Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File:                     UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier:          v1l3xVEFkUW4+H+2Dq88IFjrDO4iifMYch2RFcrl8sM=
Subject key identifier:   3D:03:90:55:EF:4A:2F:C8:A7:FB:F5:B8:C4:91:88:C5:93:D9:31:D7
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer:       /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial:       19C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number:          19C5
Signing time:             Tue 24 Mar 2026 16:17:09 +0000
Manifest this update:     Tue 24 Mar 2026 16:17:09 +0000
Manifest next update:     Tue 31 Mar 2026 16:17:09 +0000
Files and hashes:         1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: IcIGDU6kF/RGCdn5tEpj1iU3pl7C3DyJh1PKPg5ghM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6597 (0x19c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
        Validity
            Not Before: Mar 24 16:17:09 2026 GMT
            Not After : Mar 31 16:17:09 2026 GMT
        Subject: CN=69c2b905-2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:10:6f:91:ae:59:73:b3:b6:1d:81:0c:ba:
                    fc:27:5a:08:a2:d6:d7:6c:17:7f:22:0a:9b:80:ea:
                    b7:07:6c:aa:99:2e:5f:b9:d2:ed:a7:31:09:0c:bf:
                    d7:94:9c:db:54:4f:e9:9f:3a:db:f7:0d:dd:c6:e3:
                    48:91:ec:29:b7:94:45:98:b7:fc:72:95:78:5a:9b:
                    8a:14:78:ef:62:4e:ae:d1:f3:d4:e6:cf:69:b6:2b:
                    53:c3:7e:9b:ea:b4:fc:af:d7:19:f8:99:fe:a0:37:
                    a6:42:68:76:24:ff:5c:65:61:66:fb:97:0a:99:02:
                    3e:ad:dd:e8:80:c9:b1:c5:80:13:33:b9:9a:c1:a4:
                    ff:aa:c0:80:a1:ff:cb:dc:af:57:e5:63:b7:c0:32:
                    5d:60:a1:ea:04:e9:c5:eb:7c:ea:ad:16:51:3f:96:
                    c5:f8:c7:0b:d7:e1:a6:07:ee:55:f7:3d:9a:ef:00:
                    43:39:9b:2e:df:b5:02:50:35:43:c2:de:8e:6f:96:
                    49:4e:3d:ab:0c:49:a9:f6:fa:5a:bf:3b:9b:87:13:
                    92:af:51:47:b8:27:05:61:58:c2:f7:c4:dc:de:8b:
                    b2:bf:a4:80:d3:65:e1:52:b0:aa:8e:17:9c:80:bb:
                    77:86:dd:ae:58:dd:e2:cd:5c:c4:10:3e:69:34:31:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:03:90:55:EF:4A:2F:C8:A7:FB:F5:B8:C4:91:88:C5:93:D9:31:D7
            X509v3 Authority Key Identifier:
                keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:76:f4:57:5c:ad:16:60:4c:5d:b6:e6:26:5b:51:ba:ef:e0:
         35:bf:c1:47:e4:c8:6d:6c:2c:cf:4e:42:f2:27:c2:15:72:e1:
         89:ba:8b:fe:5f:db:c6:aa:73:c5:02:03:bb:36:4c:b4:17:cd:
         6c:65:91:3c:7d:cf:84:9b:83:c9:f7:49:8d:1b:a5:63:13:c7:
         2e:76:7c:ec:fc:7b:10:1b:5b:e1:84:fe:d6:b5:03:19:15:28:
         3a:8c:d4:44:4c:af:c7:cf:ce:bf:47:1a:14:17:27:3c:34:4f:
         0f:2b:4b:b3:b0:d4:85:0f:60:f6:7e:96:3b:9e:76:30:71:02:
         01:ca:83:dd:28:e0:bc:86:e4:71:9b:39:fc:c1:38:24:5c:8e:
         db:ae:89:9a:b8:22:f7:36:7f:c4:92:6e:83:bc:bd:53:b5:a7:
         8e:17:3d:5a:7e:63:40:84:3a:57:ed:fe:02:83:85:7e:c2:f2:
         00:21:31:62:33:c4:37:48:bc:b0:29:b5:28:ee:6c:34:d9:9d:
         a4:44:49:c2:8b:b1:ad:f5:88:8e:bf:9c:8f:9e:65:bc:57:98:
         f8:9f:26:43:19:95:0d:a6:63:ca:c0:33:68:d9:e8:31:2f:8e:
         05:4b:da:23:d1:85:ca:dd:20:f8:d1:2e:bd:2b:81:10:05:06:
         09:a7:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:47 2026 by rpki-client