Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File:                     Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier:          aVEaKDWdHu/TFxOjCA3MeJgi7FEheknfyD0v39KIMvc=
Subject key identifier:   B1:DA:55:59:14:75:51:B9:6E:6F:A8:81:DF:1D:B3:54:58:1A:A7:33
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer:       /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number:          0533
Signing time:             Thu 26 Mar 2026 23:20:01 +0000
Manifest this update:     Thu 26 Mar 2026 23:20:01 +0000
Manifest next update:     Thu 02 Apr 2026 23:20:01 +0000
Files and hashes:         1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: 4jfHCdum7uwRvM81KGzPvMBHL0+OciQn1L3wfUxa41c=)
                          2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: 6JHz+aUhdxO4zGQ+Fk/0iVTFh99Rs9q0svUR3LyvTKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
                          rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
        Validity
            Not Before: Mar 26 23:20:01 2026 GMT
            Not After : Apr  2 23:20:01 2026 GMT
        Subject: CN=69c5bf21-0d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:6b:f7:9e:05:ae:ec:05:71:31:3c:22:39:
                    35:51:b4:ea:a6:25:bc:fa:75:4c:c2:a5:74:4f:ea:
                    d7:96:2c:56:51:9b:6f:bf:ff:55:a7:18:44:4e:d1:
                    45:47:00:0e:7f:17:e5:8a:1c:d2:14:85:83:2d:0d:
                    08:e0:fe:9f:7e:e2:b2:52:7c:cc:d1:49:14:54:4f:
                    a7:8a:c5:08:e8:e2:62:2e:88:51:8f:d0:8b:f5:5c:
                    4e:b1:38:d4:74:bc:d0:b1:76:9d:2d:63:38:4b:92:
                    5c:24:df:cf:a8:c4:71:55:86:f7:95:93:3b:09:21:
                    7d:05:c7:53:c5:fa:fb:6d:52:76:ed:0b:b0:9d:6d:
                    43:90:35:63:6d:74:4d:cf:dc:b5:c3:71:e7:e4:7d:
                    05:7f:0b:53:35:4a:2f:27:b9:84:06:2a:a0:dd:8b:
                    f1:61:db:47:9f:56:af:ce:51:e1:99:dc:73:74:2b:
                    40:9a:79:03:d2:d5:80:6e:19:64:7b:ee:ca:09:7a:
                    78:d0:43:38:6a:fe:cc:37:f5:6b:4f:e1:cc:a7:05:
                    a6:27:23:35:5e:17:20:84:33:ac:56:37:b6:12:fc:
                    d3:4f:f2:ff:2e:09:b1:10:a2:d3:2a:01:3f:20:5f:
                    96:30:e2:6f:2a:ce:37:1f:ac:4b:04:d1:77:02:ce:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:55:59:14:75:51:B9:6E:6F:A8:81:DF:1D:B3:54:58:1A:A7:33
            X509v3 Authority Key Identifier:
                keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:25:06:16:e2:e5:12:0a:f3:9d:dd:2b:5d:cb:29:c4:01:91:
         1e:1a:b7:4a:2a:9a:c2:7e:e3:79:52:71:f2:d9:3f:c5:7b:66:
         5b:b1:1c:b9:fd:22:60:03:6b:9c:8a:cc:cd:aa:10:4b:a0:fc:
         ca:27:b9:3b:3b:a2:65:e1:51:20:28:4b:93:ae:19:ff:5d:3b:
         91:6e:d3:19:01:6c:29:d0:2d:e7:3d:42:66:3b:8f:26:ff:f6:
         e6:5a:6c:df:f0:7a:c7:21:3f:d6:79:7e:9e:1a:eb:81:41:81:
         8c:cc:1c:8e:32:55:c4:5a:f8:23:70:6b:77:35:52:e9:51:1b:
         04:6a:3b:b8:a9:c0:50:fc:b7:b3:40:b5:57:53:97:fd:4d:23:
         e3:e5:12:4b:07:61:bc:c0:ba:47:9c:c3:fd:f7:b0:32:60:e6:
         0a:02:a9:9a:a2:0a:98:de:b5:b4:39:39:70:59:bd:0d:59:4d:
         dc:1e:52:1d:0f:17:9a:8c:9b:66:15:26:c2:1d:ec:78:6d:14:
         bd:1e:97:8c:73:8b:e5:22:d7:a0:5f:88:92:b5:ec:0a:1d:14:
         39:3a:2b:39:96:a5:5d:62:93:f7:ec:5a:6b:43:5a:67:dc:79:
         f7:37:64:ed:12:08:6f:18:11:c7:62:4a:84:b3:cb:67:e9:95:
         7d:18:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:10 2026 by rpki-client