Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File:                     Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier:          p+u+39TUYj7+Y6n08SAqFQ9VU8Sb6tGbd+ZDOTd82kg=
Subject key identifier:   FC:AC:AC:09:91:0E:31:D7:A5:63:F3:F1:E5:9C:3C:C4:E8:96:08:E9
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer:       /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number:          4C
Signing time:             Sun 05 Apr 2026 07:43:33 +0000
Manifest this update:     Sun 05 Apr 2026 07:43:32 +0000
Manifest next update:     Sun 12 Apr 2026 07:43:32 +0000
Files and hashes:         1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: xPvWgmQOO+WpRmD3QdPcv0O07RJevR4mL5gZGnOUBxU=)
                          2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
        Validity
            Not Before: Apr  5 07:43:32 2026 GMT
            Not After : Apr 12 07:43:32 2026 GMT
        Subject: CN=69d212a4-1a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:1d:e0:d1:74:2d:d4:a7:a6:f9:95:ab:2a:
                    e0:61:99:5f:12:13:89:11:fc:31:ec:f5:c6:c0:4b:
                    95:d2:3b:35:29:59:c0:68:1b:58:37:aa:29:08:ed:
                    d2:e7:4c:ca:c8:b4:a7:50:20:99:3a:3f:13:a6:b6:
                    e0:56:c7:f1:ac:d1:66:06:1d:fb:cb:c4:c2:55:7a:
                    3f:1b:9f:63:cc:d2:f9:89:70:bb:aa:8a:7a:18:e9:
                    2c:de:2a:98:87:47:ae:6e:58:f6:a2:6a:32:95:e0:
                    7e:53:c7:69:56:09:ee:9e:9d:c6:25:4c:6f:57:b5:
                    20:87:50:b4:20:c7:0e:2c:b0:28:46:55:7f:63:4f:
                    37:06:39:11:90:5d:ce:ff:e1:38:f1:5b:6b:17:9b:
                    2f:57:80:38:37:33:4b:d6:b0:10:82:c4:61:9c:ad:
                    fb:22:0d:5e:0e:55:4c:f2:06:ac:bb:ea:ad:76:f5:
                    9e:00:c9:ff:ae:c5:ba:6e:d9:4d:80:ee:d9:e8:54:
                    b3:03:f8:ef:d5:5f:74:c3:2a:c4:63:4a:66:a9:73:
                    16:3d:f4:ab:6b:39:5e:18:90:04:b3:12:48:0a:fc:
                    54:33:f5:ef:84:9e:47:fa:b8:f4:8a:0b:81:88:65:
                    9f:ca:87:6f:71:00:ba:c9:de:d6:df:c1:e3:f0:31:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AC:AC:09:91:0E:31:D7:A5:63:F3:F1:E5:9C:3C:C4:E8:96:08:E9
            X509v3 Authority Key Identifier:
                keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:95:22:99:31:b3:8a:ff:b2:9f:a4:82:25:0f:62:90:d0:
         76:3f:61:21:95:41:2d:2a:ca:00:56:4c:40:4e:35:a2:e7:94:
         ad:59:5b:6c:a3:49:a4:6c:27:0c:bd:2c:d1:a4:ef:e0:5c:7e:
         8c:c6:4c:da:68:30:a3:20:9b:70:cb:0b:d0:eb:be:d6:37:61:
         09:f5:b3:26:3f:eb:0b:37:e6:a4:21:8e:37:79:c6:54:60:fe:
         17:74:ea:81:b1:18:21:47:1a:f8:76:95:44:3c:bf:06:1e:65:
         49:30:e3:03:9a:ce:5e:ac:fc:df:24:55:ab:b4:8a:f8:4b:57:
         2b:b5:af:3f:0e:1f:ac:d7:dd:d2:c5:4b:ce:1f:55:1d:af:26:
         41:ff:f3:8b:9f:a8:f3:4c:e9:60:ce:de:97:87:82:6f:ef:87:
         d6:14:0f:50:2f:25:d4:d8:94:fa:fe:3e:8e:78:8c:a8:a9:71:
         0b:0b:dc:9c:1b:25:01:7d:39:14:c8:99:19:73:2d:f6:11:f3:
         b9:cf:f3:b3:f5:9c:b8:d7:08:24:b2:20:4d:f0:9e:4e:67:08:
         f4:03:6b:31:b7:d3:57:ae:fc:10:08:2f:f9:f0:b4:25:6e:6b:
         50:7f:65:ee:a5:55:e0:11:6d:cf:c4:fd:fc:d7:ff:b4:82:f5:
         84:32:70:6a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NENDMzExMC8GA1UEBRMoNTFGRTYxREM2NTMzNkRBOEZERDlCQzQ5N0JGQTVGOUUy
MzJFMENDNjAeFw0yNjA0MDUwNzQzMzJaFw0yNjA0MTIwNzQzMzJaMBgxFjAUBgNV
BAMTDTY5ZDIxMmE0LTFhMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDyx3g0XQt1Kem+ZWrKuBhmV8SE4kR/DHs9cbAS5XSOzUpWcBoG1g3qikI7dLn
TMrItKdQIJk6PxOmtuBWx/Gs0WYGHfvLxMJVej8bn2PM0vmJcLuqinoY6SzeKpiH
R65uWPaiajKV4H5Tx2lWCe6encYlTG9XtSCHULQgxw4ssChGVX9jTzcGORGQXc7/
4TjxW2sXmy9XgDg3M0vWsBCCxGGcrfsiDV4OVUzyBqy76q129Z4Ayf+uxbpu2U2A
7tnoVLMD+O/VX3TDKsRjSmapcxY99KtrOV4YkASzEkgK/FQz9e+Enkf6uPSKC4GI
ZZ/Kh29xALrJ3tbfwePwMaZTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/KysCZEO
MdelY/Px5Zw8xOiWCOkwHwYDVR0jBBgwFoAUUf5h3GUzbaj92bxJe/pfniMuDMYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0Q0MzLzg5ODk5QjlDQ0I2
MDExRjA5RjlFRUYwRkM0RjlBRTAyL1VmNWgzR1V6YmFqOTJieEplX3BmbmlNdURN
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVWY1aDNHVXpiYWo5MmJ4SmVfcGZuaU11RE1ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
Q0MzLzg5ODk5QjlDQ0I2MDExRjA5RjlFRUYwRkM0RjlBRTAyL1VmNWgzR1V6YmFq
OTJieEplX3BmbmlNdURNWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCVz5UimTGziv+yn6SCJQ9ikNB2P2EhlUEtKsoAVkxATjWi55StWVtso0mkbCcM
vSzRpO/gXH6MxkzaaDCjIJtwywvQ677WN2EJ9bMmP+sLN+akIY43ecZUYP4XdOqB
sRghRxr4dpVEPL8GHmVJMOMDms5erPzfJFWrtIr4S1crta8/Dh+s193SxUvOH1Ud
ryZB//OLn6jzTOlgzt6Xh4Jv74fWFA9QLyXU2JT6/j6OeIyoqXELC9ycGyUBfTkU
yJkZcy32EfO5z/Oz9Zy41wgksiBN8J5OZwj0A2sxt9NXrvwQCC/58LQlbmtQf2Xu
pVXgEW3PxP381/+0gvWEMnBq
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:53 2026 by rpki-client