Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          nRMVCz2+0cYQekZ8hdVzSmdGV6E192jza3zVx1xhaEw=
Subject key identifier:   B2:AF:16:F4:63:B1:B4:6E:E1:00:55:C6:56:C1:51:C3:AD:AD:38:97
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0E03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0D97
Signing time:             Thu 16 Apr 2026 17:55:03 +0000
Manifest this update:     Thu 16 Apr 2026 17:55:03 +0000
Manifest next update:     Thu 23 Apr 2026 17:55:03 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: qU8hrxBB/UWromBqSoc6K26zmeF/UUwUs7rJYUhBhGo=)
                          2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
                          3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
                          4: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=)
                          5: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3587 (0xe03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: Apr 16 17:55:03 2026 GMT
            Not After : Apr 23 17:55:03 2026 GMT
        Subject: CN=69e12277-0ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fe:5a:7e:bb:83:d6:c7:fc:33:52:b4:3d:a8:
                    d3:5b:4d:ee:a2:34:20:06:3b:54:15:d3:fa:fd:c6:
                    2d:77:00:a0:b6:bf:91:d6:c3:d9:f9:49:f5:8c:5b:
                    0b:7e:27:1e:56:80:f6:8f:0a:39:b1:fd:c8:ba:93:
                    05:83:41:50:25:d6:57:8a:8e:75:3d:bd:3f:ae:e9:
                    23:b8:67:b8:99:c7:12:19:fb:ca:2a:92:57:ef:a9:
                    0c:15:95:70:52:41:6e:90:1b:da:3c:89:56:32:11:
                    4c:5a:cd:51:f7:39:61:6e:3d:61:a8:08:ee:1f:ea:
                    7f:f3:5f:d1:d0:84:5e:13:ce:5b:60:62:94:c5:3f:
                    05:37:3d:63:ec:1b:ca:70:d4:57:65:24:e7:8d:09:
                    76:c3:60:cc:36:3f:da:8d:a5:eb:83:27:a6:55:7b:
                    4c:20:ec:6e:2f:84:f0:82:21:05:c1:4d:ef:b8:27:
                    10:24:c0:25:ef:0a:57:d5:fa:45:22:78:74:23:68:
                    96:8a:03:cd:67:a6:71:bf:31:df:cb:51:7d:7f:e0:
                    62:64:90:3f:bc:06:5d:48:1b:d7:78:d9:9d:64:42:
                    6d:0c:c3:71:55:1c:f9:7a:75:52:01:f3:00:b9:b4:
                    61:84:3c:05:21:0e:e8:57:be:fd:c5:f2:81:14:18:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:16:F4:63:B1:B4:6E:E1:00:55:C6:56:C1:51:C3:AD:AD:38:97
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d3:93:3b:ad:f8:88:d9:78:53:89:79:7d:73:1c:93:cf:6e:
         e9:79:81:21:d6:bd:50:8d:13:03:bf:83:09:c2:3c:59:e2:e3:
         fc:02:4c:97:e2:78:bd:83:7c:80:f9:49:0e:04:84:a1:7d:e9:
         49:f5:ef:f6:d1:6d:e1:4c:00:0b:0f:c2:34:a4:04:ba:f9:04:
         41:70:3a:d0:d6:85:96:43:72:4f:fc:17:4a:a6:97:e1:5a:6e:
         d8:98:3a:d8:d5:59:a9:83:85:89:1a:11:06:2e:28:71:1b:2c:
         68:6e:0d:21:e6:13:d4:28:38:a0:69:7a:fc:81:f5:5e:fe:72:
         4c:e6:a9:54:16:b3:72:67:85:b2:6f:26:21:8f:75:1b:e4:b3:
         08:d3:8e:79:51:92:81:ef:93:55:ac:19:a3:a4:a5:36:e0:75:
         1b:46:32:61:26:2e:ba:8b:ba:f8:29:47:45:fb:33:7f:9c:ac:
         eb:03:1b:c7:bb:dd:4e:9f:0c:fb:a2:bb:4e:ed:58:24:0b:07:
         26:37:66:00:fc:97:2c:fe:35:da:03:37:50:bf:4d:52:92:82:
         ec:3b:42:21:a5:d2:5d:5f:d2:59:76:11:d4:66:65:68:be:c7:
         38:a6:75:72:ad:ca:c2:2f:23:7f:dd:e1:ec:04:2a:59:48:55:
         69:b6:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:25 2026 by rpki-client