Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          AuUKTuihgsPg9yBugnhAXCyIa3SCJHPgi5Kg2fKJ9mM=
Subject key identifier:   35:E0:65:8F:F1:21:CD:10:CC:1D:6A:20:0F:E8:CD:FD:F0:AB:FE:A5
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          9E
Signing time:             Fri 17 Apr 2026 07:02:19 +0000
Manifest this update:     Fri 17 Apr 2026 07:02:18 +0000
Manifest next update:     Fri 24 Apr 2026 07:02:18 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: mlGGVxa2J3XSSj6KTuemyReEJ1rskMpd+0QhwySM4Eo=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: UHvDQg4EoApzyLpFSzC8aB9dr9pOB/LRHrT90NsCO5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Apr 17 07:02:18 2026 GMT
            Not After : Apr 24 07:02:18 2026 GMT
        Subject: CN=69e1dafa-1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:1c:29:27:ef:c0:44:40:72:03:80:48:86:
                    fa:0f:dd:f8:82:dc:e9:31:f6:76:16:d8:2d:5d:89:
                    a5:48:05:90:e8:0f:aa:2b:c9:b5:c7:92:18:15:bb:
                    87:75:91:1e:6b:f0:01:48:0c:d0:dd:ea:83:14:81:
                    b2:8a:8e:a4:5b:79:d8:74:cc:34:a7:be:fb:a0:44:
                    7f:1b:e9:5d:fb:f8:ee:22:42:4f:ad:6d:5d:d1:a6:
                    8d:f3:c1:e7:ce:7c:eb:ba:c2:71:29:85:3e:3a:46:
                    1f:23:9f:6a:b7:4e:b8:95:85:e4:53:ed:46:2b:70:
                    a3:ec:e1:df:e6:be:49:e1:c3:65:cf:2e:8e:90:e5:
                    1e:36:1f:1e:9e:f2:e8:c8:8f:c0:69:20:01:81:9b:
                    e6:b5:60:e7:f6:cc:b5:4d:83:96:cd:97:b8:8f:0e:
                    95:2d:2c:70:a9:3a:90:1e:62:4a:67:0c:0f:e9:a8:
                    11:3b:20:74:b5:52:2b:bb:5b:3a:2d:2f:8d:68:c0:
                    88:e5:15:30:cb:00:44:8a:e3:c3:57:3c:6a:c8:8a:
                    dd:4f:ad:ed:95:79:32:b1:02:24:8c:13:9b:82:62:
                    fd:56:d7:c9:99:85:e5:2a:d8:4e:0c:ad:70:5d:5f:
                    86:64:81:b6:c9:96:37:0f:14:6b:e8:61:74:66:d6:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:65:8F:F1:21:CD:10:CC:1D:6A:20:0F:E8:CD:FD:F0:AB:FE:A5
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:7a:d7:51:dc:4d:1b:cc:51:e1:2b:be:99:fa:11:78:0a:
         a2:b1:8c:1c:ce:20:72:fd:bc:a2:f4:e7:4d:e6:42:fb:36:f9:
         b9:99:1e:7d:c2:b5:d7:04:d3:94:a0:80:ff:79:6d:fb:75:47:
         d9:3c:8b:24:1f:ee:49:4a:fe:e3:0f:96:f5:26:27:0b:5e:70:
         97:c0:52:4b:93:83:8b:27:a8:8d:c6:e7:22:99:9e:ec:c3:f5:
         03:69:9e:07:67:d8:24:d9:ce:03:bc:94:e2:9b:e6:d0:11:62:
         1a:64:f7:f0:86:7a:4b:b3:e4:61:35:b9:0f:1b:7c:66:11:7f:
         7d:b5:f6:47:cb:5f:0d:3c:2f:4d:b7:95:28:de:7f:b0:dc:be:
         89:6c:06:70:07:33:0a:b2:9c:d5:d8:c9:06:48:0c:fb:b8:db:
         96:a0:bb:54:e8:f0:71:fb:71:79:72:a2:de:34:1d:49:0e:2d:
         c3:dc:50:db:ba:4c:de:01:d4:b9:61:1f:9f:cc:ab:35:00:b8:
         24:e4:c6:f3:12:c6:6a:f8:d1:81:63:63:5b:67:a3:98:6a:cc:
         ca:a4:7c:f7:30:04:77:af:50:d0:32:8c:65:4c:f6:22:66:c0:
         aa:21:24:00:28:a9:f8:eb:e8:3c:b4:92:c4:68:a2:e2:f2:19:
         7c:1d:e8:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQxQ0MxMTAvBgNVBAUTKDUyMzFDNDU3NDEzQjlDNzlDRDVCMzAwRDg0QTQzQjAw
MzlCQjY4MTMwHhcNMjYwNDE3MDcwMjE4WhcNMjYwNDI0MDcwMjE4WjAYMRYwFAYD
VQQDEw02OWUxZGFmYS0xMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnqwcKSfvwERAcgOASIb6D934gtzpMfZ2FtgtXYmlSAWQ6A+qK8m1x5IYFbuH
dZEea/ABSAzQ3eqDFIGyio6kW3nYdMw0p777oER/G+ld+/juIkJPrW1d0aaN88Hn
znzrusJxKYU+OkYfI59qt064lYXkU+1GK3Cj7OHf5r5J4cNlzy6OkOUeNh8envLo
yI/AaSABgZvmtWDn9sy1TYOWzZe4jw6VLSxwqTqQHmJKZwwP6agROyB0tVIru1s6
LS+NaMCI5RUwywBEiuPDVzxqyIrdT63tlXkysQIkjBObgmL9VtfJmYXlKthODK1w
XV+GZIG2yZY3DxRr6GF0ZtadxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXgZY/x
Ic0QzB1qIA/ozf3wq/6lMB8GA1UdIwQYMBaAFFIxxFdBO5x5zVswDYSkOwA5u2gT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFDQy83MzkwNjgwRTRB
M0ExMUYwQkQ1QzFCNEZDNEY5QUUwMi9VakhFVjBFN25Ibk5XekFOaEtRN0FEbTdh
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDFDQy83MzkwNjgwRTRBM0ExMUYwQkQ1QzFCNEZDNEY5QUUwMi9VakhFVjBFN25I
bk5XekFOaEtRN0FEbTdhQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADQp611HcTRvMUeErvpn6EXgKorGMHM4gcv28ovTnTeZC+zb5uZkefcK11wTT
lKCA/3lt+3VH2TyLJB/uSUr+4w+W9SYnC15wl8BSS5ODiyeojcbnIpme7MP1A2me
B2fYJNnOA7yU4pvm0BFiGmT38IZ6S7PkYTW5Dxt8ZhF/fbX2R8tfDTwvTbeVKN5/
sNy+iWwGcAczCrKc1djJBkgM+7jblqC7VOjwcftxeXKi3jQdSQ4tw9xQ27pM3gHU
uWEfn8yrNQC4JOTG8xLGavjRgWNjW2ejmGrMyqR89zAEd69Q0DKMZUz2ImbAqiEk
ACip+OvoPLSSxGii4vIZfB3oCg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:58 2026 by rpki-client