Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File:                     UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier:          PdiT2pTbftGdYteo5j389AsRhlK7G0K/PYNTY6Oi4Ew=
Subject key identifier:   25:9A:55:CE:26:1B:03:BE:1E:23:CB:AA:53:2C:F2:28:EA:2D:31:65
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer:       /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial:       0879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number:          0871
Signing time:             Sat 04 Apr 2026 20:27:45 +0000
Manifest this update:     Sat 04 Apr 2026 20:27:45 +0000
Manifest next update:     Sat 11 Apr 2026 20:27:45 +0000
Files and hashes:         1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: PVpZ7rqKsE8tYFGLTH9oLLahlZmT6cdbnh0tmBTrBDE=)
                          2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: +hP/S33CE/vW2PVe4j6x+mIfnFjnccy0DaJEQbWIdqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
                          rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
        Validity
            Not Before: Apr  4 20:27:45 2026 GMT
            Not After : Apr 11 20:27:45 2026 GMT
        Subject: CN=69d17441-eacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:a0:34:a0:0c:1e:4f:49:bb:5e:26:73:d2:
                    86:be:3e:73:04:d3:66:9e:c5:5e:13:b4:ef:0d:26:
                    4e:3a:73:60:0a:09:c5:9c:e6:bb:70:92:ee:a0:6f:
                    c5:35:b2:7d:30:2a:e6:03:5d:b3:2b:fa:fd:09:12:
                    43:b2:30:a4:62:db:55:3f:ec:4d:c2:82:0b:c8:a5:
                    a2:92:11:06:17:f1:f9:83:e2:31:66:14:13:93:49:
                    7b:3c:42:c0:3b:ef:5c:af:7e:db:3a:61:30:fe:f4:
                    b1:96:d0:55:e7:78:93:1f:89:8f:55:79:2b:89:bf:
                    62:1b:8c:4f:ff:76:d0:9f:68:24:75:44:0b:08:4b:
                    11:21:20:c8:f4:b1:a9:44:cf:93:89:26:74:0a:7a:
                    b7:b7:25:d1:a0:0c:ec:97:f5:10:e4:0b:55:8d:fc:
                    b4:83:d8:01:40:5d:8d:2d:75:a8:52:52:53:67:40:
                    f6:c8:8b:1f:47:7e:f0:4e:26:db:b7:c7:01:88:64:
                    28:c5:f8:6b:b2:c8:99:fc:cc:64:ea:25:8c:9a:70:
                    7e:bf:43:ba:8d:13:b3:0c:25:9b:5e:49:80:bc:42:
                    fd:72:2f:82:c5:0e:2b:1f:9b:ba:76:51:bd:b8:9a:
                    f0:39:b2:d0:70:c8:98:1b:65:8d:9e:62:4c:74:0f:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:55:CE:26:1B:03:BE:1E:23:CB:AA:53:2C:F2:28:EA:2D:31:65
            X509v3 Authority Key Identifier:
                keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:dd:13:d9:9f:61:02:19:9d:f1:a6:30:80:9f:3e:43:1a:
         93:e3:e7:c9:43:3e:ee:ee:d0:48:d0:41:3f:aa:9b:ae:2d:73:
         47:cc:6e:b2:e1:c2:ac:20:5d:39:ae:64:c4:e9:01:fd:29:b9:
         87:4b:fe:43:14:d7:f1:77:c3:36:ed:77:57:be:95:81:89:fb:
         65:a0:8c:8a:e0:bf:02:14:ee:9e:09:bf:9f:06:f6:d5:fa:81:
         a8:9d:9f:1e:ae:ae:db:41:67:ea:a3:4b:4c:cc:cc:25:50:df:
         6c:b7:4a:47:ce:fc:2a:6b:43:7b:4e:35:be:c4:38:57:01:cd:
         f1:3e:d6:94:79:d3:60:a5:60:2c:0e:7e:a4:a9:3a:60:24:c0:
         27:d7:a0:4e:c0:1e:d9:e2:e0:73:e8:58:9f:fc:f5:cf:cf:c6:
         d7:5a:8e:b5:52:3c:61:ab:74:94:aa:df:04:45:29:43:fd:bb:
         ab:3b:ee:ba:e6:b3:c9:b7:80:ad:d1:1a:73:cf:53:60:42:30:
         f6:3b:04:fa:bd:12:06:32:62:ae:88:b7:8e:69:be:a1:af:ec:
         1f:1c:12:30:85:8e:33:9b:10:97:68:f7:68:16:ef:5b:f8:f8:
         14:4f:c6:d5:7a:e3:e6:e0:b5:ac:cb:e4:db:1c:38:f4:25:3a:
         1d:fc:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:12 2026 by rpki-client