Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          88cuJsm8V5KAaYVgyM7dmBj/gokIv9c5yQZNfaJU1e4=
Subject key identifier:   F0:0D:54:73:30:7F:1F:BA:35:D4:93:20:4F:A1:BA:77:56:71:E2:61
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       0670
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          0668
Signing time:             Tue 14 Apr 2026 22:28:29 +0000
Manifest this update:     Tue 14 Apr 2026 22:28:28 +0000
Manifest next update:     Tue 21 Apr 2026 22:28:28 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: o7sdFdiFjhLFXX8AXMk/SUwMo0R+utrHtYdEoN4CYIU=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: YXsZx0M5qaxKqHxvqZPF6y5uWQS4vjuAZKUzPFPxG9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 22:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
        Validity
            Not Before: Apr 14 22:28:28 2026 GMT
            Not After : Apr 21 22:28:28 2026 GMT
        Subject: CN=69debf8c-6bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:74:f1:66:aa:42:0d:04:0b:60:9d:c5:d9:
                    a5:b5:c8:ee:5c:28:1e:4f:fd:76:73:44:c0:6b:be:
                    7d:07:cc:2c:e8:64:92:f8:f5:4b:82:80:c1:50:42:
                    65:89:84:44:8b:43:f7:7d:cd:bc:5f:de:31:cf:d8:
                    2f:7e:5f:fc:74:00:66:3b:2e:5f:bb:94:8c:e5:68:
                    96:94:8c:c7:d0:82:13:e2:a5:1d:f1:c9:7b:20:8a:
                    68:7d:90:aa:1b:a3:72:0e:1b:03:34:5c:a3:78:80:
                    8b:f7:b1:54:1c:7d:5c:ee:91:00:a1:02:62:36:96:
                    96:bb:0a:c7:3c:8e:1b:20:8e:ee:30:94:ec:19:74:
                    98:fe:f9:4c:e2:3b:5b:1e:76:49:9a:3b:54:7c:69:
                    a2:ac:70:c0:61:91:88:51:92:7e:e0:da:32:6d:55:
                    97:de:e4:72:8e:52:52:84:b5:40:b2:52:70:e3:6c:
                    86:86:b5:f7:6e:53:17:d2:4c:93:b5:3f:67:79:80:
                    99:e7:63:08:c5:bb:66:53:8f:00:2d:d1:12:76:04:
                    00:0b:3e:11:81:74:89:d4:7d:b8:a8:ce:f1:09:b7:
                    fa:ea:f7:9a:16:b3:dc:6d:94:35:b2:50:6a:a6:16:
                    7f:b8:45:6e:6d:ec:7a:44:94:78:7f:15:91:c9:fc:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:54:73:30:7F:1F:BA:35:D4:93:20:4F:A1:BA:77:56:71:E2:61
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:04:f5:55:a1:df:8e:a7:f2:62:4d:11:8a:5d:4f:96:e1:f1:
         36:a9:54:4f:39:ee:78:39:cf:90:64:ed:a7:28:2d:c3:bd:ce:
         85:39:4c:8c:a6:11:b3:49:63:ef:64:d7:9f:0d:6e:4b:46:bb:
         27:36:45:15:cf:66:68:ad:c7:3b:1c:a5:cb:36:f8:c5:f5:fd:
         9d:79:f7:72:ba:58:a3:80:f4:50:08:af:97:1b:94:91:0f:44:
         59:5d:6b:12:21:40:f5:ba:9c:bb:31:a0:4f:cf:01:76:52:d3:
         c8:91:66:70:de:5f:de:6b:34:5f:ce:ed:c9:67:9f:44:2f:30:
         bc:2c:a8:49:b8:2a:a0:af:4c:37:03:42:02:c9:0d:a4:09:cf:
         b3:b5:7b:5f:c6:d5:8d:07:30:59:ac:42:c5:ce:68:e1:f4:7d:
         ae:6d:63:22:ee:ff:0c:ac:2e:18:6d:01:63:e0:42:f2:8d:5d:
         6f:98:da:df:49:5e:c0:45:c2:72:de:4d:8a:12:d2:ee:18:9f:
         f9:10:e7:7d:85:55:52:ed:01:6d:39:2e:bb:f0:e4:86:8e:84:
         34:96:0a:97:ed:61:85:94:70:33:27:0f:22:27:08:0b:6e:3c:
         01:e1:cf:7b:58:2c:f3:c5:7b:e0:4c:f1:95:d0:0a:db:b5:d1:
         16:c0:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:25 2026 by rpki-client