Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File:                     UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier:          ZyiFY49Op6iW4rd4IaTp7ZTTN5WJE2FZ52Ly2VFHPG8=
Subject key identifier:   34:38:17:66:7A:4D:B0:D6:59:E2:97:25:92:2C:1C:AB:93:1C:37:8A
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0544
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number:          0505
Signing time:             Sun 26 Apr 2026 23:43:08 +0000
Manifest this update:     Sun 26 Apr 2026 23:43:07 +0000
Manifest next update:     Sun 03 May 2026 23:43:07 +0000
Files and hashes:         1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: qRU/3GlXCDzUiY9vA7/9X4Ka4EDuW+4BOUZET6Mcwk4=)
                          2: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: 9DZA6kPOIrAY8e4rFQK1pMOYRt3f89rfc69PwA3YKl4=)
                          3: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: W6yRkHf1Qxa/yaTHX2SnjkZf4KzTj4oR8ge60uOkiTg=)
                          4: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: /ycYefsrCAkt4UHFlzokHoXIxkbvkF32l5iChlZZJd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Apr 26 23:43:07 2026 GMT
            Not After : May  3 23:43:07 2026 GMT
        Subject: CN=69eea30c-0fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:4d:ec:56:bf:ce:e4:7d:35:64:4b:25:0c:
                    6b:d8:ed:52:e5:67:b2:a2:b5:f2:d8:ce:78:f1:8e:
                    e1:db:b5:e0:eb:bc:f0:32:96:4c:cd:40:ce:4a:da:
                    ce:29:a8:d0:8c:49:20:4a:a2:26:f4:ed:f5:79:91:
                    52:af:8e:bf:ee:8e:91:14:70:a8:62:c5:bb:4e:c4:
                    d6:ee:ae:e1:0d:bb:48:cf:d0:cf:4f:88:7f:29:07:
                    f2:db:a6:fd:13:81:41:9b:50:52:d8:97:5c:88:9d:
                    fd:51:61:1a:e6:0e:fb:a3:43:d0:59:7c:3a:45:ea:
                    a1:9c:ef:5e:15:dd:63:c5:94:c4:ea:91:ef:cf:89:
                    ae:42:18:11:2f:a8:ce:1a:64:9d:86:d1:ba:1c:fa:
                    b0:ee:e3:1e:e6:00:46:32:e9:e2:59:3e:89:ba:22:
                    53:98:3a:b4:9c:fe:3d:b5:e8:82:ef:f8:46:54:70:
                    3d:0c:f7:dc:49:50:6f:56:36:90:c2:80:c5:ad:a7:
                    a0:a4:f4:0d:84:70:dd:c8:45:10:a6:ae:ed:95:33:
                    dd:7c:08:fd:48:b2:fb:6f:2a:e5:bf:ca:39:67:f8:
                    83:ef:a4:34:f7:5e:13:e3:9b:c7:22:75:eb:15:c5:
                    de:55:51:1b:32:52:0a:5e:b0:6d:99:0b:19:ff:5e:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:38:17:66:7A:4D:B0:D6:59:E2:97:25:92:2C:1C:AB:93:1C:37:8A
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:af:e2:69:76:91:6f:40:67:2c:80:fc:23:12:21:f7:03:f1:
         69:78:92:6c:84:2f:ad:2b:80:af:0d:e1:cf:9e:9a:d9:37:28:
         41:13:9d:c9:4a:f0:10:f5:ad:9d:6e:24:ef:45:97:44:0b:3d:
         c1:a2:ec:95:dd:b4:b2:1e:b7:24:53:f2:3f:13:c5:d5:28:15:
         cc:84:aa:0d:0d:e7:28:f6:cd:0c:c5:aa:f5:3a:21:41:f5:2c:
         ca:e4:6a:34:fa:00:46:9a:59:88:38:51:24:fe:2c:6b:99:10:
         b7:74:45:bf:a2:ea:d6:87:61:28:82:97:2d:3c:b3:88:b9:0a:
         d5:87:b4:c8:9c:f7:8f:9c:47:09:de:0b:bf:02:4b:94:3d:7a:
         f4:24:94:d2:cb:66:fd:03:5e:18:04:00:e2:15:5c:66:68:f6:
         d8:8e:fe:5b:1c:d2:7d:8b:c8:69:70:73:cf:69:c1:ea:b2:77:
         a9:89:4e:32:a6:06:ed:bb:17:d1:d6:14:df:b9:f8:c5:31:5e:
         28:dd:bd:d6:44:81:ac:a9:87:76:63:fb:be:70:b5:ab:39:b6:
         43:5d:29:77:14:86:c9:fc:b7:b6:6d:da:e8:79:23:2a:52:64:
         02:63:55:0a:5a:57:c7:1a:25:8c:47:73:75:fd:d2:95:ca:4b:
         b0:ce:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:09:49 2026 by rpki-client