Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File:                     UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier:          DdKhxYJXT4BRG+s6muztdvl2vX65y0vR/XWM/z7mL8U=
Subject key identifier:   48:BB:DA:EB:5A:97:90:8B:F1:51:21:D2:A9:68:8F:06:C8:D2:0D:C1
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer:       /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial:       05E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number:          05D6
Signing time:             Thu 16 Apr 2026 22:55:28 +0000
Manifest this update:     Thu 16 Apr 2026 22:55:28 +0000
Manifest next update:     Thu 23 Apr 2026 22:55:28 +0000
Files and hashes:         1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: LgiOOBc9+WzmDhLeNvk8UTS5YXWUvbXD6x0hMjEgTuQ=)
                          2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
                          rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
        Validity
            Not Before: Apr 16 22:55:28 2026 GMT
            Not After : Apr 23 22:55:28 2026 GMT
        Subject: CN=69e168e0-26ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:45:19:65:dd:42:81:fc:ab:a4:7e:7b:5c:
                    2e:7b:42:97:b1:48:e2:f5:bf:f9:a7:74:82:c8:f9:
                    e2:ae:3c:60:7d:88:95:58:af:45:fe:ee:34:27:f9:
                    c0:7a:35:5c:83:8d:e1:b0:81:b8:42:69:f9:b1:2d:
                    fa:20:b9:e9:cc:e5:1d:73:8b:8f:f9:59:50:46:95:
                    76:f1:9c:3e:18:7f:78:33:ee:c7:c6:e7:af:ab:9a:
                    e9:20:80:f8:c3:b4:3a:7d:8a:62:bf:af:92:09:bd:
                    85:de:6d:72:28:15:6f:48:50:d2:7b:57:94:e7:1e:
                    e0:b9:37:7d:9f:5e:4a:88:d0:13:a7:48:aa:b8:14:
                    a4:93:0b:8c:fe:bc:b0:4d:5c:82:5e:0a:5a:df:77:
                    77:a3:83:25:d9:3a:b5:98:90:b5:34:0a:87:0c:ea:
                    40:ec:d5:d3:7d:92:4c:f2:d9:b0:80:7f:52:c5:a1:
                    f5:54:5c:de:27:1d:d5:dc:8a:c1:7d:51:bb:88:6a:
                    45:da:ab:89:5e:c3:5c:0f:a6:6c:74:b4:a6:03:4a:
                    26:90:1f:45:9e:fc:53:20:37:20:5f:0a:dd:b9:19:
                    e8:69:7b:ed:01:5a:64:b4:1f:46:fe:4e:ab:03:da:
                    0e:69:f2:3e:75:93:21:6b:42:99:09:01:d3:24:ff:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:DA:EB:5A:97:90:8B:F1:51:21:D2:A9:68:8F:06:C8:D2:0D:C1
            X509v3 Authority Key Identifier:
                keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:90:c9:fc:66:78:b8:a8:ea:3c:91:5e:ff:b2:d7:5c:18:
         5e:da:72:3e:89:b4:71:0d:1f:fc:82:06:d9:76:82:6a:ad:cd:
         c9:39:b9:cd:53:55:d3:3f:95:39:19:ae:7e:c6:e0:55:36:29:
         cb:27:34:88:9b:ea:45:94:bf:3d:e1:b8:54:54:16:63:d9:c8:
         49:ff:d2:76:e4:2b:a5:bc:b8:7c:98:f5:ea:04:39:b6:88:1c:
         9e:da:ef:12:11:96:be:a2:ab:c4:8f:2c:0d:d2:11:03:c1:0c:
         56:61:60:6d:3d:48:43:6b:19:7e:8e:70:7a:14:d4:75:d4:11:
         df:f2:5e:4f:b7:52:dc:de:fb:13:e8:b6:aa:f6:fb:8c:3f:87:
         1d:48:05:21:97:6f:df:69:1a:59:66:36:65:db:d4:69:82:29:
         17:48:51:a7:ea:00:4a:26:18:10:f3:90:e1:4b:9f:ef:4f:43:
         e9:7c:44:fa:6a:4f:04:0f:1e:c0:86:f4:65:10:1a:55:37:84:
         a2:cf:78:99:e5:a2:ca:3e:bb:fc:04:a2:93:38:ed:63:9a:bb:
         cf:81:80:32:3b:08:19:f0:ec:e3:c9:21:c0:56:0f:c1:6f:10:
         cc:ca:bf:23:2f:9a:27:ce:a8:27:87:78:47:ca:ac:63:f0:61:
         c6:4a:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:05 2026 by rpki-client