Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
File:                     u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json)
Hash identifier:          LQsThraZzmPJBf3hHmSzNMvzIpwJu9JrXdKKJsjwsXg=
Subject key identifier:   B8:5B:93:A8:8F:4E:45:08:82:23:AD:D6:FD:FD:E9:1A:96:D6:BA:3E
Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
Certificate issuer:       /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Certificate serial:       0384
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
Manifest number:          037A
Signing time:             Sun 05 Apr 2026 00:36:35 +0000
Manifest this update:     Sun 05 Apr 2026 00:36:34 +0000
Manifest next update:     Sun 12 Apr 2026 00:36:34 +0000
Files and hashes:         1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: liBNF4MFT1Wh4B6N5D2h3MV7gCB6BdNm3ezzLnkjQio=)
                          2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: Fe5K6ZkUrGV8sNMXvsh32QNy4vnrTCujmZ10PMxAPR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
                          rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
        Validity
            Not Before: Apr  5 00:36:34 2026 GMT
            Not After : Apr 12 00:36:34 2026 GMT
        Subject: CN=69d1ae92-398c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:af:de:59:02:b5:9f:e4:f2:6e:be:50:e7:
                    d8:69:38:7d:05:0d:31:18:59:84:7a:7c:fb:7d:ff:
                    28:61:df:5c:47:5d:74:96:7a:91:c6:46:b2:cb:c5:
                    06:d5:e8:f4:cc:82:08:2a:26:f9:c5:d4:bb:1a:17:
                    53:68:54:7a:80:74:33:3f:d8:3e:1c:30:fb:0e:56:
                    3e:b8:1a:5e:c9:a7:30:97:b8:85:03:d8:c9:62:1a:
                    34:eb:25:22:3d:06:6d:ad:2a:aa:b1:3e:be:83:76:
                    50:b9:d2:33:e2:d2:16:f3:8b:cc:63:23:08:34:ac:
                    01:c9:7e:c1:49:1f:2b:21:ce:ed:4b:43:fb:cb:d7:
                    ba:8d:2a:4e:3a:29:05:2f:22:d9:15:c0:c7:38:30:
                    44:b7:ad:17:d3:88:44:ee:cd:df:9a:81:e3:54:80:
                    c4:ec:d8:93:2d:32:f4:6a:ca:7a:f3:c2:e5:36:69:
                    40:54:d9:b9:a7:36:44:e0:df:72:ee:2b:ce:e7:64:
                    f3:5a:c4:af:70:35:c7:3d:67:46:79:15:a2:f0:c1:
                    71:62:4c:17:ad:85:08:99:2a:e6:ad:05:4a:b9:46:
                    61:17:bd:93:3f:03:b0:ed:fd:45:e7:59:7b:ed:8a:
                    a6:c6:4e:40:e7:64:25:78:0b:a6:e5:ee:d2:bd:2e:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:93:A8:8F:4E:45:08:82:23:AD:D6:FD:FD:E9:1A:96:D6:BA:3E
            X509v3 Authority Key Identifier:
                keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:43:06:ad:97:9e:bd:07:c6:1b:03:f9:77:06:2f:d0:b2:fb:
         a5:86:79:e3:d9:51:36:b3:36:df:d9:a7:2d:46:f1:b6:41:71:
         5f:a7:9c:32:1f:7c:1f:9a:d7:22:ac:fa:7a:e3:da:1d:20:16:
         3e:91:c6:07:62:73:38:89:e0:52:1a:0d:77:9b:60:43:f0:c0:
         21:45:52:55:8b:b2:7b:c1:62:2a:1b:52:66:a9:6d:db:c3:f5:
         80:c5:5d:77:6d:65:e9:ed:ed:e7:dd:7b:4e:b4:78:5e:a2:4e:
         76:27:93:c0:4b:09:13:6a:8b:2b:4d:98:26:4d:ed:f3:65:7f:
         2e:b1:d2:a9:40:90:fc:c2:3e:4d:0d:9a:8f:fa:25:8e:43:f6:
         f1:cc:a6:4a:c2:a5:90:36:de:42:01:7b:ef:f2:0a:fd:ca:21:
         15:92:06:3b:95:20:a5:ed:26:3e:b4:bb:76:ed:27:e2:20:f4:
         04:cf:82:70:40:ad:43:35:88:d9:d4:9e:b8:37:d9:dd:e6:40:
         2b:1e:81:62:44:69:97:ef:d3:d3:48:22:32:a2:d1:23:e3:49:
         e8:ff:b3:70:bf:91:ea:ea:cf:cf:18:53:02:54:a4:cb:8a:9d:
         60:7d:13:d9:2a:e4:60:58:73:3d:67:a4:fa:64:34:35:b2:2f:
         3e:f8:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:10 2026 by rpki-client