Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          VhU76q+5aCfYxrp0+PdkPGKZSgKc868xHBTChsxEv1k=
Subject key identifier:   4D:F2:12:D7:82:90:D0:EF:84:6F:57:25:17:32:25:4B:DC:93:8A:E9
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          01B4
Signing time:             Sun 05 Apr 2026 03:32:07 +0000
Manifest this update:     Sun 05 Apr 2026 03:32:07 +0000
Manifest next update:     Sun 12 Apr 2026 03:32:07 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: 0ahOG75BSPsaVdMV/YgyRWVo1d+56yAdRKJHDIeRgPs=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: boYJDPZUfdTNBF9y7tziieLVcFde3kUz1+ME0l87CxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Apr  5 03:32:07 2026 GMT
            Not After : Apr 12 03:32:07 2026 GMT
        Subject: CN=69d1d7b7-5457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:48:7f:d2:dd:23:44:e0:2c:9a:51:22:53:
                    17:ae:71:85:c1:02:50:92:67:ea:66:83:e1:27:cf:
                    59:d6:25:1e:c8:f2:aa:ac:fb:4c:7a:d1:b6:81:36:
                    f5:ba:64:a3:59:16:f6:aa:de:2b:86:1b:8e:5f:42:
                    e6:a0:c6:26:b8:a9:b1:ae:6f:db:6d:1f:af:e1:e7:
                    bb:a5:a5:b7:09:67:e0:fa:7b:06:b9:7e:35:b6:07:
                    d9:dd:e1:81:ce:79:e1:38:8d:24:8b:13:8b:f3:ce:
                    4b:e7:51:c3:62:10:cb:3e:b8:cc:b3:f0:50:84:a5:
                    04:9d:c2:19:39:37:5d:c3:17:4e:23:9c:54:41:19:
                    70:19:e6:88:d3:e6:d1:f8:05:fe:38:bf:c1:b1:a6:
                    e8:7c:4f:7b:8c:7b:39:33:12:d6:a1:a0:de:7f:1d:
                    5e:ef:88:8c:ab:53:eb:1c:a2:08:ce:75:ff:5c:10:
                    16:59:96:b7:17:92:e3:9f:63:8b:2a:d5:9e:5d:3e:
                    c7:ba:86:af:9d:bc:b9:2d:15:1d:98:51:21:0e:11:
                    b7:34:71:25:25:65:2b:b0:37:b4:d3:a3:b5:7b:31:
                    6d:fa:e8:3c:87:39:19:cc:4f:2a:ca:78:5d:49:57:
                    c5:b7:80:94:24:7e:95:97:bb:3e:c8:fb:77:94:68:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:12:D7:82:90:D0:EF:84:6F:57:25:17:32:25:4B:DC:93:8A:E9
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:80:e6:ff:cc:fa:7d:ff:cb:5f:08:7a:6e:13:cb:4d:99:
         7a:c4:18:86:14:56:8e:ec:34:d7:bc:03:03:32:82:1e:06:73:
         69:75:a7:ab:f4:cb:64:50:d3:e9:05:ed:e0:d5:30:3e:35:2d:
         9e:ea:ec:f3:3a:f1:72:60:cd:ee:f8:7a:9b:b0:05:52:f6:2f:
         12:01:5c:09:45:93:c2:32:c2:1c:42:32:b5:8e:32:af:82:90:
         40:ff:40:68:a7:ce:d7:55:b3:fd:54:4f:17:0d:86:5c:97:b8:
         8c:fa:20:31:91:36:4f:eb:cb:fa:d8:a1:ed:b1:8e:83:ce:8e:
         99:d5:ca:f7:e0:e6:58:a7:8c:e3:c3:fb:a5:f5:c8:90:ac:fe:
         69:8f:7e:36:97:5d:72:b1:7c:a3:f6:bf:13:b7:4d:e9:7f:2b:
         c3:60:4a:08:c3:ee:18:a8:ba:1a:7e:86:08:b8:37:6d:af:48:
         87:5f:57:77:0a:22:fd:7a:93:7e:bc:1d:8d:62:52:ee:30:1c:
         cd:a4:47:30:91:82:f6:fd:79:f6:2f:4b:82:ac:f9:ce:9f:14:
         c4:eb:98:85:3e:1c:51:a3:36:02:89:02:63:46:3a:36:62:cf:
         87:e6:11:95:f7:ee:59:c6:73:a8:03:38:a6:b9:d5:48:cc:e6:
         e3:12:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:12 2026 by rpki-client