Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File:                     Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier:          a0GC5b+ic5e4Pgm1CPQJ3ZLSSJgKm6ZgOnpfoSrf8YQ=
Subject key identifier:   A0:C7:75:2E:7D:C5:91:1F:74:8E:6E:F5:66:21:92:FC:E5:B2:1E:AB
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer:       /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number:          52
Signing time:             Fri 17 Apr 2026 08:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:32 +0000
Manifest next update:     Fri 24 Apr 2026 08:00:32 +0000
Files and hashes:         1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: hjKyM/t0p/rL4jytV56ZXTWAu0BQWxQ++SC9Mg55Snw=)
                          2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
        Validity
            Not Before: Apr 17 08:00:32 2026 GMT
            Not After : Apr 24 08:00:32 2026 GMT
        Subject: CN=69e1e8a1-1070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:c7:d2:85:c2:38:0c:9d:3b:d0:29:bd:be:
                    e9:55:41:0e:67:03:10:c6:5c:22:c2:dc:14:bf:2f:
                    5a:46:da:c2:94:7b:98:11:df:23:7f:64:b9:0e:1a:
                    91:b4:be:68:d7:8b:f2:74:25:e8:62:89:ac:b2:f5:
                    e3:04:81:a8:b9:8b:b9:e4:bb:51:d0:d1:3c:c8:9c:
                    17:7a:b5:ff:7a:3a:39:bc:c3:ca:2d:21:57:36:fc:
                    73:30:7f:5f:4e:5b:09:04:fc:74:9c:c0:7f:eb:a6:
                    e5:c4:a3:f8:c1:2f:8b:17:1e:f0:d3:ec:b5:a2:2d:
                    7c:52:ab:cb:7b:df:70:17:b0:35:f5:95:8e:af:0c:
                    d6:8e:e7:ae:1c:27:48:14:5b:30:ba:9b:09:fe:c8:
                    f9:55:ca:30:b6:88:6f:ef:37:9d:a7:7a:fc:4f:fc:
                    07:1b:0f:44:b6:20:ca:af:20:35:03:2f:ee:73:40:
                    de:19:5e:6b:88:57:db:1b:67:05:72:c8:1a:10:13:
                    e2:7e:ce:40:26:9b:ae:a8:a2:69:84:3a:86:e9:9c:
                    f8:f3:f3:7f:05:bf:5a:c3:d9:e0:42:f7:fd:dd:14:
                    75:ea:4b:0f:0f:9e:2c:c3:43:21:0a:39:2c:7e:a1:
                    79:81:25:eb:d7:bb:30:9e:0d:15:33:72:29:b5:04:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:75:2E:7D:C5:91:1F:74:8E:6E:F5:66:21:92:FC:E5:B2:1E:AB
            X509v3 Authority Key Identifier:
                keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:b9:81:ca:b7:e4:16:ca:d3:ea:8b:a0:1b:4b:4b:af:1f:
         4f:a2:54:26:e6:0c:3a:db:e9:53:8b:a8:8b:85:9e:4a:5f:0c:
         43:5f:f9:27:c9:f1:68:90:fa:c3:8c:42:0f:be:20:dd:a2:f0:
         35:f9:2b:92:68:7d:d2:b9:a9:bc:77:3d:28:7d:09:f1:d5:0f:
         6f:1d:c0:c2:d1:da:d2:15:33:49:7d:2e:90:44:d6:41:dd:a7:
         62:6a:d2:33:e1:5a:45:21:ca:13:8a:3a:b4:b5:21:de:a0:77:
         34:55:e2:03:05:38:f7:d9:3b:d1:2a:8c:6b:0f:eb:8f:eb:02:
         19:06:94:12:22:cd:ca:11:bc:48:1c:87:e8:cc:0f:ad:43:62:
         d2:f1:35:e8:c9:2d:33:47:39:63:fa:44:ed:e4:8b:67:88:8f:
         86:86:c7:91:03:7d:ea:4a:da:5e:cf:4d:79:f8:ef:68:23:43:
         20:74:58:0c:f3:53:7b:6c:ff:bc:94:3e:b3:a6:97:cb:fe:58:
         ed:e4:ac:aa:1c:89:f2:20:a5:be:72:81:96:d8:96:3f:ad:36:
         1b:6f:41:d3:d7:5e:67:dc:99:ea:28:5c:ea:8c:ab:6e:f1:e9:
         97:d6:f0:a4:22:f2:34:66:b2:a1:08:78:ac:6a:36:ac:50:d1:
         e0:df:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:06 2026 by rpki-client