Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File:                     u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier:          GdIT7Eb+rAon5ZLHLzJLOGM9+pFbG5r05xjnkCxFPcA=
Subject key identifier:   E0:CC:A1:C9:4D:A4:F6:41:51:86:FB:F9:13:E1:4F:65:E1:87:AF:41
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       04D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number:          04BD
Signing time:             Sat 04 Apr 2026 23:44:14 +0000
Manifest this update:     Sat 04 Apr 2026 23:44:13 +0000
Manifest next update:     Sat 11 Apr 2026 23:44:13 +0000
Files and hashes:         1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: 0yu3uiYKJiymkqt9WCDlsKl9jCEKDbUZCK1JmiuEOXk=)
                          2: 08241A166B1111EE99759439C4F9AE02.roa (hash: K46zscW9+DlHk+xiudMsMr6EAgw3qNVaD7QCOdFwwmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
                          rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: Apr  4 23:44:13 2026 GMT
            Not After : Apr 11 23:44:13 2026 GMT
        Subject: CN=69d1a24e-c4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:0a:1a:00:35:59:ff:81:84:31:37:1a:53:
                    88:26:62:d8:23:8c:33:2c:23:5c:5c:73:24:3c:14:
                    98:fa:da:1e:69:a4:b0:eb:28:6a:cc:43:8c:71:39:
                    e0:d4:9e:be:12:30:bf:2b:fb:f2:e9:cd:d7:39:46:
                    5a:90:b4:de:a1:f9:51:01:16:6d:3e:cd:3b:86:06:
                    e0:97:07:ab:af:ec:c0:43:8e:f9:c3:9d:26:45:60:
                    66:96:50:af:e3:08:98:45:05:01:57:c8:0e:7f:fa:
                    84:91:ed:bc:8b:1b:70:11:c6:fa:c8:b3:62:54:da:
                    c2:95:8c:53:9f:09:ef:a8:ef:d8:c3:fd:4f:4f:d5:
                    f1:d3:97:22:75:3a:97:bc:12:38:bb:03:bf:e6:0a:
                    43:dc:59:7b:3a:1e:49:c5:c2:fa:c3:aa:fa:5e:04:
                    b7:93:35:76:0f:5f:e5:a2:5f:a2:61:7d:96:aa:3a:
                    89:9d:13:27:1a:7b:83:c8:35:4e:58:16:60:3e:0b:
                    7b:88:3f:4d:88:cb:f9:b0:7a:79:f6:44:81:f3:93:
                    10:46:45:18:b4:c7:ca:c0:13:98:ba:76:f7:25:02:
                    9f:b0:56:1d:6c:95:ee:a0:82:ca:04:68:3f:35:81:
                    b6:65:3e:af:c5:69:d0:0f:a8:cd:c0:02:e2:3d:cd:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:A1:C9:4D:A4:F6:41:51:86:FB:F9:13:E1:4F:65:E1:87:AF:41
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:48:34:8b:8b:73:04:d8:53:d9:95:6e:bf:70:fd:4f:34:
         bf:d2:6c:5e:1f:eb:36:ad:be:95:b1:24:e0:e8:d3:46:5a:c1:
         b3:fb:33:c1:c1:45:61:ec:25:a3:50:ab:c8:52:bf:d0:c4:85:
         4b:1e:f4:38:5a:46:98:47:47:9a:53:9d:3a:ae:53:92:fc:36:
         5f:a2:e5:db:15:fd:3b:72:01:ed:52:19:af:a0:a6:04:af:f8:
         19:19:09:86:8d:0d:dc:ba:cf:d7:c7:f4:00:58:a7:46:b5:72:
         f5:31:b7:e8:cc:0f:6b:75:0b:db:98:2f:37:f2:20:c1:db:d3:
         70:5d:a0:25:b1:70:20:14:df:af:68:42:9f:88:fd:92:76:78:
         79:bf:80:57:88:83:8a:79:a5:73:bb:42:3e:3b:da:b7:60:79:
         70:5a:cb:b6:96:d3:27:f5:37:79:96:ad:fa:d8:26:80:9a:b1:
         96:b0:b0:69:9d:30:6c:cd:4c:dd:67:a6:cc:a2:8a:a0:f3:8e:
         57:9d:5d:f6:97:fc:f7:79:4e:ca:b9:05:b8:e1:cc:e9:32:ec:
         50:4a:3e:e0:f1:71:c6:30:57:dc:3d:d4:34:54:84:2e:aa:f5:
         d3:78:f0:2d:3d:17:7e:78:cb:76:bf:d3:8e:1b:30:25:1d:49:
         6c:a6:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:50 2026 by rpki-client