Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File:                     4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier:          yrIvUv5H+2bHaPxBr3B03of3eEeAT7Kz0xrbxnp12Q4=
Subject key identifier:   B2:AA:8C:9E:38:62:57:9E:15:38:33:E6:C1:7E:61:54:D8:BB:32:EE
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer:       /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number:          042C
Signing time:             Fri 17 Apr 2026 00:15:41 +0000
Manifest this update:     Fri 17 Apr 2026 00:15:41 +0000
Manifest next update:     Fri 24 Apr 2026 00:15:41 +0000
Files and hashes:         1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: mqzVtUJDwgC12HC5VeRN9dQ9GwQQ99CQFQKOzn8DCkA=)
                          2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
        Validity
            Not Before: Apr 17 00:15:41 2026 GMT
            Not After : Apr 24 00:15:41 2026 GMT
        Subject: CN=69e17bad-a92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:f8:fc:bd:b8:78:3f:0a:f5:40:b2:32:27:
                    f3:1b:b6:0e:e5:f2:a2:de:3a:71:10:de:05:bd:e4:
                    cf:d7:68:de:59:de:42:99:11:e9:3e:49:f6:ab:3a:
                    ab:25:32:b8:eb:ff:8e:96:f5:71:c0:96:fb:90:82:
                    cd:db:e4:c9:ca:41:12:92:9d:08:22:37:e7:b4:9d:
                    91:5d:dd:98:07:39:76:cc:b1:72:b6:41:f7:06:c5:
                    82:d9:24:62:5d:5e:77:0c:b1:0a:20:f2:8a:12:1d:
                    1b:d9:a0:32:e1:8e:4f:ae:38:94:1b:3c:c5:71:a6:
                    68:83:af:2a:30:cd:35:ad:55:3d:ab:ba:ca:09:8f:
                    2d:94:ec:97:c8:1a:f8:dd:68:44:6d:ce:de:6e:5e:
                    e1:ce:ed:fd:e8:58:fc:53:ff:c6:cd:81:7c:9b:eb:
                    e9:1a:8d:7b:77:e3:a9:92:60:90:96:57:3c:37:3b:
                    fd:02:2b:16:10:ea:44:f3:2e:10:6b:5d:80:7a:a9:
                    2d:bb:1d:d2:c9:07:80:1c:74:69:ec:35:06:43:ad:
                    79:14:c6:f6:6f:e1:da:af:97:95:cc:e7:c3:35:58:
                    74:d1:c2:32:a2:d3:3b:02:fe:64:8d:d8:b7:58:6a:
                    a1:fc:85:40:14:77:ec:d9:bb:5f:6c:b5:70:48:bb:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AA:8C:9E:38:62:57:9E:15:38:33:E6:C1:7E:61:54:D8:BB:32:EE
            X509v3 Authority Key Identifier:
                keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:11:9a:15:bf:c9:5a:6f:97:8b:a3:1d:db:49:f0:2b:9c:5d:
         27:22:b3:a1:1c:c7:67:e6:b8:e9:bb:39:43:5e:a1:bd:d1:ba:
         9a:63:de:a8:d4:c0:8d:19:b8:c5:c6:b5:f0:8e:7f:14:21:c4:
         2a:66:1d:9b:40:0a:92:08:51:17:09:26:ce:5c:04:eb:49:91:
         a1:f6:a6:ad:6d:af:a4:ed:89:42:ac:6c:f4:7d:ba:37:45:87:
         5b:e7:42:10:ef:a9:4d:b1:81:05:da:0b:72:fb:6b:c2:5b:fb:
         25:3e:b5:a7:0e:24:cd:1e:59:a6:a0:ca:36:ea:eb:f1:eb:ca:
         5b:ec:e5:a9:09:42:8d:1b:b7:29:9d:5b:65:2b:38:32:7f:4e:
         43:6a:31:95:a8:0a:7e:7a:cb:9e:4f:08:6a:f1:89:cf:ea:87:
         7f:58:2e:60:b3:5e:38:f1:ca:56:a5:8c:00:f1:90:8e:93:ae:
         03:b1:55:5b:5a:a8:94:0e:8a:3f:5b:84:7f:99:01:08:95:1b:
         30:15:76:0d:47:a9:24:eb:5c:95:03:d1:78:8d:85:94:9c:32:
         bc:5b:64:d2:11:dc:46:6b:12:cd:ce:3f:f3:c4:1e:a9:ab:1d:
         16:fd:83:72:85:db:fc:94:c7:f7:f7:cc:79:6e:cf:d4:38:14:
         2d:9a:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:02 2026 by rpki-client