Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
File:                     Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json)
Hash identifier:          MvdL1huSp3kYwGr0JUC3O8oHuSy33vUgkfGR3mkEb5c=
Subject key identifier:   D6:D6:D0:35:E8:1A:67:00:F0:10:A5:54:DB:9F:99:72:20:78:B4:46
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Certificate issuer:       /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
Manifest number:          014F
Signing time:             Sun 05 Apr 2026 04:33:35 +0000
Manifest this update:     Sun 05 Apr 2026 04:33:35 +0000
Manifest next update:     Sun 12 Apr 2026 04:33:35 +0000
Files and hashes:         1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: i7i/0rNLwb4ijET1hRloVxchHGLrr6Q4cxUXHsGIoJw=)
                          2: 24142938343C11EFA0165876C4F9AE02.roa (hash: cZdtKnw4eHifsUm3U5oL2ZEURjpZCo9PDtjWNEmuKMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
        Validity
            Not Before: Apr  5 04:33:35 2026 GMT
            Not After : Apr 12 04:33:35 2026 GMT
        Subject: CN=69d1e61f-7952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:a8:02:97:72:b2:6c:d1:a2:b3:7f:98:a1:
                    11:6b:13:fb:80:31:86:be:5d:66:2e:26:51:05:20:
                    26:a8:29:cb:ea:fc:e4:62:db:a3:df:10:4d:7a:6a:
                    fd:69:56:d5:2c:d1:bc:44:20:91:41:50:00:48:81:
                    56:53:11:d2:e6:1a:54:01:54:65:40:59:85:05:6a:
                    87:eb:fc:05:1c:3d:84:c1:d5:45:b9:d0:00:21:2f:
                    2d:33:15:cd:94:47:17:37:1d:95:d5:cc:b0:1c:59:
                    9c:85:2e:35:0e:93:c4:f2:dd:67:e8:f4:43:24:3d:
                    ec:e4:03:d7:93:7a:33:2c:df:2c:4b:ea:57:58:d3:
                    88:5e:ac:2e:0f:75:5e:a6:02:7b:7a:14:7d:f0:6e:
                    11:ba:26:41:b0:fd:9b:f9:37:ac:f9:a5:aa:eb:81:
                    db:7d:d7:bb:93:99:ac:ae:28:22:e6:56:a0:d4:6b:
                    17:3b:47:89:04:d7:46:4d:93:f2:a4:21:05:b9:4e:
                    11:93:cd:3b:52:38:4b:cb:b9:cb:f5:2c:a4:74:03:
                    25:0a:54:41:7f:64:aa:31:d4:fd:c3:7b:61:f2:f0:
                    93:0b:9d:4c:29:4d:8e:86:f7:ed:9f:37:2d:14:63:
                    96:8d:98:f7:22:43:dc:e7:28:1d:f0:0f:7f:06:4e:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:D0:35:E8:1A:67:00:F0:10:A5:54:DB:9F:99:72:20:78:B4:46
            X509v3 Authority Key Identifier:
                keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:3a:68:c9:eb:e9:b3:f2:e7:db:9e:71:f4:a4:d1:69:43:
         72:c4:5b:ed:1d:75:a6:47:ad:a0:5d:bc:c8:04:3d:a1:03:90:
         72:46:b9:ca:0b:60:ae:a6:35:76:46:4d:8d:50:a6:db:c2:35:
         6a:92:c8:4e:62:f9:7f:d1:11:9a:cb:31:b6:a1:a3:7d:86:1e:
         95:08:4f:4c:04:bb:5e:92:b3:cd:68:29:48:40:6a:2a:56:46:
         1f:20:5f:73:89:81:87:0d:37:08:89:f6:c3:e4:26:fb:8b:bd:
         ee:3d:2c:e6:d5:b2:db:cc:69:23:6f:ca:46:68:9a:59:03:9a:
         ce:8d:5b:b8:69:a7:46:73:04:f1:3c:f8:de:4f:13:d8:41:59:
         17:71:39:fc:07:dd:b6:21:19:72:b5:a4:92:e1:be:03:0c:1d:
         c8:9b:fa:13:16:b3:cf:78:80:0d:bf:d0:39:67:53:3b:3b:62:
         7b:d0:78:41:57:3d:52:b0:17:1e:e9:17:a0:ae:22:98:18:75:
         6d:13:a2:b2:57:56:c6:4d:5f:ee:e7:51:a6:08:82:06:e6:ba:
         25:62:63:e2:e8:5c:17:e7:b8:c7:77:f2:d9:04:86:ee:90:7f:
         54:bd:ff:82:d9:8a:14:3a:cf:9b:7c:91:8c:1a:44:2a:f9:92:
         f3:60:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:38:12 2026 by rpki-client