Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File:                     uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier:          668DrgxwinGvrMY4YXm7uLwo0I67RigJxJtjZLxOe+U=
Subject key identifier:   AE:73:C4:55:FC:A0:00:69:38:54:A3:72:FA:56:3D:F3:79:64:C6:2D
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer:       /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number:          01A8
Signing time:             Fri 17 Apr 2026 03:56:05 +0000
Manifest this update:     Fri 17 Apr 2026 03:56:05 +0000
Manifest next update:     Fri 24 Apr 2026 03:56:05 +0000
Files and hashes:         1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: NkfNcD4xF+UY2LEpxY3EQL3NgL8aNY7mul95ah2gRt0=)
                          2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=)
                          3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
                          rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
        Validity
            Not Before: Apr 17 03:56:05 2026 GMT
            Not After : Apr 24 03:56:05 2026 GMT
        Subject: CN=69e1af55-b2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:3e:ea:bf:b3:b5:d3:cf:5e:d2:a5:b1:a4:
                    8e:d0:12:3c:cf:1f:a3:fd:04:60:74:fa:a0:31:c1:
                    fe:ea:ae:08:a9:c4:ae:d0:64:62:01:ee:ca:89:47:
                    7f:70:52:55:d8:97:1d:a5:8a:b0:c5:e8:8f:53:45:
                    8c:24:ff:4c:ac:f9:04:a9:de:15:7d:50:bb:ac:7f:
                    5a:a1:b4:6c:a7:95:1a:36:c7:51:e9:53:e9:fa:3d:
                    8f:0f:f8:6d:83:01:4c:8f:66:c0:74:8a:54:00:c8:
                    24:78:48:0d:46:4c:2d:d7:c1:c8:dd:3f:9c:c2:27:
                    22:c1:27:24:f5:4d:3e:a1:68:24:db:69:ca:b3:b0:
                    55:9d:e3:2f:54:3b:ca:1c:df:84:14:74:51:0c:d2:
                    ff:d9:a7:f3:79:af:fb:18:fa:2f:b5:16:03:af:1b:
                    15:f5:40:63:18:86:a7:77:d3:f0:4c:e4:37:41:e2:
                    c5:fe:96:24:e6:ce:d7:47:24:cf:5b:66:9a:73:6c:
                    9e:fc:78:a4:c6:d2:00:2c:d8:39:b7:1a:3d:6f:30:
                    30:74:6a:4b:f0:63:87:f1:51:cd:1a:c1:c2:01:67:
                    91:00:5a:4b:ea:c5:c6:78:e6:f8:7c:81:f9:d1:14:
                    51:80:e1:ec:11:05:e0:c9:8c:d1:a4:e8:ac:ac:97:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:C4:55:FC:A0:00:69:38:54:A3:72:FA:56:3D:F3:79:64:C6:2D
            X509v3 Authority Key Identifier:
                keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:a9:80:06:a6:bc:39:92:24:16:00:07:26:19:d7:da:d3:
         8a:9b:d2:64:a6:1b:77:ae:96:4f:37:64:6e:30:f2:0f:ba:92:
         cd:c5:6d:b5:f8:fb:a5:1e:9a:59:d1:6e:67:c4:ce:df:a1:74:
         cb:f2:14:85:11:7b:d1:b5:62:b2:3c:96:d8:06:ff:f5:68:f6:
         fa:52:37:1e:73:87:ac:02:ac:e4:54:e0:db:68:73:b2:d9:c3:
         2b:0d:34:14:70:ba:13:03:ed:5a:d0:1d:86:03:21:33:18:f2:
         eb:73:92:ec:44:25:6b:f7:48:bc:7e:75:07:ab:b7:69:a4:40:
         10:ed:0b:c2:ec:2a:e5:08:b5:58:82:39:4b:32:91:68:af:29:
         15:a5:d3:dd:91:b5:f6:87:df:63:7f:64:92:ca:95:fe:d6:63:
         8a:5d:31:3e:c6:b6:aa:34:83:e6:27:c3:2d:da:85:63:38:a3:
         b6:9a:ac:3e:59:65:a4:19:eb:de:1d:ba:12:82:e6:3a:f7:b7:
         56:90:97:de:0b:6f:ae:41:2b:7f:8f:17:f3:14:70:f1:2f:1e:
         ad:09:b0:d6:18:11:70:80:bb:ec:8a:1d:f8:a7:21:93:ca:5c:
         bc:b8:74:b6:49:24:68:04:a1:45:9e:f3:56:05:7f:12:6c:31:
         ec:a9:ca:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2
RjZDNTcyNEQwHhcNMjYwNDE3MDM1NjA1WhcNMjYwNDI0MDM1NjA1WjAYMRYwFAYD
VQQDEw02OWUxYWY1NS1iMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoTU+6r+ztdPPXtKlsaSO0BI8zx+j/QRgdPqgMcH+6q4IqcSu0GRiAe7KiUd/
cFJV2JcdpYqwxeiPU0WMJP9MrPkEqd4VfVC7rH9aobRsp5UaNsdR6VPp+j2PD/ht
gwFMj2bAdIpUAMgkeEgNRkwt18HI3T+cwiciwSck9U0+oWgk22nKs7BVneMvVDvK
HN+EFHRRDNL/2afzea/7GPovtRYDrxsV9UBjGIand9PwTOQ3QeLF/pYk5s7XRyTP
W2aac2ye/HikxtIALNg5txo9bzAwdGpL8GOH8VHNGsHCAWeRAFpL6sXGeOb4fIH5
0RRRgOHsEQXgyYzRpOisrJfKnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5zxFX8
oABpOFSjcvpWPfN5ZMYtMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG
RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy
Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArRGpgAamvDmSJBYAByYZ19rTipvSZKYbd66WTzdkbjDyD7qSzcVttfj7pR6a
WdFuZ8TO36F0y/IUhRF70bVisjyW2Ab/9Wj2+lI3HnOHrAKs5FTg22hzstnDKw00
FHC6EwPtWtAdhgMhMxjy63OS7EQla/dIvH51B6u3aaRAEO0Lwuwq5Qi1WII5SzKR
aK8pFaXT3ZG19offY39kksqV/tZjil0xPsa2qjSD5ifDLdqFYzijtpqsPlllpBnr
3h26EoLmOve3VpCX3gtvrkErf48X8xRw8S8erQmw1hgRcIC77Iod+Kchk8pcvLh0
tkkkaAShRZ7zVgV/Emwx7KnKMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:21 2026 by rpki-client