Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File:                     ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier:          B/IAt1zkH1seHBGKCFK08FZFeh8LUPe2zEyqVMi1btw=
Subject key identifier:   08:E6:D1:40:61:87:FB:CA:F7:0F:C8:34:64:E6:D9:0F:D9:BE:0C:17
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number:          071B
Signing time:             Mon 20 Apr 2026 21:51:21 +0000
Manifest this update:     Mon 20 Apr 2026 21:51:20 +0000
Manifest next update:     Mon 27 Apr 2026 21:51:20 +0000
Files and hashes:         1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: Bah3657Czr6FCeimW07LnPZg8oSIBIK6frwv/xU4DBk=)
                          2: A44DBD8486F811F0BCE74679C4F9AE02.roa (hash: mmFkgE0L1sreVpQhtYAV83v46s2MaftdRM1lyxnQjlY=)
                          3: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ky5ZB0zmCFJ4ZhtIcZDO2A/tVio+hB2OepjdPThGIFI=)
                          4: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: rBLmCstaiSTAZIiJ78MwP1Xx8bjB/LfaaqELF4UDGXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 21:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Apr 20 21:51:20 2026 GMT
            Not After : Apr 27 21:51:20 2026 GMT
        Subject: CN=69e69fd9-9c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:c9:fc:55:5f:4b:4d:58:ea:7f:4b:77:2e:
                    92:30:87:cd:d7:bd:c0:24:d3:42:bd:ff:48:5a:c8:
                    e5:6e:3b:9c:d1:49:42:4d:1d:d5:4d:0d:e8:16:7a:
                    65:6a:03:8e:97:2c:11:3b:0e:7c:e4:f0:47:d2:9c:
                    82:a9:e1:fb:c6:d9:1c:b1:24:83:e8:7f:8d:0a:87:
                    4b:c5:45:fb:48:be:76:9c:b4:20:41:54:db:95:6c:
                    86:a6:9a:dd:19:54:06:52:41:83:36:69:6f:9f:91:
                    02:94:4d:b5:8c:a3:ce:0f:99:ae:61:26:b9:ec:20:
                    16:9b:c7:34:7e:6f:4e:a1:35:f5:86:18:cc:92:14:
                    f4:d4:02:8d:6b:40:7b:72:f3:57:5f:c3:ee:51:88:
                    5b:bc:31:46:79:a2:e4:27:0d:83:e4:48:73:ca:b0:
                    f1:d4:97:b9:9c:a5:ce:01:49:04:a5:32:4c:c8:c2:
                    64:57:7b:7f:e0:7a:b2:94:7f:28:71:5a:65:79:66:
                    4d:43:d4:ce:42:2a:9e:4a:77:a7:bb:c3:ba:c7:fd:
                    83:cb:da:cc:82:a5:1b:1c:d1:34:26:d2:d2:9d:87:
                    6a:a6:b7:98:db:21:1b:a4:37:76:d5:a2:d4:ef:dd:
                    dd:58:f9:37:67:08:0b:be:37:71:bf:da:8f:0d:b6:
                    8b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E6:D1:40:61:87:FB:CA:F7:0F:C8:34:64:E6:D9:0F:D9:BE:0C:17
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:19:52:6d:f5:80:a1:18:dd:c2:07:3f:8f:00:51:28:8b:
         95:64:0c:ca:04:7c:cd:4b:65:ef:93:0e:5d:8c:7f:ad:09:fa:
         31:a5:14:05:ee:42:14:e6:b7:4d:19:e9:2b:cd:5e:92:a7:25:
         0f:a3:15:a6:b3:66:f6:26:8d:78:06:16:3a:41:ac:8a:70:8f:
         ae:ec:11:0f:c0:36:10:dd:a1:da:08:42:fd:de:91:bb:b9:9a:
         ee:80:b9:c8:67:7f:ec:70:4e:4c:88:98:32:83:be:2e:e0:3f:
         c9:bf:0a:15:91:a9:f0:c7:07:29:5f:ba:01:1f:e2:68:35:87:
         8b:8f:34:8a:3a:b9:16:f8:36:e7:da:56:ce:1e:24:72:7e:ea:
         bf:76:ba:bc:53:22:73:9d:9d:86:78:56:4e:54:0c:e6:d8:e8:
         5c:1a:92:53:97:6b:be:a5:a1:f7:56:93:39:a8:5d:73:6a:ef:
         d3:0e:7a:f6:56:d8:fb:82:b4:04:e8:62:16:53:03:db:f2:e6:
         8a:8a:c5:8e:63:98:60:33:cc:b7:cb:f0:fd:0e:7c:51:25:b1:
         93:0b:f4:82:0e:5e:8e:f1:50:4b:9c:ba:40:f6:10:07:2b:1c:
         b6:7b:d8:4e:5f:e4:9c:64:bf:91:40:75:db:82:da:39:4f:60:
         13:6b:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:26:57 2026 by rpki-client