Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File:                     uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier:          FipE/jleLbsTLCIsUp6XRWHLxfF3FntL9VJ0iLBz35w=
Subject key identifier:   9F:59:98:14:76:88:7F:BA:38:F9:00:3C:56:D0:D3:CC:F4:87:E2:39
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer:       /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial:       0CBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number:          0CB3
Signing time:             Sat 04 Apr 2026 18:18:44 +0000
Manifest this update:     Sat 04 Apr 2026 18:18:43 +0000
Manifest next update:     Sat 11 Apr 2026 18:18:43 +0000
Files and hashes:         1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: ToF0KVwD1tUo/Rs++hgdq/nMozNb+sY9elxsvGu6sYw=)
                          2: C4391160305611EABE7DF272C4F9AE02.roa (hash: BMZ1UeFP1Job+RaL0SOd32/rdZOcQ/RtABlN62ClMsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
                          rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
        Validity
            Not Before: Apr  4 18:18:43 2026 GMT
            Not After : Apr 11 18:18:43 2026 GMT
        Subject: CN=69d15604-9f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:93:c8:cb:27:ed:73:f9:67:4e:81:68:db:
                    cd:b3:56:ef:a4:12:cd:65:ef:27:26:d1:62:9a:f8:
                    b3:e7:84:32:c0:f4:b2:2e:07:b8:7f:1c:73:9f:18:
                    d5:97:13:ed:0e:e9:12:c1:40:12:9f:8a:c7:6d:c7:
                    b5:b8:6e:e4:bb:a8:19:2c:a7:7b:95:67:2c:7b:d2:
                    17:44:8c:f2:e7:9f:3e:84:2a:6b:93:59:7a:f7:d1:
                    ba:80:99:d4:99:a0:83:ae:b1:25:dc:28:f8:38:2c:
                    8f:a6:22:4e:97:e8:24:b4:28:4b:d4:90:23:6e:e1:
                    71:09:27:f6:f0:93:1c:80:1d:de:6c:cb:ca:04:7c:
                    de:6f:65:ea:2e:17:4e:e2:84:d2:c4:9a:09:e0:2a:
                    1e:e4:0e:ad:64:90:82:6f:11:a3:f9:9d:c8:80:12:
                    94:d2:40:d7:93:8a:f5:c1:3b:19:45:26:22:ff:33:
                    52:cf:5c:a7:87:17:77:56:ae:b5:d0:ed:18:83:44:
                    24:49:92:b5:19:fe:6e:4c:35:98:88:b1:19:82:3e:
                    c7:aa:0e:07:c6:83:85:ed:5f:0d:3d:a0:1c:83:fb:
                    c1:e3:eb:d7:07:77:b5:cd:82:3b:ba:56:cc:29:18:
                    e0:3e:65:1d:b2:57:db:d7:f4:c8:31:85:57:b6:cb:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:59:98:14:76:88:7F:BA:38:F9:00:3C:56:D0:D3:CC:F4:87:E2:39
            X509v3 Authority Key Identifier:
                keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0e:c7:16:a2:ef:bf:7e:d1:b8:44:9b:32:6a:00:0b:be:95:
         93:ee:e3:e1:b6:f3:ce:79:d3:57:6f:c5:5a:a0:5f:3d:ff:69:
         a4:22:19:f9:04:13:92:37:be:7d:97:15:c9:be:c0:7f:49:ff:
         44:cb:69:a8:72:df:9a:55:51:f5:2b:7f:a4:30:b2:a4:de:39:
         af:cf:78:6a:01:93:31:6a:b3:bb:d4:32:58:29:f4:82:5b:f8:
         bc:8e:3a:03:d2:0e:1b:3b:29:b2:56:11:09:2e:06:ae:1a:da:
         d4:21:21:99:83:eb:03:00:69:c3:c9:ed:36:d6:e6:d0:13:fa:
         54:42:61:4e:b8:5a:fc:d8:2e:e5:00:0b:d4:3e:fc:aa:82:d9:
         3d:49:d6:4e:6e:fb:93:da:76:b7:4e:60:ca:ec:a2:01:1f:7c:
         09:03:55:3c:bd:a3:1d:3f:7c:95:3c:23:3f:48:7c:f9:e4:15:
         75:23:ae:32:84:d4:5c:5e:13:75:68:25:c0:81:af:3b:ec:34:
         3a:f3:4b:e5:7a:7e:b6:3a:2e:45:1a:16:21:34:a0:b0:e7:9d:
         bf:1a:56:ef:8b:66:db:fd:1b:b3:ca:c8:6b:bf:83:67:4f:2f:
         58:ae:65:74:45:18:01:83:42:3d:6e:8c:cd:10:8c:c2:9e:04:
         dd:b2:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:04 2026 by rpki-client