:41:22 +0000
Manifest next update:     Fri 24 Apr 2026 00:41:22 +0000
Files and hashes:         1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: vmRgPSUs2+BYCQFdFvxdeXpWuMWnYGeDRFlbQbx33x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
                          rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
        Validity
            Not Before: Apr 17 00:41:22 2026 GMT
            Not After : Apr 24 00:41:22 2026 GMT
        Subject: CN=69e181b2-17c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:d1:d1:b9:6b:a9:5d:ba:ed:67:2c:06:bf:
                    fa:2a:f6:78:4d:f4:da:79:d2:65:b2:3c:12:fb:cf:
                    1e:ae:80:73:11:ea:df:45:a2:be:5b:2e:fb:fd:31:
                    bf:a7:90:71:f5:1b:ea:17:71:bb:76:fa:e1:ab:9f:
                    df:b8:1e:3b:d4:d3:71:40:6a:5b:e8:f4:8f:9e:c8:
                    d6:ee:7b:f2:70:d0:9d:a5:28:34:3b:9a:0b:a6:5d:
                    34:12:52:15:95:71:4d:00:75:70:43:8d:bc:94:ce:
                    91:72:24:9d:8f:de:7f:d8:db:96:4c:22:d6:95:ca:
                    70:86:9d:14:cf:5b:e0:02:db:bb:9e:88:da:bf:87:
                    19:6f:2c:9f:d2:06:4d:54:d0:49:8c:cb:04:a2:f7:
                    1f:5d:a9:85:4f:1b:5e:34:80:c1:27:5f:4d:32:0e:
                    75:fb:d1:87:98:e8:b2:6a:3d:f6:93:e4:58:60:1d:
                    d6:9c:6b:90:ec:34:6d:4a:e4:2f:1f:df:fa:68:ec:
                    75:81:ad:77:6f:04:9d:69:03:b3:c6:70:bb:9d:03:
                    ab:86:89:72:96:eb:7c:75:e7:ac:d5:3a:5c:80:b0:
                    49:b3:51:3c:8d:15:ea:de:91:fe:7b:1d:9a:5e:a5:
                    62:f9:76:66:3a:85:ae:62:02:e6:e6:db:02:b5:26:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:14:16:25:71:13:1F:0D:A9:65:E5:34:E5:68:11:14:B2:69:5D
            X509v3 Authority Key Identifier:
                keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:df:4e:32:59:93:a5:dc:5f:8a:8e:e0:3e:9e:e9:ed:10:10:
         2b:e8:90:2a:a1:db:10:cf:0e:f6:af:c8:5d:30:34:c5:3b:ed:
         18:8f:ed:70:90:76:c8:0c:aa:67:9e:6c:55:ee:56:93:a6:92:
         95:e5:1a:07:90:98:1b:42:04:aa:7c:dc:92:9b:f0:60:c8:5d:
         55:8c:39:91:a5:1e:92:25:f2:fa:7f:93:65:38:02:c6:87:0b:
         59:55:57:0e:a1:6f:18:03:fe:89:6f:d8:20:84:85:88:2f:af:
         3d:b8:66:b9:2d:37:f1:3e:be:ba:6a:96:a9:a1:72:1c:cd:89:
         72:28:6e:2f:72:b0:13:63:72:30:e9:0c:39:73:31:e1:1b:cc:
         6e:e0:9a:4b:75:81:7b:fa:74:1d:80:c3:44:d5:06:b3:90:88:
         98:ac:33:c9:65:7d:f0:29:19:08:6e:3e:ee:7f:aa:c7:3f:8c:
         70:90:e2:de:9f:20:67:8f:fd:a9:f8:68:a6:e0:32:b4:02:f8:
         f7:1e:ea:41:59:f0:f2:b5:d7:05:60:a0:cc:a1:5f:4a:de:bf:
         27:e7:37:65:09:f5:c0:a5:2d:47:2d:1a:47:c2:5d:7b:32:ab:
         ec:af:7c:fb:40:1e:08:6c:50:16:09:db:b7:c4:a9:a3:c7:25:
         59:d8:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:37 2026 by rpki-client