Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File:                     Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier:          OAVYlMQpepvEBl6UhO8IuOGNdWkbO052duNsbkh3LUY=
Subject key identifier:   14:9E:EB:C7:55:36:68:71:16:4C:35:0F:93:DA:1F:CD:74:D8:E1:63
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer:       /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number:          036E
Signing time:             Sun 19 Apr 2026 00:46:33 +0000
Manifest this update:     Sun 19 Apr 2026 00:46:32 +0000
Manifest next update:     Sun 26 Apr 2026 00:46:32 +0000
Files and hashes:         1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: y8cRxZaz8TIpfhfTp/ELg12Ob2eqgD0AuSM3a119uCM=)
                          2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
                          rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
        Validity
            Not Before: Apr 19 00:46:32 2026 GMT
            Not After : Apr 26 00:46:32 2026 GMT
        Subject: CN=69e425e9-87e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:9c:62:31:1c:8d:d1:1b:09:c9:c6:28:4e:
                    b2:f2:a9:bd:56:4c:15:00:fd:00:84:77:5d:d2:21:
                    3c:fd:7d:2f:08:35:7a:0a:e5:53:7d:1c:33:8b:a4:
                    28:73:9c:82:46:bb:c6:d9:a9:fc:d1:7d:5c:0f:2d:
                    92:c6:86:23:8c:85:81:86:82:c3:98:23:2a:b6:85:
                    15:f9:3b:bf:2f:d6:46:ac:63:72:7a:49:f1:81:5d:
                    94:08:1c:e0:af:d7:13:61:c9:f2:dd:cb:bd:78:ff:
                    1c:50:3b:d7:06:e3:e7:a1:9c:5a:86:9a:43:5d:9d:
                    f5:70:bb:92:6e:11:b2:92:3e:31:98:30:80:41:d0:
                    ae:bd:30:4f:6f:ab:2b:2d:4f:0d:03:f6:46:61:1d:
                    30:bb:7c:1f:2c:2a:78:9e:80:d9:94:3b:ad:15:58:
                    52:e3:4b:ef:07:fa:6e:af:5b:9e:b8:7e:ff:ec:6c:
                    90:18:1b:77:22:11:ef:53:cc:a0:6a:36:5f:06:cb:
                    f8:db:c0:6a:9b:bb:81:72:8b:7e:08:04:58:de:6e:
                    34:8c:9c:9d:28:58:df:e3:29:71:17:f6:cd:12:f1:
                    32:60:30:48:07:d9:ff:f9:d5:2f:66:cd:08:98:de:
                    0e:9e:25:e6:0e:75:a2:23:18:67:1c:bb:2e:64:c6:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9E:EB:C7:55:36:68:71:16:4C:35:0F:93:DA:1F:CD:74:D8:E1:63
            X509v3 Authority Key Identifier:
                keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:a7:6e:5c:ec:7d:50:15:da:53:1d:31:07:be:cc:72:7b:
         f7:27:d2:fc:b4:b5:af:d4:43:ef:4c:87:63:db:27:df:ee:ca:
         43:8a:f7:bc:c3:0c:27:b3:7d:83:7e:a5:8f:a5:ac:e2:8b:9b:
         f1:5d:7b:de:b9:c3:90:66:fe:81:5d:eb:92:8b:68:e4:7e:aa:
         2d:f7:ff:03:0c:82:80:21:f4:2a:ee:3b:a2:3d:32:06:b9:da:
         97:2e:4e:b6:81:af:4d:29:23:e5:a1:d7:6f:7c:4b:fc:c4:db:
         b7:98:38:82:fe:6a:3f:95:48:cb:05:7d:27:fe:ec:73:4d:13:
         53:47:23:75:48:9b:a4:f4:f3:bf:4a:07:9d:8c:c0:38:12:17:
         73:9e:54:7b:87:12:f4:8d:c7:1c:2e:3b:2c:eb:64:7f:2c:51:
         4a:8f:d6:e6:02:4b:9e:97:53:d8:16:54:1a:37:91:89:cf:34:
         bb:dd:56:49:82:47:cd:56:4a:08:aa:2c:88:09:a6:7e:68:94:
         4e:fa:1b:1f:5a:c8:f0:a1:a8:18:c1:93:42:76:46:ed:04:55:
         74:66:08:be:7d:a3:a9:76:5d:a5:86:94:d9:eb:5d:66:58:a8:
         f3:f6:85:2f:1b:fb:c7:1f:89:f8:34:a3:a3:b4:00:24:57:79:
         f8:22:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:23 2026 by rpki-client