Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File:                     _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier:          KJXUWJegEYpkSCO0c5RWkwvIAy6pVl5vdVQ6cDfVViA=
Subject key identifier:   FF:86:C7:41:C2:56:36:D2:BB:A6:33:78:A6:E5:06:FC:40:59:EF:A6
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer:       /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number:          4E
Signing time:             Sun 05 Apr 2026 07:39:15 +0000
Manifest this update:     Sun 05 Apr 2026 07:39:14 +0000
Manifest next update:     Sun 12 Apr 2026 07:39:14 +0000
Files and hashes:         1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: aWsrtUHnq9v4A+CfcXas+t/kkcsy5wTe3qaCDoKSQzE=)
                          2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
        Validity
            Not Before: Apr  5 07:39:14 2026 GMT
            Not After : Apr 12 07:39:14 2026 GMT
        Subject: CN=69d211a3-ba50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:56:90:29:ba:6a:3a:11:61:ce:f3:c3:b9:47:
                    b4:c6:fd:eb:8b:c8:6c:31:07:41:37:b8:35:da:a0:
                    0e:cc:7e:1c:dc:bd:5d:75:ba:b0:a4:ad:16:e3:18:
                    67:7a:6a:0a:d5:34:4d:2a:e6:ce:6b:13:5e:a4:9c:
                    02:c0:b6:11:9a:31:7d:cb:29:1e:65:5d:66:8e:3d:
                    44:8e:61:88:fa:c9:77:d6:ee:2b:9e:6f:93:4e:b2:
                    33:65:81:54:af:8b:d0:3b:dd:f1:7b:da:54:a5:4b:
                    eb:61:f9:74:3e:00:ea:cb:c0:2b:83:29:34:d8:2f:
                    4a:33:d8:51:c5:52:86:7f:ae:6e:44:ec:32:af:16:
                    fe:58:f6:7d:ab:f6:06:80:27:66:c1:96:ca:0c:4e:
                    eb:d3:3b:08:b5:83:c0:66:b3:30:cb:47:a5:71:dc:
                    0a:6a:ab:80:c9:ae:cc:b4:c5:32:1a:78:d4:74:cc:
                    0e:d6:33:6f:ab:ec:4d:8f:76:4b:4a:d1:5b:71:14:
                    49:a2:dc:b1:bf:94:05:7e:7a:b5:cd:db:64:13:25:
                    57:f3:a6:af:86:28:66:07:5d:12:c5:18:cb:cf:02:
                    75:01:9e:db:78:4b:f1:63:83:aa:ed:d7:7b:c6:e9:
                    b8:4b:3b:58:81:00:37:48:9f:58:67:ad:f2:cd:17:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:86:C7:41:C2:56:36:D2:BB:A6:33:78:A6:E5:06:FC:40:59:EF:A6
            X509v3 Authority Key Identifier:
                keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:18:fc:a5:cd:09:0d:d0:0e:23:b6:ba:e6:b9:09:ee:19:81:
         96:ae:40:d8:f4:2b:2d:fb:84:45:2d:c6:a4:09:bf:7e:e6:aa:
         63:58:eb:0f:30:d7:58:96:ae:06:ec:6f:7d:29:7e:8f:01:09:
         d7:77:b9:37:a2:2a:f7:80:d7:da:fa:e3:df:b0:c7:48:89:17:
         2c:5d:25:3f:69:97:e6:d5:b4:3b:7d:30:d3:f4:e3:6f:15:07:
         bc:14:fc:75:73:10:5e:af:e1:58:ac:0b:b2:73:b7:82:66:c5:
         c6:c4:c9:5f:b3:42:bf:f6:36:07:42:96:18:cb:5f:1e:3c:ed:
         93:fb:aa:14:8f:bb:00:17:e3:04:88:c3:09:a3:89:27:64:a6:
         2c:48:e1:d7:98:bf:8a:eb:79:bc:54:3d:34:c9:68:53:da:9e:
         6d:14:e7:5f:fc:2a:4c:30:fd:73:07:98:3b:75:16:e1:e0:ca:
         ac:b2:91:9f:8b:7a:9a:4e:42:17:39:dd:4c:55:f2:84:f9:1b:
         39:9d:9a:53:73:d9:d8:cc:36:25:8a:5a:0e:87:1b:52:a2:eb:
         19:58:17:fa:32:0a:d0:49:c3:e1:d3:42:ce:37:35:2d:f8:4b:
         87:a1:62:89:b4:c5:3a:57:c5:36:4a:14:da:16:83:d4:b5:8a:
         e7:94:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:23:59 2026 by rpki-client