Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
File:                     rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json)
Hash identifier:          POOO3AD9NnNqaa8jO5eE5wInXATxXVwdJuhTEWfy22A=
Subject key identifier:   01:AD:36:92:54:ED:C1:CC:9E:93:4F:8F:5B:F3:E8:3D:24:0C:EB:BC
Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2
Certificate issuer:       /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
Manifest number:          022A
Signing time:             Sun 19 Apr 2026 02:25:43 +0000
Manifest this update:     Sun 19 Apr 2026 02:25:43 +0000
Manifest next update:     Sun 26 Apr 2026 02:25:43 +0000
Files and hashes:         1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: CKgukUBj2vxcK2xNWiW7gd9qL2rdKElDuyYWs4Zq4lA=)
                          2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: nXaJEL2Mrq8fU+6wPKkU0sQrXeAgVj/w4qTZTobSWEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl
                          rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
        Validity
            Not Before: Apr 19 02:25:43 2026 GMT
            Not After : Apr 26 02:25:43 2026 GMT
        Subject: CN=69e43d27-7f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:03:73:57:66:24:99:d6:0a:9a:b8:fb:df:
                    c6:28:76:60:ed:cc:95:41:c1:29:8a:55:a4:3e:73:
                    c9:2d:be:45:67:76:9a:7f:38:7a:79:90:68:a5:44:
                    93:96:2f:32:dd:53:73:c9:28:2f:19:89:06:f4:c1:
                    ea:75:2d:3d:a7:66:f4:a3:80:a0:8e:5c:1f:32:1b:
                    ca:f6:82:e4:b1:bc:3e:f9:1e:8d:8c:eb:70:80:f8:
                    26:9a:0c:ae:60:e3:ae:88:27:e6:cd:93:41:3f:34:
                    52:54:5b:30:7d:db:2e:d0:0b:87:9e:14:4b:80:7e:
                    09:2e:92:9c:d5:b4:b1:c8:16:1f:79:31:c6:8d:9f:
                    aa:57:df:c9:ee:c9:d4:b2:e6:99:a4:19:51:5b:45:
                    bf:c3:ef:a6:6c:1d:9d:be:42:a5:4e:e8:53:a0:1f:
                    ca:dc:46:cb:50:ed:19:9c:c7:09:fe:e7:45:e7:17:
                    f8:17:1d:9c:25:48:05:15:89:88:35:06:46:22:10:
                    c2:66:63:56:df:76:f2:2f:98:c8:6a:7e:47:b9:89:
                    fa:d5:39:b9:e1:66:53:94:30:f7:31:97:a6:1d:fc:
                    6c:17:4e:cf:e8:88:48:24:a6:2b:a2:d2:47:f8:2b:
                    de:c3:58:aa:74:46:ba:5b:02:19:b2:29:e3:94:a8:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:36:92:54:ED:C1:CC:9E:93:4F:8F:5B:F3:E8:3D:24:0C:EB:BC
            X509v3 Authority Key Identifier:
                keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:78:fa:be:97:cc:e9:10:37:97:39:8a:c3:83:ab:d5:83:19:
         39:9f:61:a4:7f:7e:13:c3:39:49:88:9a:c5:a7:ad:63:48:73:
         f8:e8:11:85:3a:98:7e:58:89:31:b0:8f:27:4d:bf:81:4f:05:
         27:17:fc:25:c0:ac:30:12:a1:0d:d2:8f:f2:95:37:38:0c:f5:
         41:d8:1f:0e:fc:a1:3b:f0:7b:bb:d1:b1:fb:22:2e:9d:34:74:
         96:69:b2:d1:5c:34:78:4c:3e:7a:da:59:e5:41:41:43:04:c7:
         f8:0d:e0:1e:ef:37:59:06:e3:35:0e:40:ae:e5:e8:6e:0a:b6:
         5d:cf:72:ce:cf:f3:5f:23:04:68:8e:2c:28:e0:5f:16:63:0d:
         c7:ab:b4:c0:07:8b:29:54:dd:07:51:aa:42:d2:a8:d0:04:c7:
         ef:06:a8:23:42:1b:3a:2d:5b:95:98:1c:c0:d4:56:ed:4f:61:
         6d:ba:dc:6f:24:87:c9:b1:60:27:39:27:42:e5:8d:67:36:41:
         45:ee:62:c5:78:47:89:5d:ff:ad:2f:1d:f7:73:6e:53:d9:79:
         8d:39:14:dd:c2:aa:93:aa:25:88:2e:c6:64:61:af:e6:e9:ea:
         9c:c7:56:a6:10:1e:25:06:d9:2a:6f:6d:43:5f:99:67:61:02:
         7d:d2:8f:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMwRjYxMTAvBgNVBAUTKEFENDY2N0NFRThFM0Y5RURGRjkyRTdGQkJCMzdGRkM2
NkMwMDczQTIwHhcNMjYwNDE5MDIyNTQzWhcNMjYwNDI2MDIyNTQzWjAYMRYwFAYD
VQQDEw02OWU0M2QyNy03ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQgDc1dmJJnWCpq4+9/GKHZg7cyVQcEpilWkPnPJLb5FZ3aafzh6eZBopUST
li8y3VNzySgvGYkG9MHqdS09p2b0o4CgjlwfMhvK9oLksbw++R6NjOtwgPgmmgyu
YOOuiCfmzZNBPzRSVFswfdsu0AuHnhRLgH4JLpKc1bSxyBYfeTHGjZ+qV9/J7snU
suaZpBlRW0W/w++mbB2dvkKlTuhToB/K3EbLUO0ZnMcJ/udF5xf4Fx2cJUgFFYmI
NQZGIhDCZmNW33byL5jIan5HuYn61Tm54WZTlDD3MZemHfxsF07P6IhIJKYrotJH
+Cvew1iqdEa6WwIZsinjlKiKSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGtNpJU
7cHMnpNPj1vz6D0kDOu8MB8GA1UdIwQYMBaAFK1GZ87o4/nt/5Ln+7s3/8ZsAHOi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzBGNi9EMkJCNzU1QUVG
NEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1lM19rdWY3dXpmX3htd0Fj
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JVWm56dWpqLWUzX2t1Zjd1emZfeG13QWM2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzBGNi9EMkJCNzU1QUVGNEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1l
M19rdWY3dXpmX3htd0FjNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr3j6vpfM6RA3lzmKw4Or1YMZOZ9hpH9+E8M5SYiaxaetY0hz+OgRhTqYfliJ
MbCPJ02/gU8FJxf8JcCsMBKhDdKP8pU3OAz1QdgfDvyhO/B7u9Gx+yIunTR0lmmy
0Vw0eEw+etpZ5UFBQwTH+A3gHu83WQbjNQ5AruXobgq2Xc9yzs/zXyMEaI4sKOBf
FmMNx6u0wAeLKVTdB1GqQtKo0ATH7waoI0IbOi1blZgcwNRW7U9hbbrcbySHybFg
JzknQuWNZzZBRe5ixXhHiV3/rS8d93NuU9l5jTkU3cKqk6oliC7GZGGv5unqnMdW
phAeJQbZKm9tQ1+ZZ2ECfdKPtQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:33 2026 by rpki-client