Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
File:                     5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json)
Hash identifier:          4PFXREk5fVdLArHX2HRumIFX1PfOM3a7jLhVRq8aVl4=
Subject key identifier:   C3:60:55:B6:E5:B6:5C:01:10:17:6D:82:F7:60:11:D1:F3:1A:69:F9
Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86
Certificate issuer:       /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
Certificate serial:       0717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
Manifest number:          070F
Signing time:             Sat 04 Apr 2026 21:42:53 +0000
Manifest this update:     Sat 04 Apr 2026 21:42:52 +0000
Manifest next update:     Sat 11 Apr 2026 21:42:52 +0000
Files and hashes:         1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: HIKalOnXyMdbVBuDvg0V42P3M+eXUCW2az1luTOO18k=)
                          2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: OEMpa1KlXpQKnwSOPbdVNFMo4hIhQv2n0cr4lbB8s+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl
                          rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160BD2, serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86
        Validity
            Not Before: Apr  4 21:42:52 2026 GMT
            Not After : Apr 11 21:42:52 2026 GMT
        Subject: CN=69d185dd-dcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:c2:07:73:4a:3b:be:7d:5d:9b:60:92:3a:
                    ea:16:ee:48:f1:11:b4:9a:fd:ba:8e:b1:e7:f4:f6:
                    06:dd:68:7a:df:05:a5:92:80:bd:fe:91:4d:48:bf:
                    0b:6d:4e:d7:c4:69:73:7d:a6:2a:69:e3:f2:97:86:
                    84:ef:91:c8:31:19:ad:af:5c:20:67:a7:84:df:31:
                    40:d0:d1:b2:b9:5c:31:06:70:e4:98:6c:39:14:f9:
                    b1:75:23:f5:ce:44:b5:c5:4d:c0:ef:96:de:c4:cf:
                    05:6e:67:f3:0e:81:07:7a:74:28:10:97:f3:bf:2a:
                    0b:b8:59:7a:a2:95:e8:7a:4f:c9:50:a4:07:8a:05:
                    2f:77:10:5e:c8:9a:f0:9c:de:6e:04:b6:cd:25:00:
                    6c:f0:90:8a:6d:9f:34:07:6d:12:30:57:79:3b:73:
                    af:a4:c3:41:ef:6b:b7:70:99:4e:47:3a:26:a6:4b:
                    f8:99:61:5f:1c:1e:74:d8:d8:87:f3:92:7c:2b:96:
                    76:dd:d1:1a:6c:48:7c:10:76:59:f3:2e:a1:08:58:
                    f1:8c:5f:3c:b9:3b:93:b7:85:96:f4:55:d8:7c:79:
                    fa:19:da:25:ab:3b:3a:e3:51:7e:02:ce:93:73:35:
                    40:8e:46:5e:b5:6f:2a:f7:fe:85:ca:0a:d7:6d:e9:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:55:B6:E5:B6:5C:01:10:17:6D:82:F7:60:11:D1:F3:1A:69:F9
            X509v3 Authority Key Identifier:
                keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:65:5c:c9:29:f9:1b:73:5d:39:82:fa:4c:96:3f:58:6f:52:
         bf:4f:87:2b:ac:50:9e:83:ad:21:4d:e0:9d:67:04:2f:66:8e:
         73:a5:3b:a4:66:44:ea:53:88:74:c8:10:44:0e:dc:b2:d7:67:
         54:a4:cc:75:cb:91:3a:a2:f1:7c:b9:9e:eb:5f:bb:7c:e6:4d:
         84:1c:d5:aa:9b:d1:0a:48:68:5a:47:29:1d:83:e7:15:4d:da:
         47:50:49:35:29:27:d6:20:62:6a:92:0d:53:60:28:7a:fa:cb:
         3b:f8:fb:f2:ab:e5:f7:4b:39:4c:60:9a:31:82:49:c0:cf:cb:
         67:19:8f:3a:2c:5f:e8:e6:bd:5f:71:30:83:82:5f:f7:9f:de:
         58:f1:7a:47:c6:a6:aa:ad:47:0c:64:ce:5c:31:fa:a8:f1:c3:
         20:72:6c:c9:74:61:a8:69:50:d5:d4:22:eb:e4:ac:48:b3:2b:
         9c:77:01:6e:c4:27:f2:14:4e:30:17:c9:ef:c6:71:51:a7:05:
         13:74:48:8d:2e:ce:ce:f0:50:2e:3b:bc:3a:13:bf:3e:5c:36:
         4d:f5:8c:96:d1:37:b9:f2:36:81:3b:3a:88:fd:67:6b:39:e6:
         c9:53:78:1f:cd:9e:6a:68:51:b3:99:f6:08:aa:4c:9f:f6:28:
         14:66:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:34 2026 by rpki-client