Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
File:                     UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json)
Hash identifier:          SQcUfgjMgjfSKs+EvHXgTCvlY1XexztvOaIJlD5Q6L4=
Subject key identifier:   1A:64:70:FE:70:12:A1:F1:5B:AD:0F:5D:01:D3:9F:04:96:C1:44:48
Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
Certificate issuer:       /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Certificate serial:       3556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
Manifest number:          353D
Signing time:             Thu 16 Apr 2026 14:45:11 +0000
Manifest this update:     Thu 16 Apr 2026 14:45:10 +0000
Manifest next update:     Thu 23 Apr 2026 14:45:10 +0000
Files and hashes:         1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: /HWklLojAfy7wbig+/VC5ZLs8zrOjy3KprlQRaTPVPA=)
                          2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: p/2uNWrvsoQCe3Fz5EtEFh3Vm41+SYB3tWpnLf8PUUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
                          rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13654 (0x3556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
        Validity
            Not Before: Apr 16 14:45:10 2026 GMT
            Not After : Apr 23 14:45:10 2026 GMT
        Subject: CN=69e0f5f7-d44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:ef:b9:ac:d2:c8:84:47:40:6a:e6:89:27:
                    b4:00:91:2a:d3:80:da:ff:06:69:78:02:c7:f0:5e:
                    90:8c:e2:37:4d:58:03:5d:5b:7c:73:78:d9:38:dc:
                    51:dd:76:0e:26:7f:17:d6:34:8b:70:4c:67:44:6d:
                    72:b1:1b:8a:d6:f0:c7:eb:d6:09:30:77:12:a1:72:
                    cb:57:c2:28:bd:8a:fa:03:8d:7d:7d:72:ef:39:a6:
                    ba:45:1a:f6:81:3d:34:ca:dc:de:61:69:af:95:c5:
                    21:e5:04:92:e2:48:46:2b:4e:01:13:84:77:cb:21:
                    ae:33:07:93:27:7d:c1:e0:79:25:48:35:64:38:fa:
                    9c:0f:84:48:5d:37:32:cb:ed:75:86:a3:7e:af:e9:
                    2a:6b:19:5a:b5:2f:5f:49:1f:96:c5:1d:f9:81:f2:
                    ca:83:ae:22:c7:3b:a8:d5:e3:b1:37:84:1c:1a:22:
                    bd:37:94:11:20:50:92:9e:48:fa:ec:ff:4c:be:19:
                    73:ef:4a:76:fd:c4:0a:4b:81:55:ee:d3:b4:49:9d:
                    ed:21:f6:b4:60:36:2f:1d:68:f2:e8:82:46:39:41:
                    37:88:51:ec:d8:04:ab:3c:7f:f1:aa:d0:58:51:4a:
                    9d:ce:f4:da:13:7f:33:6c:8b:18:e5:94:53:bc:33:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:70:FE:70:12:A1:F1:5B:AD:0F:5D:01:D3:9F:04:96:C1:44:48
            X509v3 Authority Key Identifier:
                keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9f:9a:30:3e:dc:b9:85:38:8b:a0:dc:d8:cf:c5:ba:83:b6:
         c9:67:fd:73:7e:69:e9:12:e2:91:de:af:38:a2:2f:e5:87:d7:
         08:27:42:4a:43:1e:12:44:b4:2a:80:60:83:f5:51:73:cf:27:
         a2:bb:e5:e9:33:fb:69:c4:e8:3f:c5:98:10:9e:44:43:e1:30:
         35:5b:2f:f6:be:b7:14:ac:d7:8a:7b:3b:9e:3e:d9:ff:52:38:
         76:a9:ae:23:c3:4d:71:4f:9b:2c:c4:0d:25:a9:d7:7d:9d:e4:
         78:4c:b0:92:6a:ff:c8:c9:37:9e:17:ed:84:d5:18:6c:c2:34:
         0d:e5:27:95:df:eb:93:e5:22:42:50:48:18:96:10:73:50:f0:
         de:32:b2:6c:eb:96:c5:a8:49:ff:90:93:24:79:39:af:83:1f:
         96:4c:af:42:58:45:0f:bc:6b:9d:96:7a:f9:43:c0:6c:86:09:
         0a:1b:1d:b1:21:4e:00:e8:8d:ae:f1:d9:f4:3d:bc:7c:c5:da:
         d8:97:4e:52:57:96:ed:73:86:d5:fa:30:17:ac:b1:d9:78:9d:
         97:03:6b:e8:d1:46:7d:c4:ea:16:dc:fc:c9:d6:b3:63:3f:af:
         89:7a:92:de:d4:76:eb:9f:dc:10:26:3f:88:84:aa:4a:09:6c:
         2d:e9:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:05 2026 by rpki-client