Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
File:                     UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json)
Hash identifier:          AMg6B4RiknzLjVa9t+x2870Zd9+BqbgFjRmz75RuRzQ=
Subject key identifier:   50:F9:A4:B4:23:02:52:B8:C5:7D:FC:4B:0B:D9:A7:8E:EE:96:98:E0
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Certificate issuer:       /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
Manifest number:          0263
Signing time:             Fri 17 Apr 2026 02:15:07 +0000
Manifest this update:     Fri 17 Apr 2026 02:15:07 +0000
Manifest next update:     Fri 24 Apr 2026 02:15:07 +0000
Files and hashes:         1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: 1w/CSiXGXMeVc0BfubAkoWcbKFm/8OgX1uK2Y7fzAlc=)
                          2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: UgIjU1Y9FIQZMVmVVjbiH3ya5cbpCsU387MDkBuS42U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
                          rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
        Validity
            Not Before: Apr 17 02:15:07 2026 GMT
            Not After : Apr 24 02:15:07 2026 GMT
        Subject: CN=69e197ab-3dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:a9:d9:49:86:0e:bb:83:1a:d3:38:d1:ec:
                    29:40:7f:f9:77:cc:41:9b:11:05:4a:f3:49:bf:0d:
                    05:d8:45:a9:29:91:54:e1:a7:80:e1:4d:f0:23:4e:
                    30:25:80:fa:67:3d:5d:80:65:ee:44:c0:70:04:14:
                    33:cb:a3:55:9a:f4:88:6b:d9:97:64:47:55:4c:66:
                    b4:e6:bd:3e:af:92:b0:5a:d0:a8:de:b0:27:76:df:
                    74:2e:4c:d8:82:65:2b:0e:c8:85:41:64:f6:4c:32:
                    60:82:56:0f:07:a7:1e:f3:2d:cd:35:8f:3a:80:af:
                    be:f4:10:6e:28:42:9e:ac:48:67:c7:4c:f2:33:98:
                    95:75:9d:87:ac:2f:61:d9:1e:a8:28:3c:18:43:28:
                    49:17:f1:8a:91:a1:d3:59:4f:65:a4:ac:3c:56:82:
                    ef:40:d3:50:20:8a:52:cd:ca:e2:72:b1:6d:a1:14:
                    97:ba:88:aa:26:be:d9:a9:0e:12:36:eb:81:26:52:
                    a8:76:c2:03:4c:41:8d:1b:4f:48:6d:9f:f0:b9:3f:
                    4d:2f:02:76:97:77:f5:30:d6:7d:67:70:fe:ce:9f:
                    02:a6:31:ac:31:29:b4:1d:2a:23:1e:e4:ff:5f:b3:
                    a2:41:11:83:aa:ac:97:1f:cd:cd:f3:e3:75:f4:10:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:A4:B4:23:02:52:B8:C5:7D:FC:4B:0B:D9:A7:8E:EE:96:98:E0
            X509v3 Authority Key Identifier:
                keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:15:55:75:13:93:b1:48:7a:ae:67:9c:37:26:a1:1f:f2:
         a7:71:68:75:6d:da:38:67:82:8f:23:a6:0c:ab:93:e8:5b:65:
         ee:d8:30:a2:fb:f8:18:7f:41:8c:3d:75:2d:97:2d:aa:6e:ad:
         5c:04:41:f2:a5:fb:2f:d3:a8:66:84:93:2c:20:d0:7a:ee:53:
         b5:f3:26:64:74:9a:f9:b0:5e:f8:4f:65:2b:36:7a:4b:08:b5:
         da:8c:70:52:64:72:6b:b5:4b:6e:03:7a:8b:23:c5:5a:c9:7d:
         be:de:64:a2:92:1d:ab:27:de:0d:4c:4e:d1:4f:f9:bf:d7:fe:
         a2:b4:7a:6a:6e:c3:4d:d0:27:22:8f:17:46:96:c3:a9:08:b2:
         d7:be:5e:2e:42:35:ba:a8:f4:14:05:f7:c7:b9:c3:d9:63:d0:
         d8:8c:6e:6f:83:51:eb:b8:a7:03:ed:0d:7a:dc:f4:b2:f5:8a:
         f1:31:e2:ac:37:22:c8:5a:ac:d2:91:20:1f:1a:7b:03:9b:c7:
         34:6f:c3:83:a1:40:d6:d2:92:67:bc:43:1f:8b:f9:87:f4:09:
         eb:51:94:8e:cf:b2:53:84:04:2e:6c:6f:2f:5c:7b:61:51:33:
         c9:cb:be:27:0f:5c:83:91:9c:61:e8:31:c6:ba:c1:99:9f:a6:
         e9:56:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:01 2026 by rpki-client