Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File:                     UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier:          Nc9JjULeo9ydaecvCRwSkogXGbXMCTScIO+0Ns+ozBo=
Subject key identifier:   AC:FB:B2:B8:D7:9C:63:B3:9F:AA:F4:D5:D5:1F:B2:C6:91:F1:86:95
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer:       /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial:       1EBE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number:          1EA6
Signing time:             Sat 18 Apr 2026 15:59:36 +0000
Manifest this update:     Sat 18 Apr 2026 15:59:35 +0000
Manifest next update:     Sat 25 Apr 2026 15:59:35 +0000
Files and hashes:         1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: v8JRr7ORr3jYCoMUAo8TxuQ0jfGcKI4HDPMoKwfWgMc=)
                          2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
                          rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7870 (0x1ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
        Validity
            Not Before: Apr 18 15:59:35 2026 GMT
            Not After : Apr 25 15:59:35 2026 GMT
        Subject: CN=69e3aa68-752c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:70:52:f9:97:35:80:4b:c0:40:be:ab:70:
                    1a:86:df:4a:0a:b9:c4:ed:f3:cf:15:6c:69:60:ca:
                    19:45:6b:bd:cc:6e:0f:f9:25:e8:fe:24:ea:62:4c:
                    8b:91:86:c3:d7:e5:78:df:41:ce:0c:76:cf:4c:96:
                    35:13:80:77:1b:ff:56:18:06:cc:b9:4b:77:c0:26:
                    df:31:da:e3:14:fc:cc:23:23:f1:3f:18:94:d7:0a:
                    44:f5:29:c1:48:06:05:82:5c:38:49:e4:6d:a2:cc:
                    92:25:6d:88:0d:d0:b8:43:e8:e2:c0:76:a4:2e:06:
                    47:eb:87:60:d8:5a:70:f6:17:20:cf:a1:ef:9d:ec:
                    e4:6a:88:bf:ee:6e:4c:c7:87:ef:7e:69:45:cf:ca:
                    e9:a0:77:bc:af:ea:2e:fc:72:86:c9:4f:3d:1a:de:
                    9e:dc:45:99:b2:67:4e:89:10:89:4f:d6:b3:74:59:
                    fc:e2:6c:00:b9:1a:93:19:b4:49:6f:b3:30:89:53:
                    1f:dd:2d:73:3b:f6:bd:b1:8a:d7:1c:e9:22:18:d9:
                    c1:45:57:4c:53:79:57:53:e0:d4:cc:d0:86:b3:51:
                    96:83:77:37:69:6b:20:d8:d5:8d:20:90:97:98:bb:
                    01:04:5b:0a:46:68:60:0f:5c:bb:2e:34:89:8c:57:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:B2:B8:D7:9C:63:B3:9F:AA:F4:D5:D5:1F:B2:C6:91:F1:86:95
            X509v3 Authority Key Identifier:
                keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:f9:f2:7f:32:db:78:fa:ff:1e:47:05:40:4a:c7:9e:85:
         f4:28:c5:87:63:c2:82:56:bd:a2:88:14:f8:44:aa:92:ad:77:
         9c:e4:bf:47:56:9b:f3:94:a3:44:0f:b1:6b:fd:34:38:7b:11:
         d0:d6:30:48:64:a6:33:ab:c5:fb:f8:1e:a1:a1:63:e0:53:61:
         e3:e2:08:2c:49:a0:01:dc:20:38:18:ba:a8:54:e9:94:8a:8f:
         65:18:87:f4:6d:52:ce:13:a6:4c:9c:85:69:ac:7a:ac:f7:54:
         4d:59:6a:2b:d7:c2:d8:a1:e7:b8:9e:68:e7:7d:e1:47:60:98:
         ea:03:aa:7a:4f:ba:80:37:55:a9:f0:a1:8f:5c:53:d7:0c:b0:
         cf:c7:fc:4c:be:31:03:c8:ca:e7:3d:40:67:3c:b9:8f:68:52:
         5a:59:fa:fe:41:c8:a3:1a:8a:49:fe:e6:68:b3:63:b0:71:2f:
         e7:bf:c5:00:84:79:30:ff:3e:e1:f3:18:18:e3:31:77:b7:78:
         4d:93:38:f9:5b:b3:0e:68:ee:76:aa:c9:40:82:82:6c:6c:15:
         bc:0e:0a:e6:76:bf:0e:63:39:9e:dd:44:2e:69:42:0b:1c:67:
         b6:0d:04:40:85:8d:85:14:65:80:2c:4c:21:65:68:27:08:ee:
         1d:19:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:40 2026 by rpki-client