Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File:                     1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier:          FWBzyBA4ZgFynKMfegJiiZI2habUdNgudUb8O3NgyCw=
Subject key identifier:   8E:11:61:71:BA:CD:52:E5:55:CC:0F:F4:20:60:AC:EB:3F:ED:F1:BC
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer:       /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number:          0186
Signing time:             Fri 17 Apr 2026 04:16:23 +0000
Manifest this update:     Fri 17 Apr 2026 04:16:23 +0000
Manifest next update:     Fri 24 Apr 2026 04:16:23 +0000
Files and hashes:         1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: LaTtZiVlnAd/zm/zI6WCVgUuv3atxq6JxeFR/O0uggU=)
                          2: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=)
                          3: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=)
                          4: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
        Validity
            Not Before: Apr 17 04:16:23 2026 GMT
            Not After : Apr 24 04:16:23 2026 GMT
        Subject: CN=69e1b417-731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:05:1c:bd:8a:d6:c0:b9:6e:db:5b:a8:ae:30:
                    6c:88:8e:a6:be:81:93:26:62:fb:f3:38:ef:f7:a6:
                    32:82:a3:df:22:7d:ef:af:f1:9b:0d:2b:41:eb:8f:
                    85:93:a9:a1:c6:97:58:21:19:83:05:83:38:81:84:
                    b6:8c:60:7d:ca:b8:9b:d4:a3:0d:61:62:59:01:87:
                    a4:79:ff:01:96:77:2c:12:b8:de:cf:8f:a8:99:67:
                    1d:63:60:22:8b:5f:f0:72:87:5b:4e:dd:38:cb:49:
                    52:9c:24:8c:34:e1:55:0f:e4:88:e7:e0:c0:97:ec:
                    0d:f9:2a:84:aa:31:a3:70:17:59:69:d5:c7:40:01:
                    38:f8:82:ca:e4:3f:7a:4e:4d:f4:d8:5a:d0:00:2a:
                    77:11:30:62:a1:f4:3b:d6:28:f5:16:a3:f3:51:c7:
                    4b:4f:db:0f:67:bf:48:42:64:7b:7d:72:10:54:31:
                    55:de:ae:87:50:e7:e8:fd:29:cf:ba:30:e8:7a:71:
                    8d:ee:85:2f:2f:2a:18:d9:74:06:8d:04:33:f3:f0:
                    6f:5d:02:52:47:61:5f:3e:6c:62:a3:52:17:ce:60:
                    0e:cd:80:b3:72:af:d4:a7:9d:29:98:ba:71:c9:d9:
                    74:ce:f8:30:b6:fb:b8:49:5e:9b:dd:a1:1d:44:5e:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:61:71:BA:CD:52:E5:55:CC:0F:F4:20:60:AC:EB:3F:ED:F1:BC
            X509v3 Authority Key Identifier:
                keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:77:df:82:9b:fe:7d:aa:a3:93:6c:cf:d3:ef:73:91:ef:29:
         3c:7f:93:21:53:b6:d9:34:ed:80:68:c1:5a:eb:ca:a9:df:83:
         35:fe:25:14:ec:0d:17:3d:f4:10:a7:f2:4f:80:41:60:1e:4c:
         00:43:66:ef:0b:73:b6:bc:5e:c3:7b:5b:cc:8d:29:3e:71:27:
         c7:56:67:dc:06:47:54:20:d9:e1:c9:d5:34:b1:57:5b:20:36:
         a1:6f:f1:90:a8:36:6a:cc:f5:c2:d6:4c:3c:d1:94:f4:6c:ff:
         01:f1:bb:55:51:2d:13:4c:26:f3:b1:e2:a1:10:2d:90:1d:92:
         77:43:2e:82:5a:96:37:ab:7d:8d:01:83:84:b6:3b:4e:a6:59:
         36:83:0d:24:89:80:e4:91:49:83:43:c9:d2:a5:7f:8e:17:bd:
         25:21:8b:d1:b1:b7:fc:1a:52:8a:40:3e:9e:4a:97:61:13:40:
         1b:40:9b:49:b9:54:9b:4d:46:d3:0e:57:62:04:ad:dd:fa:57:
         90:75:40:14:c5:a4:df:6b:bf:43:9e:7c:bb:f6:8d:df:49:cd:
         b8:e8:8f:2f:9e:3c:4d:2c:fd:27:fb:c8:c4:98:4d:3d:49:da:
         69:f8:4f:d7:b7:7a:75:ba:31:ce:36:2e:8e:8f:94:e7:b5:13:
         19:02:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:23 2026 by rpki-client