Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File:                     ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier:          srS4UUXnyavPG0yyNNVKPz8qZ3WTggQAHUc4mTE9lTw=
Subject key identifier:   33:4E:C9:F7:BD:D3:B5:BE:2C:42:08:41:09:4A:0C:83:50:55:40:F7
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer:       /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number:          E7
Signing time:             Sun 05 Apr 2026 05:54:49 +0000
Manifest this update:     Sun 05 Apr 2026 05:54:48 +0000
Manifest next update:     Sun 12 Apr 2026 05:54:48 +0000
Files and hashes:         1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: pZi9ZbYTrTtQNqvCDrToC2ZVE6RKoNgiw9ndSRqxNvY=)
                          2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: dEqBDGsqeiUN91FwP/nGNGZY5s+Bv1LRGDa/upjDjdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
        Validity
            Not Before: Apr  5 05:54:48 2026 GMT
            Not After : Apr 12 05:54:48 2026 GMT
        Subject: CN=69d1f929-d07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:4b:d9:74:31:85:30:28:25:bd:22:a1:e1:
                    89:48:ef:72:5e:2b:be:1e:cf:a2:58:45:5c:68:80:
                    58:d4:d0:37:5d:e7:94:f6:8d:b5:6e:43:e4:39:7c:
                    be:d4:8c:47:70:e9:54:36:93:73:29:4d:5a:9e:fb:
                    a1:6a:ee:b8:9a:ee:40:7f:f0:91:25:f9:bd:ec:d8:
                    96:fe:f0:df:a8:2b:2c:c6:17:2a:50:c2:3f:bc:1e:
                    79:62:bb:d5:6b:d8:23:90:ad:ed:5b:88:d2:f8:74:
                    4e:32:a1:fb:81:e9:41:02:da:46:93:e5:d6:fb:f8:
                    62:a3:8b:30:7a:68:91:f0:1a:60:92:ea:9e:a2:c2:
                    b1:d4:1d:f6:9d:0a:91:0e:de:31:f5:8b:1b:5e:2b:
                    73:1a:45:63:51:27:a4:ec:ce:28:98:34:20:29:c5:
                    25:0d:28:12:8d:5a:d1:97:63:0e:80:1b:16:36:87:
                    1c:66:62:2c:55:2b:22:0e:f2:75:52:3c:b6:78:89:
                    a3:44:19:1f:cd:ad:ea:e6:28:5f:13:8d:55:d1:66:
                    9a:e9:7c:a2:85:29:b3:85:c3:d8:97:86:f6:74:cc:
                    f7:d9:e2:f1:c8:ee:97:50:f5:90:90:92:70:bd:60:
                    8b:9b:e7:eb:6c:da:29:14:04:a0:2d:32:e6:87:51:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4E:C9:F7:BD:D3:B5:BE:2C:42:08:41:09:4A:0C:83:50:55:40:F7
            X509v3 Authority Key Identifier:
                keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:03:ad:62:d5:2a:c2:9f:32:72:71:a1:5c:52:f7:39:2a:26:
         b1:37:cc:19:f2:83:70:9c:28:c9:2f:cc:f2:63:84:e0:92:fe:
         34:6a:38:d7:c9:92:56:bf:fd:a0:c4:64:16:73:5e:4c:12:1b:
         94:2b:20:d3:d6:f0:92:c1:45:a3:4a:f2:e8:86:e0:83:b8:b9:
         72:88:84:cd:96:52:9b:98:7d:be:d7:87:89:af:0d:01:73:88:
         44:f0:43:e9:82:60:e1:9a:e1:fe:20:a3:38:0d:2f:1f:7b:d8:
         05:6e:66:f4:ff:30:22:e1:d3:10:e8:7b:4f:5f:12:f9:04:91:
         18:2a:f4:85:a0:1f:b4:fb:32:f9:ee:0e:57:d4:83:a6:60:e1:
         86:38:53:da:9a:5d:3a:fd:02:94:ad:7e:3d:51:c5:44:e3:b8:
         e2:22:f1:92:e5:09:0d:ab:77:e6:b0:82:32:f6:9a:51:53:fe:
         85:da:ca:e0:97:d5:63:ca:11:5c:90:6b:e3:df:3b:44:2c:e4:
         6e:58:9a:27:30:45:af:0f:a9:74:97:5a:3f:e9:c6:b0:e8:0d:
         0e:d5:eb:a7:83:cd:c9:c4:fb:0d:44:ff:e9:63:c5:53:3c:66:
         36:d4:39:e5:7f:e3:35:85:27:22:90:e9:4c:16:ba:8a:a6:1b:
         ce:d3:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:52 2026 by rpki-client