Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File:                     UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier:          IFamOIC/hGCAvyLlQ9vG0d+MM+t6TwFHbFpke7fKPpo=
Subject key identifier:   63:C6:05:D0:2B:CB:4B:45:E9:21:68:91:3A:5F:54:6A:92:FE:83:80
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer:       /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial:       02E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number:          02DC
Signing time:             Sun 05 Apr 2026 01:06:11 +0000
Manifest this update:     Sun 05 Apr 2026 01:06:10 +0000
Manifest next update:     Sun 12 Apr 2026 01:06:10 +0000
Files and hashes:         1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: l6ZZZGhTimC3qgN8IiAeRJudEKXNnhmORLPf/cR16B4=)
                          2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
                          rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
        Validity
            Not Before: Apr  5 01:06:10 2026 GMT
            Not After : Apr 12 01:06:10 2026 GMT
        Subject: CN=69d1b583-f64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:80:fe:63:ac:c6:3e:02:d7:41:aa:91:63:
                    07:c7:bc:c7:fb:99:25:4a:19:f5:93:28:c3:f4:e4:
                    1c:e4:62:c2:6a:ce:3f:b0:ee:40:60:62:59:8c:e8:
                    d6:7d:0a:c2:c6:0e:36:e6:8a:6c:93:4c:ba:64:08:
                    3d:7c:ae:ee:ae:65:c4:97:85:16:eb:43:3f:f7:ad:
                    d4:c5:29:e0:b1:b9:c5:04:df:39:43:78:e6:a9:a2:
                    25:66:e5:c2:e1:51:c4:5a:80:8d:56:b8:35:23:ee:
                    f8:2f:c6:d4:d9:58:c9:c1:f0:93:20:5f:e3:58:06:
                    b0:d6:23:76:52:05:da:6e:f3:12:0f:5d:b6:78:0f:
                    8e:1d:52:76:ae:c1:7a:87:a3:54:0b:1e:e6:f7:5a:
                    b7:37:6c:c2:74:30:a9:02:53:61:c1:70:86:89:53:
                    e6:7b:0e:03:ec:13:38:93:13:94:f2:6a:ae:fe:48:
                    0e:86:9f:9c:1c:83:42:72:6a:35:c8:68:30:e1:23:
                    5a:d0:80:20:b4:dd:df:d6:6c:30:95:d2:42:db:f2:
                    36:11:64:4d:6f:73:cd:2c:68:23:17:c1:3a:c0:57:
                    53:0e:58:9b:db:08:3e:c1:42:4e:bf:d9:26:80:fb:
                    48:61:3f:61:8e:e4:85:85:c2:7e:41:c5:9a:4e:61:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C6:05:D0:2B:CB:4B:45:E9:21:68:91:3A:5F:54:6A:92:FE:83:80
            X509v3 Authority Key Identifier:
                keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:f7:91:1e:93:15:06:42:32:5e:32:a9:87:be:45:c1:16:
         0c:b7:fe:18:5e:a2:47:43:aa:5a:35:d1:f5:4a:7c:e5:59:7b:
         60:ae:42:6f:7d:58:66:ea:94:af:47:67:0e:26:eb:16:25:3d:
         fc:ac:73:59:b2:b8:1b:dc:e6:53:b0:54:37:dc:37:ac:dd:c5:
         02:76:20:9d:09:0c:fd:05:6a:b9:77:2a:98:25:b8:92:16:b5:
         5c:58:37:88:f7:2c:44:26:a2:63:7b:31:7e:13:6b:f7:d2:fb:
         f6:3a:c4:e5:24:a6:d0:d6:3f:40:36:b9:9b:86:04:45:45:4e:
         41:ca:79:8e:ed:32:33:43:f0:11:ab:b6:20:18:db:eb:6d:d2:
         c2:41:0d:fb:78:a9:e1:8f:78:19:4f:6e:21:6f:57:06:7f:c5:
         60:81:4b:82:2d:de:b4:57:22:f8:2d:9b:15:ef:79:93:d4:63:
         2a:00:7f:25:a8:1f:06:65:ad:d2:d2:a0:4d:32:41:f1:7e:17:
         a1:0f:e5:a0:79:7d:e0:f2:b1:1d:81:be:e0:50:4f:e6:9c:09:
         f1:46:12:12:7e:b4:8c:92:6e:3a:16:44:d8:ef:b8:bd:04:a5:
         90:9e:a0:70:36:36:71:1c:9a:ee:08:a0:9c:ee:08:ca:20:0b:
         89:22:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:16 2026 by rpki-client