Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File:                     pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier:          8UnihWLUjJo+pxxWR3hbGaMIa0ERa2ixbXoM8jCsMek=
Subject key identifier:   21:FC:62:DE:F2:B5:70:84:8E:C1:34:9B:E2:E5:E4:DC:03:CB:B8:FD
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer:       /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number:          018A
Signing time:             Wed 25 Mar 2026 03:47:01 +0000
Manifest this update:     Wed 25 Mar 2026 03:47:01 +0000
Manifest next update:     Wed 01 Apr 2026 03:47:01 +0000
Files and hashes:         1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: 5kN6RDGM2QtexaRlhDDSC0mpkqCYIuTqU5g3ICG7iW4=)
                          2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: PDwtIQMH7CUi+ETshPcgYy3XMt2b+vkH5kQDyN2jN0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
        Validity
            Not Before: Mar 25 03:47:01 2026 GMT
            Not After : Apr  1 03:47:01 2026 GMT
        Subject: CN=69c35ab5-7188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:de:e3:83:f7:46:e4:c7:a0:fb:b4:8d:1e:
                    75:66:7b:12:8c:da:74:d6:2b:a5:24:08:6f:c9:fd:
                    38:2b:99:c1:94:2a:56:ea:d7:c6:d5:18:1a:09:c2:
                    11:63:72:8c:6d:33:cf:61:76:d2:82:0e:05:0f:57:
                    88:ce:5c:9b:de:89:2d:35:38:bb:ad:80:ad:a2:9d:
                    ac:7d:3e:ce:17:8e:ef:f1:4c:14:26:83:7c:2c:da:
                    26:b9:d8:1a:e7:1f:c8:46:ef:88:2e:eb:4a:5a:d0:
                    9d:15:07:88:23:be:e6:50:97:39:3f:3e:3d:4b:f6:
                    2c:ce:d0:fe:8c:99:2d:dc:8f:33:75:61:eb:b7:8a:
                    f3:96:ad:92:f1:1f:83:95:35:f0:dc:bd:81:89:6e:
                    b7:b1:25:67:3e:59:ed:45:b1:fa:fb:4b:da:00:f0:
                    fd:2d:6d:33:e9:b2:90:1d:01:16:24:ab:ef:c2:c2:
                    0e:38:64:14:69:eb:50:f4:10:7c:73:74:b0:86:41:
                    ec:f6:e0:0e:c4:fb:d8:0f:ee:44:90:e7:ca:aa:3b:
                    a8:4d:5a:4f:7b:75:99:1b:96:57:17:8e:9b:f8:65:
                    f4:09:ae:00:d7:e5:79:c0:31:c7:fd:04:37:1a:3b:
                    6a:82:0e:f7:7c:9e:a2:51:54:e4:e2:60:4c:17:e1:
                    23:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:62:DE:F2:B5:70:84:8E:C1:34:9B:E2:E5:E4:DC:03:CB:B8:FD
            X509v3 Authority Key Identifier:
                keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e6:a1:86:ca:fc:cd:d3:0e:10:f4:e8:51:74:b7:be:a4:8c:
         e5:bc:82:f1:9e:d4:dd:3f:48:84:f4:56:3f:85:2b:10:89:b3:
         18:f7:06:5e:15:e8:73:51:cd:20:2a:90:b0:ae:ed:8b:d5:7b:
         83:04:e9:8c:87:bd:53:3d:51:1e:a0:17:a4:c6:02:05:6d:a8:
         0f:bc:cf:36:af:3a:d7:09:f7:8f:6e:f1:a9:8d:7f:b7:a6:b0:
         7d:2f:98:32:44:64:94:cc:81:33:c6:f9:66:d8:b1:7f:e4:0c:
         91:95:5a:cf:75:7f:9a:5c:29:bf:23:b6:4b:4e:93:70:bc:8e:
         a0:fc:97:c3:6b:14:b5:7e:7f:2d:45:b4:3e:23:1e:46:dc:75:
         9a:74:16:47:43:81:49:1a:04:7a:86:2b:31:cc:c7:63:a6:52:
         99:75:49:00:f2:a1:09:d7:16:d6:dd:ee:39:ba:53:15:29:01:
         4a:db:c6:01:7f:64:75:c6:86:bb:4a:51:63:53:9f:d9:f9:c1:
         a3:e6:ee:23:07:22:c8:96:c7:7a:59:72:f1:60:3d:53:15:ec:
         a7:0c:43:7b:e2:fb:38:ce:b9:8e:57:f5:7c:29:7a:68:24:f8:
         8e:3c:d5:89:d0:26:01:c9:42:c2:09:20:5f:6c:c8:8a:5e:58:
         26:98:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:51 2026 by rpki-client