Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          jwt6HfgscI9tHQuRQ4/2VM/i8BI9ENGVuGeCTmrTsN0=
Subject key identifier:   C6:06:D0:CB:B0:AC:D9:31:B4:F5:1F:BB:60:5D:A8:9D:89:94:7C:91
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       358E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          355D
Signing time:             Sat 04 Apr 2026 14:27:57 +0000
Manifest this update:     Sat 04 Apr 2026 14:27:57 +0000
Manifest next update:     Sat 11 Apr 2026 14:27:57 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: Dwchst3uOw24o2eA5N1dAACe31AY4NK+22oYWWTw3Qk=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: Uyndl2RNPQU8Q6UunWd7sOPMzU0qjSa6Yu6/kDwXZIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13710 (0x358e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Apr  4 14:27:57 2026 GMT
            Not After : Apr 11 14:27:57 2026 GMT
        Subject: CN=69d11fed-f180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:0b:b6:4e:73:31:df:7e:38:a6:a5:34:35:
                    2e:45:ab:e5:fc:9f:71:91:15:7c:2c:8c:a8:1f:dc:
                    74:02:90:6b:aa:bc:80:e2:d8:90:63:13:0e:63:32:
                    c7:4b:2a:17:58:29:8b:9b:57:56:88:b9:de:a6:57:
                    1f:5c:32:fb:d4:f1:7b:c8:f1:4c:a5:79:bf:c6:b4:
                    88:bc:78:9d:d1:8c:65:78:a1:c0:6d:ba:2a:da:64:
                    71:30:37:b8:dc:24:07:3a:55:4c:5c:66:e9:6f:7c:
                    5b:5b:ac:45:4b:b5:d1:e3:62:8d:32:fb:78:ce:ce:
                    87:25:5a:f8:ad:05:54:dc:a6:ac:11:6b:e9:05:9a:
                    bc:ef:51:fe:64:a4:d0:84:71:c1:60:99:bc:48:1a:
                    13:97:f5:3c:4f:48:ea:8b:54:f4:7b:99:ff:d4:1e:
                    76:68:6e:3d:70:07:8a:4b:68:55:9a:e7:ee:7e:10:
                    83:d2:7c:74:23:ab:87:36:34:a2:d1:36:6f:c4:f0:
                    31:e7:a5:b9:05:58:fa:cf:69:69:16:46:4c:e6:cc:
                    ab:25:d3:06:16:c1:fb:a5:e6:c4:40:06:e1:99:c5:
                    0b:40:f1:b4:fc:6a:23:3c:c5:37:6e:88:6d:b8:fe:
                    61:1e:cd:fa:9a:39:ab:d6:dd:ac:13:b6:cc:d6:eb:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:D0:CB:B0:AC:D9:31:B4:F5:1F:BB:60:5D:A8:9D:89:94:7C:91
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:d5:5f:0e:b6:8e:5d:fa:0a:cd:3a:ce:68:18:08:2e:ec:
         9a:60:7d:d4:6e:a2:08:20:87:9e:2e:80:c8:30:8e:5c:2d:f4:
         84:58:b0:7b:c8:5a:13:14:1b:5c:7b:c6:c1:9d:2e:22:7d:9a:
         e7:77:7e:79:a2:fa:13:81:77:9e:c9:17:9b:b3:4e:cf:98:1e:
         07:33:69:b9:e7:a2:5d:28:82:fc:81:26:80:bb:af:0c:df:dc:
         ac:4e:1d:f6:2a:e6:d7:15:28:cb:ec:88:10:0d:86:1b:54:de:
         e3:fd:8e:56:ad:47:f7:51:95:0a:df:66:53:ef:07:c5:c4:2d:
         88:26:5d:18:d6:d1:71:ce:c1:d3:a4:ad:3d:ae:1c:8c:7b:2d:
         c4:19:97:a2:21:bd:4a:25:f9:17:b3:b2:35:fa:cd:d2:87:be:
         76:d8:82:dc:7f:5d:35:ec:a2:30:38:c5:29:89:97:30:ea:91:
         35:f8:a9:e6:e0:17:35:41:88:19:8e:e2:a9:a9:b2:ad:5e:d0:
         f7:5f:c2:cd:61:37:6e:c8:77:2d:2e:d1:56:a1:56:3b:a6:d8:
         e1:a7:58:45:1a:5a:10:6a:d9:d6:f1:d8:f1:89:a3:25:64:28:
         2c:17:76:f4:80:e3:74:42:a4:36:bf:3f:51:48:e3:94:7d:62:
         82:40:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:49 2026 by rpki-client