Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File:                     nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier:          S5lgzfCWRCZeUt4c30LN8mMKjSEcOwcRRVV+11hGD3Q=
Subject key identifier:   7C:B2:59:BD:68:6A:AB:59:2B:4C:22:D1:FF:91:10:D6:F0:E5:FC:14
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer:       /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number:          0184
Signing time:             Sun 05 Apr 2026 03:57:13 +0000
Manifest this update:     Sun 05 Apr 2026 03:57:12 +0000
Manifest next update:     Sun 12 Apr 2026 03:57:12 +0000
Files and hashes:         1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: e+oxs55jRYEqFlLy37fn8e2G1bID8cam+mCCvD9z1g8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
        Validity
            Not Before: Apr  5 03:57:12 2026 GMT
            Not After : Apr 12 03:57:12 2026 GMT
        Subject: CN=69d1dd98-41f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:87:90:8f:2b:c1:31:17:4c:f1:9d:b6:05:
                    4e:bf:75:54:41:ac:d9:da:6d:af:e3:b6:96:88:eb:
                    10:80:ac:76:12:8f:cd:75:6c:f5:10:0b:c0:c0:34:
                    37:46:d0:7d:f4:2c:d8:ab:76:f5:aa:f4:55:9c:8d:
                    a5:7c:8d:44:0f:a3:07:03:8b:fd:5e:86:76:20:af:
                    7a:13:13:7c:45:3e:92:02:db:fe:7f:d2:51:c6:23:
                    40:8a:c2:33:f7:c2:de:fc:87:9a:63:e4:63:a7:83:
                    e2:75:0c:cd:e0:f9:b2:bf:d1:b5:a7:d7:ce:13:cb:
                    d5:8b:6d:ff:95:e7:90:2e:db:5b:1f:fe:56:65:14:
                    e8:a1:ae:66:1f:e6:32:08:3a:27:d7:19:1a:0f:97:
                    81:b3:28:e3:83:97:c1:e3:40:99:09:00:fe:89:df:
                    07:a1:65:4f:c9:2d:82:e7:90:92:1c:62:4f:f1:31:
                    40:c5:8b:90:47:51:55:dc:5b:d8:dd:ae:fd:dd:ca:
                    08:b6:7c:31:a1:d5:7a:02:e4:d2:aa:25:3d:33:5d:
                    c0:17:82:86:8f:77:96:30:49:27:c1:c6:1e:dd:99:
                    65:e0:4b:c5:73:f6:cf:85:d1:76:38:f7:63:c0:83:
                    95:a2:0a:b5:86:e6:21:8c:86:e3:71:bf:69:50:ac:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:59:BD:68:6A:AB:59:2B:4C:22:D1:FF:91:10:D6:F0:E5:FC:14
            X509v3 Authority Key Identifier:
                keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a9:8c:fa:af:b2:9b:ed:20:46:33:6a:de:db:c4:4e:d7:6c:
         f4:28:4f:58:a9:05:e3:c7:2e:3f:68:60:68:fb:75:5a:9b:bb:
         f7:95:0e:9b:3d:75:9a:fc:bc:69:f6:f4:b2:ec:26:ba:d3:99:
         db:71:60:31:b3:14:db:96:7a:cb:d8:f1:6a:ee:4d:2d:90:df:
         e9:9f:a7:bb:7b:31:b7:68:17:dd:68:f8:95:27:80:8f:6b:9f:
         83:9c:a2:ad:22:ab:a9:32:dc:88:68:be:92:be:18:b2:c1:8d:
         6a:26:0a:65:30:1b:b2:a4:0f:11:fa:3d:0b:9d:a2:ee:ac:99:
         3e:ec:59:14:65:e6:3e:34:6c:2c:81:62:65:c7:c7:ea:54:a2:
         ba:54:dc:2c:a7:52:10:6e:70:0b:2a:9d:60:ca:b0:ee:9e:82:
         5b:34:4f:fc:c1:e5:74:37:91:24:07:41:de:0a:43:cc:e0:71:
         df:98:55:7b:be:3e:0a:f5:d5:3c:f4:c1:ee:ac:0a:6d:d8:01:
         2c:12:de:f6:cf:30:41:49:8d:d3:ec:ca:0d:9d:07:81:d5:2b:
         3b:97:f6:ef:63:72:a4:c5:93:a5:06:bf:e6:b4:3f:52:f6:04:
         b2:a3:b4:a6:f9:49:8a:93:87:09:45:bd:56:e9:9f:c0:d9:5f:
         a1:11:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:34 2026 by rpki-client