Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
File:                     UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json)
Hash identifier:          60Obi38dPXgXWKFVuRbExqIeUEVFDps8HtKkEGOJqvg=
Subject key identifier:   F8:AC:64:5D:BB:2D:17:BB:7B:F9:AF:C6:89:05:4F:27:8B:E5:C9:94
Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Certificate issuer:       /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
Manifest number:          A9
Signing time:             Fri 17 Apr 2026 06:58:53 +0000
Manifest this update:     Fri 17 Apr 2026 06:58:52 +0000
Manifest next update:     Fri 24 Apr 2026 06:58:52 +0000
Files and hashes:         1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: RBwIAdkcTSM17eV8ObUItUbbSgk7F7JesbEOWosa8Wk=)
                          2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: p+/O/N2cnrVHm7O6YEqosl6vnHVBYYkRwfwZCmypB2U=)
                          3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: C4Pv7/ZcXpfnIfO2ZraIiYNBzqr9mEhRQSdvTyPYip4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
                          rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
        Validity
            Not Before: Apr 17 06:58:52 2026 GMT
            Not After : Apr 24 06:58:52 2026 GMT
        Subject: CN=69e1da2d-f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:01:20:5d:9d:2a:42:a1:eb:0c:ff:ab:5c:13:
                    70:fe:cf:54:af:e8:94:58:b1:74:ef:1f:0b:fb:be:
                    d2:07:4a:87:a3:1a:34:d8:d9:cb:88:d4:64:90:69:
                    48:35:83:5d:5d:bb:d4:5a:59:61:64:fd:1a:e1:e0:
                    79:07:95:fa:20:e8:77:45:18:ca:f5:2a:b6:02:71:
                    97:0a:f0:b8:d9:9d:23:71:15:a9:59:75:b9:a9:1b:
                    db:3b:20:cc:bd:0a:03:3c:5a:ab:fd:81:38:0a:e0:
                    12:5e:8a:ae:38:bc:ce:29:7a:91:cb:83:3c:9d:6a:
                    83:54:09:5d:c5:78:0d:b1:1f:60:02:c0:5b:7e:96:
                    6e:32:c3:bf:d1:6c:89:3b:de:c0:f8:1a:53:e5:3e:
                    68:c9:be:34:32:6b:17:1e:97:e2:fb:e7:6d:df:95:
                    ab:c3:cb:f9:68:f8:fa:e4:9c:7c:7b:a7:93:41:ca:
                    b1:49:b8:26:0f:bf:3b:53:97:2b:b4:0b:ff:df:18:
                    07:f0:c4:a1:d8:53:ef:76:9e:b6:e0:18:3a:dc:99:
                    9e:cc:a9:e6:0c:b5:61:2b:a2:97:9c:ca:fb:56:b5:
                    71:19:86:25:f6:81:0b:62:61:e3:21:bb:51:ba:59:
                    24:e9:41:12:4c:d4:60:f3:ae:a6:cb:e3:01:52:f1:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AC:64:5D:BB:2D:17:BB:7B:F9:AF:C6:89:05:4F:27:8B:E5:C9:94
            X509v3 Authority Key Identifier:
                keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:21:27:1d:91:1c:b2:2d:bb:4d:55:54:7e:48:07:0b:af:
         4b:63:7c:05:9b:47:c3:31:45:fb:a4:66:8c:e6:d9:fa:3b:9c:
         ca:d7:cb:72:92:5f:3c:2f:23:90:85:e8:e2:4b:7b:2b:fc:36:
         7b:13:62:f9:69:44:3a:37:1c:c4:f4:d1:ca:a1:0c:3f:3c:06:
         e2:d0:21:16:be:50:97:37:6b:c9:af:82:e0:cf:20:c5:18:ab:
         8f:9c:26:ea:f5:5b:58:e5:ee:86:21:8f:e9:08:84:ab:b9:ba:
         98:12:e9:4a:c3:e3:8b:4f:fd:6a:4f:36:2d:8e:0e:15:85:20:
         b3:2c:51:b8:55:80:0f:d0:a2:f5:ea:dc:cd:31:53:8e:68:c6:
         ea:56:59:dc:90:10:c1:3f:bb:46:6d:d0:d0:a5:40:69:89:ec:
         5a:84:0f:b3:3e:68:20:d8:20:c6:f0:71:b2:2f:05:78:66:7f:
         fe:7f:53:7a:d5:7a:1b:9b:b3:2c:b0:ae:e1:80:ae:f6:b3:fa:
         1f:26:e3:49:39:9d:b5:06:9b:24:3e:f6:79:c5:0b:29:6b:93:
         5c:32:40:99:16:1f:35:4d:3d:c0:12:a0:97:34:6c:d2:f5:9e:
         59:63:74:fe:ba:a7:3f:88:0b:f5:05:b1:97:81:5c:1c:e8:38:
         3f:0a:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:08 2026 by rpki-client