Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
File:                     U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json)
Hash identifier:          j73SQBRA8WnTYYlTm6DhnVHt1aDIeHV2hcTcPbIQWRU=
Subject key identifier:   69:FF:47:C3:4F:CC:1A:50:83:5E:68:00:2D:C3:36:02:A8:95:48:89
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Certificate issuer:       /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
Manifest number:          013B
Signing time:             Fri 17 Apr 2026 05:09:19 +0000
Manifest this update:     Fri 17 Apr 2026 05:09:19 +0000
Manifest next update:     Fri 24 Apr 2026 05:09:19 +0000
Files and hashes:         1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: cp73zTy5VIYoT2Txaakc+ZDRf17grHK11Ivt9794zrQ=)
                          2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: orwyoS8UfNw3CU4v8yNK3/VV+51QmqRq4/4q/snL/As=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
        Validity
            Not Before: Apr 17 05:09:19 2026 GMT
            Not After : Apr 24 05:09:19 2026 GMT
        Subject: CN=69e1c07f-600f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:70:18:cb:89:b1:cd:7f:c7:8a:97:77:c2:
                    4c:cb:c8:ce:69:2c:cf:0e:dd:ab:42:6d:99:a0:2b:
                    ab:e5:0c:19:97:be:99:46:7b:0b:25:b8:d2:89:74:
                    2e:ce:64:32:51:85:59:c6:c4:8c:a5:ea:6d:08:a9:
                    a3:52:7f:f1:61:0c:96:e2:8d:c5:a8:96:95:2d:02:
                    c1:64:0a:65:03:94:7c:dd:f0:00:e5:f2:ef:12:da:
                    4a:b5:bb:89:38:da:5e:48:1f:49:e5:5e:52:0a:38:
                    a8:d2:43:da:ae:81:7b:2f:25:95:4d:3a:11:2f:e2:
                    87:99:7a:bc:ce:c5:c5:54:98:79:40:cf:99:0b:92:
                    e9:32:d2:23:d9:6e:fb:0f:de:d0:55:b3:fb:0a:dc:
                    b3:39:72:d4:ff:93:ac:3c:a3:b1:4f:52:28:df:63:
                    8b:fb:ad:e1:c5:8f:f4:f0:2c:58:cb:74:88:28:ab:
                    b3:91:a5:8c:96:a4:60:85:a5:7d:73:13:e2:28:92:
                    3f:4f:7a:d1:2d:63:d6:75:36:0c:eb:56:e3:db:3e:
                    ad:c4:84:d0:6c:e6:23:9b:a1:fd:56:3f:ab:6e:39:
                    e1:e5:4c:7e:1f:0c:a2:84:c9:35:e9:a8:d1:6d:34:
                    73:1c:33:ff:6e:63:6d:66:65:35:98:41:62:73:97:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:47:C3:4F:CC:1A:50:83:5E:68:00:2D:C3:36:02:A8:95:48:89
            X509v3 Authority Key Identifier:
                keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f0:7c:e4:88:cd:ca:55:1f:01:03:d6:f6:c1:33:20:f0:e8:
         24:1f:bd:a5:74:72:09:2b:fa:a2:cf:91:f9:0f:cb:9f:ce:68:
         f5:6b:10:9a:f5:b0:d5:c4:e6:36:24:11:e2:b6:cc:3e:22:8f:
         ec:f2:cf:f4:98:f0:f1:68:5c:2a:ab:6b:93:5b:8a:a4:7c:14:
         83:ad:0f:ba:fe:fe:6d:2c:7c:d6:14:7c:85:5a:06:1f:0f:e9:
         8e:e0:b4:8d:57:bc:82:18:1f:36:c5:86:3a:a6:65:65:70:62:
         d2:7a:5d:43:35:04:a7:dd:5b:ba:6a:92:2e:80:1c:19:35:aa:
         1c:43:50:3b:84:77:a3:65:1a:3a:1d:b9:2f:03:fa:c3:78:73:
         4a:9c:18:4d:89:91:6a:a8:c5:43:72:53:d4:ae:c1:5d:87:b4:
         8a:d2:71:7a:9b:ee:0e:fa:28:2a:42:dd:ab:1c:d7:fc:53:9a:
         57:ba:40:77:9b:b0:15:1f:b8:00:cc:b8:91:34:22:9e:a9:62:
         0b:ff:0a:0d:da:81:68:9d:74:1d:52:58:f8:d3:c5:8d:b8:5c:
         d3:eb:fc:fd:23:0f:3f:d9:d8:61:f0:c8:6a:ae:31:1a:4e:24:
         74:41:71:e9:f4:5c:7f:83:04:7c:19:ff:d6:ed:f9:9d:de:b8:
         89:18:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:14 2026 by rpki-client