Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
File:                     uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json)
Hash identifier:          zEWBbvWl8iZvVdCq2R+b0jqMREV0FEHO0PXa5KOv3e0=
Subject key identifier:   0F:AF:50:C1:79:CE:40:88:D3:4E:68:F2:AE:51:3C:B2:75:8E:D8:D3
Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18
Certificate issuer:       /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
Manifest number:          3533
Signing time:             Sat 04 Apr 2026 14:18:23 +0000
Manifest this update:     Sat 04 Apr 2026 14:18:23 +0000
Manifest next update:     Sat 11 Apr 2026 14:18:23 +0000
Files and hashes:         1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: gjn22NgU4TW1Hwb9cKqCP5bif6fwBwTSynTxdELhGgM=)
                          2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: JLGn76090XO49GxPAgwtd2MTIbWpDSO85D1g5CnOfe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
        Validity
            Not Before: Apr  4 14:18:23 2026 GMT
            Not After : Apr 11 14:18:23 2026 GMT
        Subject: CN=69d11daf-ab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:f3:6b:7a:06:20:00:bc:60:ca:2c:48:7f:
                    8a:55:6a:1d:19:69:ca:40:cf:0f:2d:d5:48:a1:ff:
                    3a:57:56:00:ae:d3:57:0d:52:3a:e0:58:60:c0:a8:
                    0c:66:61:49:0f:6e:cd:65:e7:76:63:ce:bc:97:e2:
                    da:b6:54:fc:76:7f:00:98:09:6f:0f:e3:4c:06:dd:
                    35:a5:bf:2f:dd:52:e9:e2:64:9f:3d:51:7f:af:5c:
                    c7:16:b9:52:a7:3a:76:fe:d8:e0:d2:5a:bb:11:4b:
                    b5:b2:ce:0c:49:01:fd:7d:5f:5f:20:5d:d1:3a:90:
                    ee:db:8f:f4:72:a3:2a:97:40:9a:d3:f8:74:e0:3f:
                    89:d1:9b:8c:ba:d3:29:4a:fe:59:03:ad:c8:67:37:
                    80:d4:30:05:dc:00:ba:4f:f4:40:63:0a:04:be:29:
                    1f:a7:be:34:21:bd:89:68:80:91:93:9d:37:a7:79:
                    37:bb:e2:18:7d:92:1e:49:6f:eb:e4:1b:57:26:ce:
                    6b:60:43:72:4d:30:61:58:0f:67:3c:8c:10:fe:df:
                    c2:39:b9:02:b2:39:46:8d:e0:09:d5:5e:80:46:69:
                    51:2d:08:5f:69:95:85:8f:e4:f7:31:6d:7f:3c:56:
                    c6:bd:08:37:fd:26:d9:5e:f5:69:5e:ff:17:86:fe:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:50:C1:79:CE:40:88:D3:4E:68:F2:AE:51:3C:B2:75:8E:D8:D3
            X509v3 Authority Key Identifier:
                keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ac:8b:04:7a:7b:0f:61:79:45:97:d5:78:8c:3a:58:dd:a8:
         0d:00:34:c2:fe:ea:38:57:b1:ad:1b:c0:7c:26:81:63:ba:b7:
         fc:20:0f:92:08:1d:6a:68:d2:ec:9a:8c:ff:17:ed:c2:dc:57:
         b7:eb:c2:d1:59:94:f4:58:ce:18:5d:ac:ec:1d:de:f2:44:72:
         f2:35:38:9b:4b:b7:58:2d:5a:a8:38:e7:14:2a:9c:a9:d7:40:
         57:19:9d:4e:ea:39:de:59:03:15:95:1a:0c:ca:14:78:5d:c6:
         0f:15:45:df:f1:2e:4c:18:10:d0:f0:9d:cf:80:4c:2c:3c:18:
         c1:8e:05:b1:f6:cb:6e:cb:b9:ee:07:5e:a2:c3:27:42:57:f4:
         ed:30:83:2e:f8:c2:08:79:64:d4:c8:8c:64:69:bd:95:1c:40:
         81:2d:a1:ad:90:30:99:15:2b:c7:ed:ab:46:de:e7:49:31:37:
         30:9e:99:25:5c:af:45:7d:4e:1e:56:04:55:f9:f8:5c:65:05:
         41:9d:a5:7b:57:fc:13:6e:7f:06:d3:45:9b:16:bf:68:d0:9d:
         62:4b:7a:e9:58:35:a3:db:a2:1d:0d:99:f8:9f:47:60:9b:f8:
         a3:73:4c:1e:3f:66:c0:f9:58:a8:89:a4:ae:b2:59:30:cd:29:
         d6:2c:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:50 2026 by rpki-client