Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
File:                     UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json)
Hash identifier:          fb76lZNXQAD9YqklHGMixyRj4fgIsscak9SwgBub0do=
Subject key identifier:   74:57:27:A7:8C:17:FB:F4:56:84:24:EC:9A:F9:F5:67:2B:E2:5A:18
Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
Certificate issuer:       /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
Manifest number:          01D2
Signing time:             Fri 17 Apr 2026 03:20:49 +0000
Manifest this update:     Fri 17 Apr 2026 03:20:48 +0000
Manifest next update:     Fri 24 Apr 2026 03:20:48 +0000
Files and hashes:         1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: hNEdttZHduuhZi1JDLN9edzj5TE5oc/spDTHb48TUTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
                          rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
        Validity
            Not Before: Apr 17 03:20:48 2026 GMT
            Not After : Apr 24 03:20:48 2026 GMT
        Subject: CN=69e1a710-404d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:12:7d:e6:9e:cb:48:45:ad:46:e9:ee:4b:
                    64:fb:88:52:a6:9a:6c:52:15:4c:f5:54:54:cc:44:
                    e6:94:32:44:3b:7e:13:ae:b8:c0:00:2f:b5:02:9e:
                    ba:35:ef:ba:b3:03:78:8b:b9:f4:34:f1:48:0a:e7:
                    df:35:8a:27:12:cd:90:4b:5b:d4:60:1b:a8:a8:b2:
                    dd:54:05:70:b1:45:00:47:13:97:65:c5:a2:d4:8d:
                    d7:23:d9:9d:c3:f9:82:43:19:48:cf:32:26:60:d2:
                    61:36:d7:24:5c:34:86:ec:bb:d9:60:c2:17:5a:12:
                    63:5e:3b:51:6d:33:5b:a0:c8:5b:f9:ce:2c:61:a2:
                    f4:f1:bf:97:74:fa:c5:e0:7b:cd:8d:3a:3b:e9:b5:
                    0e:a9:68:e1:11:85:e9:9b:f8:3c:ee:b6:05:00:ff:
                    2d:42:40:f0:03:30:64:8b:f6:fe:9e:01:e1:1b:da:
                    ae:d1:c2:ff:c2:c3:7f:c6:5e:41:1c:88:d4:69:09:
                    13:8b:22:72:31:25:ed:52:62:60:1d:0d:71:b9:b2:
                    38:c5:cc:9b:dd:c3:e2:f0:fc:43:e9:4c:3b:01:54:
                    62:e7:9d:11:52:b4:7b:d6:7c:06:c1:9f:bc:2e:5e:
                    05:9f:14:d3:35:ba:0c:4a:78:22:33:2b:d9:2b:c8:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:57:27:A7:8C:17:FB:F4:56:84:24:EC:9A:F9:F5:67:2B:E2:5A:18
            X509v3 Authority Key Identifier:
                keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:87:c4:45:36:af:8c:b7:61:55:2a:34:26:0c:da:b2:0a:
         f1:a3:94:62:dc:b7:cb:c1:cf:c2:a2:f9:37:e2:84:91:53:d0:
         9f:13:40:8e:30:5a:05:2a:8b:fe:dd:0c:41:2e:f1:28:67:1d:
         25:51:9c:09:4a:e0:dd:5a:a8:69:77:cf:26:69:3d:de:45:d5:
         59:31:18:2a:25:3f:92:2c:26:1d:17:60:6e:64:e6:76:78:93:
         72:11:e1:de:bb:83:21:c8:4b:00:38:98:ba:70:64:82:99:1e:
         b8:d2:85:39:37:0f:27:e0:01:46:c8:2f:8b:da:3b:10:53:19:
         13:bc:ad:e4:33:14:ad:23:86:7a:0b:43:e3:05:98:2c:0f:b5:
         81:28:02:99:74:73:c2:d2:b7:12:61:81:53:5e:fe:42:4f:b4:
         67:24:bb:e5:9d:4f:7e:7f:2b:bf:9a:c3:85:6d:05:81:fc:bf:
         c6:ef:bf:4b:c1:0d:7a:d7:96:6d:03:f8:89:5e:30:f8:9d:90:
         d3:da:a0:a7:a1:72:5b:d7:21:56:07:af:ff:27:bd:bc:0a:27:
         d9:44:cb:ef:79:cd:af:47:1a:c7:59:86:ab:c0:99:29:2b:15:
         8d:92:03:4f:6e:51:8d:e3:10:1b:36:f5:ab:bd:a2:46:73:f2:
         d1:1d:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:36 2026 by rpki-client