Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File:                     0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier:          ZZfJwcd3l6JKLWxY0qBRy78lF9iLtVizMJhDQkAAMN8=
Subject key identifier:   53:7B:8F:FB:63:57:BC:32:3F:F2:4F:94:D9:2C:46:F0:A8:0D:D2:48
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer:       /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial:       0B77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number:          0B6E
Signing time:             Thu 16 Apr 2026 19:04:43 +0000
Manifest this update:     Thu 16 Apr 2026 19:04:42 +0000
Manifest next update:     Thu 23 Apr 2026 19:04:42 +0000
Files and hashes:         1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: cINgSfKOW3jFadH14v35+iR9VLmSItXoeY3bWLATmqA=)
                          2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Gix1doZT6HdqB6Rndr92+DwWhim28hlszYTEvtmj1Xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
                          rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2935 (0xb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
        Validity
            Not Before: Apr 16 19:04:42 2026 GMT
            Not After : Apr 23 19:04:42 2026 GMT
        Subject: CN=69e132cb-465b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:16:64:2c:20:44:12:39:b4:60:e9:29:79:
                    31:be:6d:5c:e0:7d:69:e1:57:11:70:1e:2f:a5:ce:
                    d4:b4:36:25:fe:38:5b:7d:11:be:a0:48:e5:ab:6e:
                    23:41:17:4c:94:55:0b:ea:45:fa:a4:73:44:63:94:
                    ea:85:80:2e:50:d4:71:23:c9:1c:9e:83:ad:62:59:
                    74:54:28:8a:6d:94:1c:c8:09:96:a0:ad:ac:c9:0e:
                    be:18:9b:41:0b:3c:23:a0:f4:33:40:14:24:a4:d0:
                    95:96:63:7b:78:d7:ef:86:6c:e9:11:9c:b7:5d:b5:
                    42:f3:3f:86:28:10:0a:93:84:12:16:2a:3e:07:ad:
                    7e:c8:81:41:c9:80:c2:d1:72:b9:5f:50:ff:44:7a:
                    88:a6:ea:d8:4d:55:62:4c:c1:0a:af:15:58:1a:19:
                    4a:d9:9c:05:72:fa:c1:93:c8:a7:ad:f1:02:02:84:
                    9b:d7:0c:9a:30:61:6c:53:a7:c3:62:80:0a:51:aa:
                    08:42:81:b0:6f:1d:f3:45:14:bf:de:2d:50:cb:22:
                    7d:85:d4:93:c8:1d:77:ac:28:b2:ef:1d:4b:e3:43:
                    16:46:3e:00:fc:60:1d:86:d0:32:07:d3:33:57:68:
                    74:ae:57:1b:0e:5d:15:77:26:e5:66:b9:77:2c:8a:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7B:8F:FB:63:57:BC:32:3F:F2:4F:94:D9:2C:46:F0:A8:0D:D2:48
            X509v3 Authority Key Identifier:
                keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:f4:2e:33:26:01:18:d4:15:51:dc:ad:6a:88:44:ab:36:
         bd:c7:eb:88:bb:81:a5:d8:4b:7f:e5:1a:87:53:dd:81:fe:4f:
         be:6c:a7:3f:0c:78:91:44:19:f3:33:2b:12:7a:4b:7c:68:e7:
         52:30:40:da:a5:0b:35:b9:23:25:9e:7c:4f:ff:07:c0:80:43:
         75:18:40:4a:a5:85:22:62:47:99:09:87:70:59:30:ce:4a:d1:
         ad:dc:20:b5:f3:02:3b:57:52:aa:76:4d:35:46:00:0a:f2:7c:
         3d:ae:fd:81:fa:3b:fd:ba:61:84:b0:03:37:68:05:2d:bc:f0:
         73:16:46:75:e8:d8:9c:61:cd:da:2f:13:05:36:f5:f0:63:4e:
         33:4e:1d:4a:fa:61:3a:17:8b:d8:50:23:60:79:cf:e5:10:eb:
         91:77:45:c6:78:74:8f:12:0a:1e:72:d3:e7:0a:e2:3d:0d:bd:
         18:e2:58:e6:04:c8:1f:ba:f0:d2:3d:34:b0:26:05:ba:f0:16:
         4b:3e:9e:17:72:7f:da:af:bc:20:e6:d6:27:e5:47:e4:cc:46:
         43:17:1e:a8:5b:1b:30:2b:06:5b:49:b7:db:fc:4b:71:a4:09:
         cb:65:0f:e6:42:95:7a:1b:43:74:90:54:80:be:f6:cb:42:24:
         49:46:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:41 2026 by rpki-client