Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
File:                     UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json)
Hash identifier:          7cD7VCYbXBhRdBkWicM49drLQLuEQzoWfQS3aXAo0dw=
Subject key identifier:   40:9C:A4:13:4A:D4:CB:D7:FE:EB:6B:34:7C:6B:EE:1B:53:F7:58:FE
Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
Certificate issuer:       /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
Manifest number:          5E
Signing time:             Wed 15 Apr 2026 07:35:35 +0000
Manifest this update:     Wed 15 Apr 2026 07:35:34 +0000
Manifest next update:     Wed 22 Apr 2026 07:35:34 +0000
Files and hashes:         1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: rNlS5/fRWMnmC1fEIHMUtLVHy/GSKhZuYsQDCKrsAaQ=)
                          2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: VnxPQSSZH/jrUJ6zmg9TBmjFmVAPpsz93eEIgIGKblg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
        Validity
            Not Before: Apr 15 07:35:34 2026 GMT
            Not After : Apr 22 07:35:34 2026 GMT
        Subject: CN=69df3fc7-938d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:cd:49:ec:0c:d1:50:e0:84:8e:55:ae:b4:
                    ea:e7:fa:49:9c:45:0b:61:49:16:78:9b:65:6c:53:
                    8d:07:ae:c4:52:f9:ba:63:99:2d:8c:1d:1c:0b:84:
                    64:4d:20:3e:61:29:ad:49:9e:b1:84:ba:5c:ea:b3:
                    59:ce:d8:20:ee:66:8e:27:eb:50:89:1e:0d:f6:9a:
                    be:34:c9:75:79:5d:cc:f0:45:2e:c2:d0:59:87:05:
                    51:7e:2b:31:e1:20:20:f1:03:57:1a:b3:01:f0:a4:
                    58:1d:73:cf:ef:ac:1c:57:87:bd:b9:8a:60:78:6c:
                    59:d9:f5:13:32:7a:09:ee:c0:9b:80:54:60:a2:47:
                    02:e9:74:c8:fe:69:f2:c3:98:89:26:83:cb:c5:cd:
                    24:d8:73:d5:b5:34:71:d9:fa:e1:21:f8:54:63:54:
                    f1:dc:9f:53:b4:be:79:ba:19:f3:1c:62:fc:a6:80:
                    00:f9:b0:13:93:c3:c9:ea:9c:db:1c:35:4f:cf:ba:
                    52:b4:7b:37:25:32:6d:bb:75:92:6f:15:b8:ef:89:
                    01:b0:20:02:45:1f:fd:f1:cf:e5:50:63:73:e0:d5:
                    14:f4:ba:57:e9:6f:ee:b4:fd:69:94:f2:08:b9:47:
                    44:c4:d4:d8:a1:94:46:0d:65:00:72:a6:c5:53:b0:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9C:A4:13:4A:D4:CB:D7:FE:EB:6B:34:7C:6B:EE:1B:53:F7:58:FE
            X509v3 Authority Key Identifier:
                keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:24:02:11:25:72:73:26:c6:98:b0:d5:83:a1:0c:15:46:a7:
         cc:5d:ee:3e:16:f8:9b:88:6d:af:e3:9b:10:52:19:7b:61:8a:
         26:81:d8:45:fb:63:ad:60:2e:cc:2f:4e:15:e7:08:c3:23:7e:
         c2:70:7e:9d:8e:d9:5d:f4:ad:39:15:c3:7b:2b:22:93:a9:e4:
         42:61:70:f1:f2:40:25:1e:bf:0c:c4:3d:3c:43:48:26:0d:c1:
         61:3c:fb:5e:75:2f:d0:9c:5a:f7:b6:4d:b7:c4:63:f1:49:f7:
         83:1d:cb:e8:e6:29:9e:b0:dd:ad:d0:b4:dc:5a:b6:da:0f:30:
         16:e0:76:b3:c8:29:f1:d3:b5:41:d4:6b:42:d6:34:cf:bb:95:
         d0:3c:be:ca:b5:83:ba:38:3a:b0:d5:00:7a:5d:2c:1d:28:d3:
         13:74:cc:7b:b3:7e:07:e4:78:48:c4:e8:83:d8:9c:bb:f6:c4:
         8f:fe:b0:b6:84:19:a4:fa:6a:0c:87:c3:4e:67:8d:56:33:44:
         26:71:eb:52:2a:ae:c3:09:5d:1a:4e:ef:46:13:25:10:07:d0:
         8b:89:e9:2c:04:e2:89:f4:08:87:14:d6:19:7f:fa:14:ec:57:
         10:fa:ac:51:63:ce:32:dc:77:03:e3:20:7c:e3:9b:5e:a8:3b:
         6f:10:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:38 2026 by rpki-client