Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          h5qFXtCsCnsnhrUpJshBcgX+B+0LT3/YExBPqOmncG0=
Subject key identifier:   F4:E6:55:81:83:0A:1E:BB:E8:A2:EB:86:29:91:C1:E0:A5:D7:13:B0
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       0754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          074B
Signing time:             Sat 04 Apr 2026 21:31:57 +0000
Manifest this update:     Sat 04 Apr 2026 21:31:57 +0000
Manifest next update:     Sat 11 Apr 2026 21:31:57 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: 5cNHpBs7d8TvGp1jiM1ROfGfOnvLuYNMvhBCki9TLY8=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: jmaFcpaDeiXM/6W+3Dvlo06UYUE1H6LTzGNr5Pw/4po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Apr  4 21:31:57 2026 GMT
            Not After : Apr 11 21:31:57 2026 GMT
        Subject: CN=69d1834d-4b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:73:98:6a:db:11:4c:37:e2:a9:d3:e4:55:
                    d1:5b:7b:ea:bc:89:06:e0:ff:fe:c7:75:a4:5d:b3:
                    27:64:f3:0f:80:35:ab:56:d4:68:93:05:86:f0:7f:
                    27:19:15:c6:f1:71:28:c1:07:ad:7a:a1:95:3f:6e:
                    93:75:8c:62:d8:8c:b0:87:f2:c8:d7:19:64:b5:12:
                    34:0c:4c:e6:97:e6:54:98:de:01:dc:95:a9:6e:12:
                    70:ff:d8:90:0c:56:3a:ac:00:4a:2b:47:15:43:22:
                    37:4d:a2:e5:42:5b:ba:21:5e:9b:ab:7f:dd:42:c3:
                    56:45:78:27:46:d8:47:5b:90:50:c1:61:b3:85:a5:
                    3c:35:8b:04:f2:af:6f:bb:97:66:41:cd:71:23:c1:
                    d3:99:45:ab:04:b7:4a:c4:1a:04:7c:b1:01:50:e8:
                    d2:0b:1c:ea:be:b7:80:4e:d7:86:f5:4a:0e:20:03:
                    3f:2c:6a:a5:20:b5:ab:f9:87:3e:86:2f:38:63:06:
                    a8:5e:e8:22:19:cb:fe:9e:74:50:bc:fe:c0:c5:1a:
                    c5:eb:cb:52:45:6c:4f:32:8e:a9:05:05:cd:cc:b4:
                    1b:82:ba:f3:f0:26:2a:2b:52:02:3f:34:28:11:27:
                    dd:e5:d6:eb:6f:25:d0:de:be:42:01:5a:46:f3:db:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E6:55:81:83:0A:1E:BB:E8:A2:EB:86:29:91:C1:E0:A5:D7:13:B0
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:1e:88:5d:f9:ec:73:c2:19:9d:97:19:0e:bd:cd:91:33:
         7d:d0:c8:1c:dc:48:e0:20:96:f7:68:22:ad:a9:22:d1:0d:3b:
         22:ba:68:cf:33:31:41:dd:ce:4b:53:3e:4b:34:2f:29:89:f0:
         c2:bc:b9:ef:be:62:2d:67:f1:fb:af:c4:79:f1:e1:9f:99:46:
         23:2e:ea:5e:3b:fc:82:58:c3:a4:ac:80:61:22:ad:05:e3:96:
         44:0e:1b:53:80:b0:5a:b9:6c:49:1c:ad:a2:cf:68:b7:b0:fe:
         40:3b:2b:2f:94:b1:0a:81:41:7b:8f:59:e4:0a:83:3d:b8:83:
         9e:49:91:2b:80:c6:28:ff:87:08:bc:9c:1b:a2:46:09:1a:eb:
         56:9e:36:5d:f0:93:e7:c6:09:b4:43:29:d2:11:6b:97:f8:c5:
         b8:0d:b7:72:ef:f9:04:89:1e:8b:37:32:05:b0:9b:3a:8a:4c:
         87:ce:7e:ad:a1:2d:3b:99:dc:fb:c3:c7:6a:ef:0e:e3:4e:94:
         65:60:8b:12:60:8f:5e:16:ff:20:2c:5f:5f:16:02:60:c6:f3:
         6c:4a:47:0a:80:6e:99:65:61:5d:b6:c9:8d:33:d5:12:55:09:
         07:51:8a:b8:32:91:68:2c:bc:6e:d2:fe:b9:3c:f6:23:04:56:
         6e:e5:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:46 2026 by rpki-client