Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
File:                     U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json)
Hash identifier:          MRJ2/oGyhl6hvKiMF4snVbSVszD/JL2pA72TE3IhBqg=
Subject key identifier:   29:FF:01:FC:C5:E0:14:03:90:29:51:D6:86:7D:76:40:8B:1B:B7:35
Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85
Certificate issuer:       /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
Certificate serial:       0CFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
Manifest number:          0CEE
Signing time:             Sat 04 Apr 2026 18:03:43 +0000
Manifest this update:     Sat 04 Apr 2026 18:03:43 +0000
Manifest next update:     Sat 11 Apr 2026 18:03:43 +0000
Files and hashes:         1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: 9DAHIIZJQEr0gQIRcYNqVZmkR/bFsVzBj+7CAXJ4EyA=)
                          2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: tzJLBY8bc2irUv60IUC/jCk659W1kTuBCxqQtwS0zo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl
                          rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3323 (0xcfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
        Validity
            Not Before: Apr  4 18:03:43 2026 GMT
            Not After : Apr 11 18:03:43 2026 GMT
        Subject: CN=69d1527f-3578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:54:66:08:6c:ad:10:f4:c9:05:64:2c:1e:
                    e9:05:19:60:3a:e7:28:4d:c6:ee:90:f5:a6:0b:c2:
                    25:f2:ad:04:ab:86:b7:85:f8:e6:96:80:c8:aa:94:
                    89:c9:4c:08:09:7f:d0:5a:86:51:6a:ab:70:50:00:
                    f3:02:1f:eb:70:b8:bf:e9:a9:c7:56:85:40:2f:e3:
                    9c:3a:4d:33:31:36:be:6c:0d:6b:0c:aa:3f:d0:85:
                    26:20:da:42:64:0c:9b:8a:14:3e:b1:4d:28:ae:0b:
                    7b:d8:3b:69:f5:ae:75:5a:ed:32:b3:12:6d:e2:64:
                    b0:b3:e7:e4:e3:e0:4e:06:1f:bb:5e:e0:85:e0:00:
                    84:e4:13:f0:5f:69:31:25:48:1f:60:14:fe:6a:72:
                    e2:cf:ec:35:04:40:c6:72:c7:a7:1d:1e:0d:8b:e7:
                    60:fa:5b:ba:c0:bf:9f:f5:2f:a1:f9:53:db:45:62:
                    27:84:de:c6:0d:d0:e2:b3:fb:e0:01:92:38:ce:13:
                    6f:23:46:d1:3e:9b:bc:5a:f7:0b:2b:0b:01:a7:49:
                    80:7c:73:53:d6:be:9e:42:d9:67:59:2b:e4:58:a1:
                    dc:67:dc:25:80:1a:ab:93:0e:76:01:03:2d:c2:c3:
                    c9:c8:02:4f:13:e8:27:38:48:96:bf:6e:19:e3:10:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:01:FC:C5:E0:14:03:90:29:51:D6:86:7D:76:40:8B:1B:B7:35
            X509v3 Authority Key Identifier:
                keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:de:3e:ee:b4:46:46:f0:d0:6b:49:44:49:81:a7:0e:b8:32:
         a1:29:da:82:1f:81:e1:f2:a5:a0:95:40:26:78:bb:18:e6:9b:
         3b:d1:33:85:7b:7b:4f:1a:8e:51:66:81:e4:4c:4e:80:26:5c:
         8f:b4:07:e8:30:6c:96:6d:b0:62:17:3a:1e:a5:51:19:91:df:
         f1:f9:80:35:9c:bc:8c:e6:70:cc:e3:e2:96:6e:d2:77:2c:e0:
         34:3d:8f:7d:a6:df:fa:23:ca:af:75:2e:6e:40:5f:63:9b:aa:
         b1:00:b7:16:ab:9d:12:49:e3:8f:e2:de:11:8d:58:e8:f3:cd:
         dc:b4:42:4a:e7:26:84:c1:29:e3:54:43:af:fe:47:50:a0:50:
         1d:10:41:49:d0:28:97:9c:24:95:e4:53:a2:96:cf:84:56:78:
         da:dc:b2:e3:65:7c:f8:55:c4:66:47:80:dc:64:e0:2f:51:50:
         37:0b:cc:b3:dc:4c:1d:5b:cd:cd:a0:dc:aa:f0:53:e9:3d:c2:
         83:c8:67:34:35:5c:b4:86:01:b2:0a:69:79:60:b7:88:cf:75:
         aa:73:66:c3:87:d5:61:1f:7c:11:23:9e:fe:b1:cc:92:49:41:
         12:c9:8c:e7:14:be:34:9d:50:a6:57:0c:0d:b1:3e:3b:f5:f6:
         a4:5a:52:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2
NUI0REQ4ODUwHhcNMjYwNDA0MTgwMzQzWhcNMjYwNDExMTgwMzQzWjAYMRYwFAYD
VQQDEw02OWQxNTI3Zi0zNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4D1UZghsrRD0yQVkLB7pBRlgOucoTcbukPWmC8Il8q0Eq4a3hfjmloDIqpSJ
yUwICX/QWoZRaqtwUADzAh/rcLi/6anHVoVAL+OcOk0zMTa+bA1rDKo/0IUmINpC
ZAybihQ+sU0orgt72Dtp9a51Wu0ysxJt4mSws+fk4+BOBh+7XuCF4ACE5BPwX2kx
JUgfYBT+anLiz+w1BEDGcsenHR4Ni+dg+lu6wL+f9S+h+VPbRWInhN7GDdDis/vg
AZI4zhNvI0bRPpu8WvcLKwsBp0mAfHNT1r6eQtlnWSvkWKHcZ9wlgBqrkw52AQMt
wsPJyAJPE+gnOEiWv24Z4xCT9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCn/AfzF
4BQDkClR1oZ9dkCLG7c1MB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0
NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP
bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARd4+7rRGRvDQa0lESYGnDrgyoSnagh+B4fKloJVAJni7GOabO9EzhXt7TxqO
UWaB5ExOgCZcj7QH6DBslm2wYhc6HqVRGZHf8fmANZy8jOZwzOPilm7SdyzgND2P
fabf+iPKr3UubkBfY5uqsQC3FqudEknjj+LeEY1Y6PPN3LRCSucmhMEp41RDr/5H
UKBQHRBBSdAol5wkleRTopbPhFZ42tyy42V8+FXEZkeA3GTgL1FQNwvMs9xMHVvN
zaDcqvBT6T3Cg8hnNDVctIYBsgppeWC3iM91qnNmw4fVYR98ESOe/rHMkklBEsmM
5xS+NJ1QplcMDbE+O/X2pFpSXA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:18 2026 by rpki-client