Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File:                     UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier:          AAYkxo9X1xba9NiJQioUfMsZTMZkpFANCOwdWj2uBYI=
Subject key identifier:   7C:4A:8C:EA:F5:38:BC:A9:8C:DB:5F:5C:F0:AE:54:DA:CE:8C:C0:BD
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       06C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number:          0693
Signing time:             Sun 26 Apr 2026 22:29:25 +0000
Manifest this update:     Sun 26 Apr 2026 22:29:25 +0000
Manifest next update:     Sun 03 May 2026 22:29:25 +0000
Files and hashes:         1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: yiowOoritWHJjwOGv0ZWBW9ZRwIKTlw/llHnKtf0Ou4=)
                          2: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: U8arnA83oKFnG2GhSz7RqEAXRJbC7v17OG6QnWS2Zk8=)
                          3: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: aRUQXx0V0GLFzvhmgfrBz3H8fjolbBpOYARYMTl5fCw=)
                          4: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: iH8N2/EZ0A3FgzosMJpb5IUjNTYPsThENasr1YI4C1Q=)
                          5: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: LNAhRYJg3M12wy9+EdbC2gimkX7SG11fYwLAn51ZszY=)
                          6: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: wQe9yLAF43ljAO4crGexO1z5JEF2PnlYeQKpz08kYNE=)
                          7: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: mMQnIMnHxyxrtTIwTqaDefb9F/Y/eYhRGnrXlUtgbk0=)
                          8: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: 612cmpEWafPstBGm8x2iYDbkh7FUHX/7eUkj+iqPm8c=)
                          9: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: dvfJXQq1EbLSwTmXVBbNhnU/w2dtpCOPHLknOXmP8c4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: Apr 26 22:29:25 2026 GMT
            Not After : May  3 22:29:25 2026 GMT
        Subject: CN=69ee91c5-4033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:a1:1a:d7:f8:ca:b2:b9:64:68:b3:ce:a1:
                    d3:45:19:7f:ea:f7:d6:71:c7:52:5d:59:38:e5:69:
                    70:25:4b:ff:a4:73:15:a9:9b:51:ce:d4:2c:92:c0:
                    15:b4:62:90:01:58:0f:ef:7a:a1:d8:3d:53:da:1e:
                    a0:03:70:67:ee:4b:8d:02:29:8b:7a:f1:74:c6:84:
                    75:b2:ac:26:e3:cd:1b:3a:3f:33:8f:fa:eb:8c:ef:
                    27:d4:0f:cf:3b:62:d1:51:b3:1b:7d:2e:1c:ca:22:
                    18:4f:bc:50:6c:d1:ce:99:29:fe:19:02:df:fb:1e:
                    e2:f8:cc:7e:9e:9b:d6:18:37:95:62:50:99:b3:9f:
                    ba:2a:38:1f:d3:bd:26:bc:2a:08:02:e5:76:1c:45:
                    63:0b:85:66:63:bd:49:d7:e0:24:86:64:87:d5:28:
                    7b:54:47:0a:13:39:a3:d6:15:7f:d1:48:7d:9b:be:
                    c3:60:75:30:4a:46:02:95:42:e1:ab:eb:03:86:02:
                    1a:f7:f2:7c:7f:21:44:f4:13:d3:4a:7f:94:92:e6:
                    16:04:cc:2a:b3:09:c4:09:2d:28:76:e5:13:77:ed:
                    44:36:b5:5e:49:54:49:d2:d5:89:8a:92:09:aa:ea:
                    8f:32:70:ec:8c:4b:07:79:9b:ed:84:ae:2f:87:37:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4A:8C:EA:F5:38:BC:A9:8C:DB:5F:5C:F0:AE:54:DA:CE:8C:C0:BD
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b0:7e:e1:4e:3e:05:01:ad:2a:58:36:64:18:0d:e4:7b:a6:
         47:43:8d:23:cd:6b:53:57:b4:47:53:b2:7b:59:5f:2c:81:31:
         b9:85:20:45:3a:c4:04:9c:3b:aa:44:eb:6f:17:81:c1:e5:4d:
         0e:cb:2f:94:a4:10:c6:7a:ca:d2:a1:54:b6:99:dc:2e:0a:27:
         61:82:aa:83:92:5d:1c:8d:89:3c:a3:8c:db:be:2b:ae:32:b5:
         6a:7a:4f:55:00:60:e9:9f:ab:7f:46:2c:a4:d9:8e:e2:a8:ab:
         41:f7:0f:2c:8d:99:2a:f4:09:e3:98:1a:2b:df:8c:81:c5:ac:
         3c:d9:99:f3:24:d2:6f:70:ae:c1:7b:18:33:6c:36:f5:fb:1f:
         c6:be:96:df:6e:96:f2:45:f8:6a:c6:76:78:c6:ab:86:8e:99:
         36:e8:e3:0c:14:92:98:5f:d9:6f:0d:b4:9b:c2:a0:29:69:83:
         8f:fb:94:39:e7:ff:db:38:38:1c:41:fd:2d:13:a2:a7:73:d7:
         e4:85:56:7f:c4:81:e0:a0:c0:80:9b:cd:f6:8d:71:e9:ec:23:
         3d:7f:32:8b:01:93:dc:cc:8e:23:59:fa:d7:a3:23:72:a3:70:
         a7:54:77:be:c2:7f:14:76:4c:4d:b4:6d:2d:9f:e3:46:4c:ea:
         bd:e8:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:41:50 2026 by rpki-client