Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File:                     UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier:          iji2fl/ojA8vOhOLRCJFOEenhUrVRlAg52WzriLw1k4=
Subject key identifier:   B2:39:51:D9:43:A3:50:6F:FA:CD:C6:35:D3:4C:2C:72:79:3C:A1:87
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer:       /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number:          30
Signing time:             Tue 21 Apr 2026 08:32:16 +0000
Manifest this update:     Tue 21 Apr 2026 08:32:16 +0000
Manifest next update:     Tue 28 Apr 2026 08:32:16 +0000
Files and hashes:         1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: 6syK+ASdOf/7BBYuLG8izG1urLmqaDP6QSu7bYUo14I=)
                          2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
        Validity
            Not Before: Apr 21 08:32:16 2026 GMT
            Not After : Apr 28 08:32:16 2026 GMT
        Subject: CN=69e73610-0c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:d3:63:22:2e:d8:c2:42:19:de:e8:93:f3:
                    a0:c6:54:1e:b5:88:12:22:80:d1:6e:79:ac:64:47:
                    c9:3b:11:cd:7c:f6:17:92:ae:9b:aa:f7:b8:6e:7b:
                    a0:51:d8:04:6c:31:6a:f1:25:52:95:06:4b:39:58:
                    e7:13:88:8e:b0:85:e1:ae:cb:dd:3d:14:17:11:67:
                    7b:7d:33:19:dd:3f:b9:14:ea:1d:30:00:d7:fd:7e:
                    0e:0c:59:97:0a:8a:70:96:e1:86:79:0a:55:b1:b2:
                    fc:b0:3f:a7:11:c1:dc:de:14:bf:91:52:17:75:e6:
                    5d:55:d1:39:85:c2:6b:77:5f:11:db:d9:d1:69:17:
                    5c:fa:2d:3d:83:72:a2:73:99:6b:a5:01:db:41:98:
                    74:13:c2:47:7a:fa:6f:d3:97:4d:59:71:98:cb:1b:
                    a0:b3:57:0b:84:62:61:8e:44:a7:2d:62:0e:ce:b2:
                    9d:ee:54:b5:34:30:75:19:92:e9:7c:ca:7b:b9:ec:
                    e3:b6:d7:e6:ed:97:5f:55:a9:80:dd:8c:74:e0:8c:
                    22:8d:bd:8b:8b:ff:3e:95:1e:bd:3f:15:e1:df:1a:
                    11:cc:8e:ba:47:78:17:2b:d8:17:67:d7:ac:86:66:
                    6a:dc:20:82:44:ea:37:cd:e2:cc:19:82:c2:9b:b4:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:39:51:D9:43:A3:50:6F:FA:CD:C6:35:D3:4C:2C:72:79:3C:A1:87
            X509v3 Authority Key Identifier:
                keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:cb:a3:54:1a:2a:f7:5e:b3:b4:5a:7d:80:ec:c5:ba:44:
         de:8a:9c:29:76:f9:5a:47:ff:b3:70:ba:c4:90:5c:a7:40:7f:
         98:be:d4:eb:d4:27:9b:4f:24:87:29:99:b1:09:e4:07:63:10:
         72:6f:94:1e:b8:08:c6:45:57:1a:e2:23:73:4f:56:58:b7:b0:
         bf:75:ea:46:6b:db:13:80:25:90:01:16:1a:d6:fd:1f:fb:9a:
         ec:34:90:04:a3:8a:ba:8d:3c:ce:a0:90:6a:4c:08:30:ad:7f:
         b6:0f:7d:40:4e:bc:30:b7:6b:e6:1c:de:67:92:72:e5:2a:da:
         31:4e:7d:29:08:1f:81:7b:8e:19:92:0e:d8:e9:84:84:20:15:
         73:c5:b9:9f:96:43:80:fa:14:b8:a3:25:e2:a3:17:fd:b0:d0:
         11:01:90:c4:2b:7d:58:1a:9c:74:3c:78:6c:47:1f:20:ec:65:
         2e:30:02:39:2c:7f:d8:b1:b4:c4:8b:99:1e:b9:ea:21:fe:24:
         8e:64:22:a2:57:19:72:e4:df:d2:58:1e:96:5a:85:4f:68:56:
         2c:6f:73:80:d6:5a:bc:4c:7e:3e:94:d3:db:7d:c4:2e:c7:2b:
         45:d4:65:17:0c:9a:94:84:d0:fb:9b:d9:0d:72:55:75:06:a3:
         c6:0b:99:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:33 2026 by rpki-client