Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
File:                     uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json)
Hash identifier:          VQyFu6bBWi14w02K5MoEK77MGGHIUCSiJ5mzChRfO0s=
Subject key identifier:   19:59:E5:5C:39:2D:C9:B9:2C:C9:97:14:3D:E7:A0:53:F7:4A:33:81
Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
Certificate issuer:       /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Certificate serial:       0CA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
Manifest number:          0C9B
Signing time:             Thu 16 Apr 2026 18:27:47 +0000
Manifest this update:     Thu 16 Apr 2026 18:27:47 +0000
Manifest next update:     Thu 23 Apr 2026 18:27:47 +0000
Files and hashes:         1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: l1aD4ulRW0E2ThnxV7Pasxej4afhG2Sk0EaWwIsAwug=)
                          2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: 3OqTGjIgsHVDPUYnbHar2FaPmlN2uunJHFoJ3j2NcEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3237 (0xca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
        Validity
            Not Before: Apr 16 18:27:47 2026 GMT
            Not After : Apr 23 18:27:47 2026 GMT
        Subject: CN=69e12a23-6cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:7a:61:55:c3:2c:83:2a:3a:7e:76:76:2f:
                    09:e8:3c:80:a6:80:c3:16:02:d0:a6:f5:2f:2e:d4:
                    f9:63:2b:08:fb:63:b1:7d:6f:3f:92:58:a2:af:7d:
                    87:db:68:05:95:09:35:e8:39:11:3c:00:e6:c4:5e:
                    bf:a2:41:ef:dc:42:95:13:ce:0f:6a:81:a8:3a:90:
                    17:52:c2:97:e2:04:0c:32:3b:31:73:8b:ea:14:f1:
                    68:b2:ae:0b:8e:85:2d:e5:ab:32:03:16:20:9e:2e:
                    ff:f7:04:3c:93:20:d4:2c:cc:c0:7b:e7:31:42:8d:
                    0e:8c:08:1e:31:1d:95:3b:c2:c3:e9:f6:e9:7e:19:
                    db:7b:04:50:95:43:91:15:b9:3d:f7:68:cf:b2:a9:
                    8c:6c:99:0a:d5:7d:99:c0:7f:14:c3:d2:99:bc:02:
                    17:8a:05:d1:83:c2:2c:cd:5e:2c:e0:2f:76:f7:39:
                    f9:6b:ed:64:45:1b:cf:c1:8c:83:3b:80:f6:f2:a7:
                    50:01:11:09:21:e4:76:a6:1e:03:4b:e4:33:dd:be:
                    59:f7:12:ec:ae:66:bb:eb:01:a9:4c:c9:99:a6:d8:
                    ba:10:9d:61:05:da:83:50:b2:5b:77:e7:dc:12:d3:
                    e8:c5:c3:62:2b:af:86:c7:4b:26:6a:eb:57:c4:25:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:59:E5:5C:39:2D:C9:B9:2C:C9:97:14:3D:E7:A0:53:F7:4A:33:81
            X509v3 Authority Key Identifier:
                keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:99:02:e6:8e:c7:d9:67:b0:ae:6d:d3:a9:b5:e7:56:18:6c:
         66:e0:b1:4f:b9:e9:d2:ef:6e:3f:05:d1:58:91:ac:77:1f:b6:
         0d:c9:f0:0c:4a:6b:b5:04:39:c8:f9:43:63:30:01:2b:ea:fb:
         27:6e:09:9f:70:48:7d:cb:ba:d7:93:b9:a4:b0:35:b2:b7:4e:
         d5:7f:24:17:aa:1a:aa:fb:81:99:b3:bf:73:f6:12:bb:90:3d:
         bb:b1:04:66:9a:6b:2c:87:f9:4e:ee:77:30:64:6b:ce:f9:c5:
         7d:b8:8b:99:1a:5e:7b:4b:b3:2e:a3:26:b7:eb:61:68:27:d4:
         e2:f2:36:a3:66:ff:87:70:9d:13:2b:ba:28:90:2d:50:3b:8c:
         7f:3d:80:4f:3d:dc:0b:3e:24:1f:1b:4b:25:79:4f:dd:3f:d5:
         87:18:d1:a5:45:1f:5e:5e:60:33:de:79:f8:1f:4a:fb:0f:d4:
         3f:9c:d2:9d:87:a0:92:a0:9d:7d:a9:9d:2e:1c:cc:54:96:5b:
         e6:3c:3e:8b:32:57:02:3b:a7:6b:98:27:d8:10:9a:b5:fb:d0:
         df:07:49:e9:c3:98:3e:49:a1:9d:e0:41:41:56:45:bf:22:fa:
         eb:61:74:1c:6f:6d:44:5c:07:46:93:0c:d4:46:08:8a:6b:6c:
         84:3b:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:50 2026 by rpki-client