Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          6hAFbkZmchenf+BrIpANg/v4n+Ctl1j7sBocw3QtTRo=
Subject key identifier:   BA:4D:84:EB:B1:01:F1:C6:8E:D3:3F:0E:39:25:EE:F9:61:97:F4:62
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          014D
Signing time:             Fri 17 Apr 2026 04:54:02 +0000
Manifest this update:     Fri 17 Apr 2026 04:54:01 +0000
Manifest next update:     Fri 24 Apr 2026 04:54:01 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: ZQjKM9uWq6m8kZc3OxlJLHMcOPHmg0lNpyoAKCMs3bo=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: kULCLxEgjb2/Cw5xY/yIQe75Fjnphtia6sfeO3P34Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Apr 17 04:54:01 2026 GMT
            Not After : Apr 24 04:54:01 2026 GMT
        Subject: CN=69e1bce9-c3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:e9:0a:a3:58:25:c4:bc:1f:1a:68:19:a6:
                    6e:de:1d:8a:7a:41:cd:91:21:e0:3d:6b:87:36:20:
                    73:b2:57:16:d8:93:a3:39:cb:24:3d:8f:d4:00:ab:
                    54:9c:0a:91:f9:6c:e2:1a:a7:00:ee:07:7c:96:90:
                    6e:66:4c:0c:69:ee:e8:bb:64:e1:16:9b:4f:b5:74:
                    13:8d:e1:03:b9:a3:a2:8a:2f:58:55:61:9a:ce:24:
                    0f:c6:83:32:4f:0c:89:e5:c9:0e:db:89:9f:dd:82:
                    35:b9:25:54:18:e0:0c:a6:0e:75:a3:33:7c:c8:48:
                    30:e2:61:ed:76:f5:f6:08:fd:1b:87:02:50:13:1e:
                    65:b2:54:b5:35:83:cb:ce:9b:02:45:55:b0:4f:0a:
                    b9:47:fa:ba:44:2b:1c:5f:24:b2:a8:c0:3a:36:f7:
                    9f:f1:27:73:b6:bf:9b:a8:8f:41:38:56:20:d4:f2:
                    c3:f1:d6:d5:df:8c:df:3d:c1:a6:76:72:c6:31:b2:
                    c3:47:b2:7e:51:b8:3e:9d:e7:14:da:83:e9:cc:ff:
                    f3:0b:ad:3d:b5:4b:c2:2d:f6:32:55:80:9d:82:70:
                    0b:0d:5d:bc:7a:8a:e1:30:6b:73:12:0b:53:0a:e7:
                    ef:04:c7:08:5a:24:67:f0:11:e3:53:53:33:c4:81:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:84:EB:B1:01:F1:C6:8E:D3:3F:0E:39:25:EE:F9:61:97:F4:62
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:31:61:2e:27:00:9d:81:c4:89:80:11:77:d3:94:81:68:0b:
         4c:bb:6a:f5:91:92:cb:8a:89:28:ff:d3:91:22:fb:d1:b1:07:
         d2:a4:4f:ac:e7:a3:35:93:08:7c:83:eb:f0:56:da:30:aa:26:
         ec:2b:3c:e0:9d:be:77:d7:07:74:25:12:f2:0a:eb:3f:aa:35:
         61:dd:e6:88:9e:17:1e:18:94:10:71:ad:c3:72:b1:57:cb:63:
         0e:68:42:90:68:bd:7d:82:d2:eb:fc:a1:39:7d:07:41:69:ee:
         f3:9b:4c:7e:66:32:40:ff:f7:d2:40:54:32:7f:b0:e5:f3:3a:
         0b:3a:64:65:50:d3:05:dc:85:4d:eb:e6:aa:37:87:ea:cd:e6:
         3e:23:16:c4:8c:4f:80:11:a7:74:fe:0c:c6:33:31:36:18:78:
         37:03:f8:23:f4:27:2b:02:69:00:6f:d4:2e:f7:23:75:a2:f7:
         6b:57:a0:3f:ef:96:35:c7:2c:68:57:7d:ce:2f:31:46:66:94:
         17:19:45:cc:d7:9f:29:6b:e7:c0:d2:c8:fa:c1:a6:8b:60:d3:
         df:ea:5c:ac:c6:0f:3e:a1:aa:07:98:4a:8d:46:09:05:f5:55:
         5e:f1:c8:8e:29:be:65:d8:ef:ef:59:78:04:88:4d:2c:79:7f:
         9e:77:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:07 2026 by rpki-client