Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File:                     u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier:          htOgxGS7lO9uN5tKz5MB3YA1nbUK/A7WDDSw1puKq3Y=
Subject key identifier:   55:62:F0:BC:5A:EB:37:61:FC:9D:97:67:04:10:EB:94:1C:3E:27:44
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       19A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number:          1969
Signing time:             Sat 04 Apr 2026 16:21:01 +0000
Manifest this update:     Sat 04 Apr 2026 16:21:00 +0000
Manifest next update:     Sat 11 Apr 2026 16:21:00 +0000
Files and hashes:         1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: t4Y6Rmwb5tJJ0fJR1ZvI52okhfHgLxW5H59TNmvS5lA=)
                          2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=)
                          3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: kZ0uphZPyCd+wbYNkHA1SsHf26EQjAMAFcs0tjZEC/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
                          rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6566 (0x19a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Apr  4 16:21:00 2026 GMT
            Not After : Apr 11 16:21:00 2026 GMT
        Subject: CN=69d13a6d-e0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:57:c3:00:2e:a5:53:55:5a:32:e0:47:f1:
                    a5:37:15:d2:77:da:83:d7:bc:8b:f8:75:45:16:6d:
                    b5:21:6a:94:3c:bb:56:5b:9e:89:5d:f2:6d:e8:56:
                    18:26:b4:12:8f:cf:13:0f:f1:6c:a6:a9:7d:fa:9b:
                    60:8e:8e:81:aa:0c:47:3c:04:02:88:34:88:6b:72:
                    b8:37:61:4a:40:dd:40:46:6b:8d:ad:02:85:16:19:
                    2e:a7:e0:6b:24:9b:06:da:30:a7:f9:91:4d:2d:77:
                    f0:b4:6e:0d:4f:91:63:79:b6:d9:9c:5b:0f:e4:62:
                    94:52:53:dd:54:34:28:cc:b5:14:2e:81:45:68:81:
                    e9:50:d4:6f:87:ff:ef:2a:15:f8:9e:57:70:98:45:
                    97:a5:2c:ed:41:da:68:28:d3:1d:01:98:1f:46:1d:
                    4d:d4:01:2b:05:9b:98:58:a1:c7:cf:28:f5:b1:7b:
                    76:58:42:95:99:47:04:b7:b0:89:b3:3d:95:e8:52:
                    e6:46:a0:6c:d8:69:32:a8:54:67:a3:6c:9d:18:a3:
                    41:65:f8:c0:58:39:b2:e1:38:8c:24:42:f3:a1:9d:
                    68:4a:89:c6:e6:02:12:35:53:7e:b9:57:d5:9b:0f:
                    a2:0e:07:4f:91:bd:85:42:06:7b:b1:c0:b4:02:b4:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:62:F0:BC:5A:EB:37:61:FC:9D:97:67:04:10:EB:94:1C:3E:27:44
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:26:6d:35:1e:33:f7:59:94:fa:e5:fa:da:03:07:1d:61:
         57:34:d9:1b:a2:ec:fc:88:da:c4:92:56:b8:12:03:23:b9:47:
         51:9e:10:82:43:1e:60:84:ae:49:7f:1a:2c:75:ec:be:2e:b5:
         a8:76:ba:33:4a:5e:f5:d1:94:04:06:34:30:34:8f:15:9b:bc:
         ad:09:b5:e6:d2:4d:82:c3:8e:6c:44:2d:26:4a:d5:19:c7:dd:
         0a:86:c5:21:65:f9:50:76:ec:c9:43:d9:a9:e6:02:ca:d0:8c:
         5d:28:56:e7:35:87:98:4a:af:fa:6c:f2:9c:f3:ce:54:d0:d4:
         cd:b1:7f:46:e2:ab:3c:e6:e8:35:cf:16:20:bf:61:fe:f9:5d:
         1d:26:33:a0:4c:cd:44:2b:df:0b:15:8f:e5:67:fb:d0:bc:89:
         0d:43:54:78:dc:cc:11:19:35:9b:90:17:16:69:a8:1b:cb:35:
         46:28:5f:2b:b8:0e:df:47:2c:a2:1a:ba:b1:84:38:8a:38:84:
         9b:2a:85:3d:bb:b4:da:d4:b7:f7:5f:45:d7:66:d4:3e:ca:e9:
         c3:a1:c5:b5:84:df:27:5b:e5:9e:3c:92:c7:dc:50:a1:f9:90:
         db:90:c4:74:3b:ee:93:93:c1:fe:c4:45:71:13:ae:85:12:f8:
         4b:bc:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:17 2026 by rpki-client