Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
File:                     uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json)
Hash identifier:          n/fjIafA14KzxZKpA1wbNyEs4/v1ktHhKRCZH+0Hn0A=
Subject key identifier:   2D:69:0B:04:2C:E8:FA:52:D9:51:26:46:01:41:CF:CB:26:DB:7A:2A
Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
Certificate issuer:       /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Certificate serial:       0577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
Manifest number:          0570
Signing time:             Sat 04 Apr 2026 23:05:49 +0000
Manifest this update:     Sat 04 Apr 2026 23:05:49 +0000
Manifest next update:     Sat 11 Apr 2026 23:05:49 +0000
Files and hashes:         1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: tNdtcS+ei2QRoV+A9s6MEG+06RCnAZbU8u5htUhDhww=)
                          2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: LYizx8+s0eAkkoRCIZeouc33G+ruq6po3v7yIz992CU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
                          rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
        Validity
            Not Before: Apr  4 23:05:49 2026 GMT
            Not After : Apr 11 23:05:49 2026 GMT
        Subject: CN=69d1994d-d058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:33:42:f2:51:27:4d:c4:1d:ae:88:ab:33:
                    a1:a9:17:a5:65:a1:ab:17:7b:3b:47:25:bf:c7:f8:
                    54:e5:ae:f9:5a:9e:bd:a5:45:27:90:da:17:62:61:
                    77:d4:f5:52:27:da:1e:83:6f:5b:a5:3c:a4:95:14:
                    5f:91:e7:e0:4b:68:b6:59:e3:e4:cf:f3:b2:57:dd:
                    8e:43:54:71:83:34:59:34:35:23:2e:1c:5c:6c:09:
                    9c:76:75:c7:dc:24:f8:4b:88:d4:ad:19:ba:13:d0:
                    31:82:a0:0d:83:2c:26:29:98:08:1f:ea:4b:dc:c5:
                    90:84:90:2c:b2:f8:26:70:39:fb:a2:78:17:48:54:
                    17:fc:cd:b7:a5:32:83:fc:c6:28:53:f0:1d:63:dd:
                    dd:57:49:cb:4e:3c:04:98:ca:52:0e:70:71:00:bf:
                    fc:6f:4c:0c:43:3c:c1:c8:5b:d8:2e:99:79:08:83:
                    39:cf:f7:54:b7:72:93:fd:88:fd:85:68:08:db:37:
                    cf:03:2a:bf:97:31:f5:95:2e:cd:93:f4:80:76:6a:
                    3a:72:7d:35:b5:b2:8e:4a:44:38:9f:8d:f9:ee:e4:
                    16:84:53:47:bc:8a:40:a8:99:4e:14:9c:ec:bb:7e:
                    95:d6:7b:5d:a1:83:d2:47:cf:04:a5:b6:47:2f:0f:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:0B:04:2C:E8:FA:52:D9:51:26:46:01:41:CF:CB:26:DB:7A:2A
            X509v3 Authority Key Identifier:
                keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:6a:5f:89:2e:ed:51:ef:2e:a9:92:9a:a4:60:2a:ec:d3:
         5d:bc:01:c1:03:44:c8:c2:02:c9:5a:61:e1:10:c0:88:37:71:
         4b:61:1a:94:f9:16:d7:eb:3b:b1:98:e5:26:e1:af:7d:e1:92:
         7c:92:6d:c9:db:3b:c1:3c:2f:80:b8:bb:58:f0:d5:d0:53:7c:
         ab:8d:f0:60:59:0b:69:eb:22:ef:f4:a3:0e:bb:d7:62:d3:17:
         fb:ef:68:af:36:71:17:1b:2e:7c:86:ad:2b:55:5e:72:07:64:
         fc:01:04:1f:01:9f:fb:45:9d:0b:1a:0d:e1:65:0e:9c:61:63:
         ea:e9:c1:56:93:07:31:2e:45:24:0c:46:51:a5:06:0d:ec:d8:
         1f:54:ba:f5:cb:50:71:a6:7b:74:ae:65:bb:59:05:f7:89:e0:
         19:88:4f:e7:78:26:71:d4:b4:86:54:e7:cf:8d:c3:3f:bd:49:
         75:d4:6c:09:5e:9b:cd:d7:b3:55:fa:86:76:8b:d6:32:32:6a:
         61:43:51:b0:6d:19:8b:25:87:d3:d0:e9:56:7c:59:b4:aa:27:
         8a:8f:d2:ce:66:c3:84:62:67:11:d3:c2:64:d5:73:37:59:5f:
         1f:10:33:ee:64:ab:8d:ad:99:3b:32:44:6c:60:f7:46:e2:7b:
         a6:f5:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:03 2026 by rpki-client