Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File:                     Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier:          tEVfIwkI+P+SqBSfJXTZaelEbdEh7Mgim9B6CXuPduI=
Subject key identifier:   19:6A:B0:C7:7B:FD:E1:44:F8:88:C3:D1:77:D2:5A:9B:62:14:2E:30
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer:       /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number:          46
Signing time:             Wed 25 Mar 2026 07:39:02 +0000
Manifest this update:     Wed 25 Mar 2026 07:39:01 +0000
Manifest next update:     Wed 01 Apr 2026 07:39:01 +0000
Files and hashes:         1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: brl1he5DGm7MqGiuvt28v/p1mgNQ2bzlg/6XbQHCYVw=)
                          2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
        Validity
            Not Before: Mar 25 07:39:01 2026 GMT
            Not After : Apr  1 07:39:01 2026 GMT
        Subject: CN=69c39116-9365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:b4:20:55:5c:7e:cc:ac:60:50:9b:79:71:
                    c1:89:50:6f:a8:e9:24:b1:03:0f:e1:ab:d9:28:81:
                    91:d8:b6:17:0b:c8:c9:53:42:4f:9c:57:62:d3:11:
                    43:9d:c8:38:1b:81:5b:54:06:2f:9a:f1:bf:4c:92:
                    5d:e1:c9:df:c1:50:c9:26:66:a8:10:af:5a:a1:68:
                    a2:9c:a5:30:25:52:2e:40:4f:7f:98:f7:71:74:9c:
                    c3:37:1d:a4:c7:36:d5:f5:52:25:13:2d:6f:d7:13:
                    9b:2e:30:8e:39:61:bb:6a:ce:29:46:d1:4e:31:c4:
                    80:66:39:6b:16:7e:80:64:0e:b2:71:7e:12:04:95:
                    e8:db:11:c2:4c:9c:dd:f3:ec:e0:5c:dd:af:0d:95:
                    16:6b:23:25:60:79:2e:72:f6:69:65:2b:4e:b4:ce:
                    06:92:02:84:cd:2a:ac:c4:64:40:f1:c8:43:7a:8d:
                    23:5d:ea:04:82:94:13:6b:1d:86:0b:22:11:bb:22:
                    6f:22:66:f5:88:36:b1:0e:46:37:49:15:0d:aa:f2:
                    91:21:65:94:dd:90:5a:8a:e9:f3:0f:31:0f:b1:44:
                    56:43:55:61:c3:d6:36:43:c6:8f:d9:ab:1a:45:68:
                    81:ea:90:47:f1:bd:38:87:73:ff:b2:7a:a6:18:cc:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6A:B0:C7:7B:FD:E1:44:F8:88:C3:D1:77:D2:5A:9B:62:14:2E:30
            X509v3 Authority Key Identifier:
                keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:74:97:93:ef:13:dd:24:8b:08:e0:08:9b:bf:93:2a:93:
         b1:a3:eb:d6:f7:a2:0c:bc:e1:fd:6f:08:48:2b:91:23:0f:c7:
         f9:2e:51:c1:89:4e:ff:d5:d1:4d:5d:30:4e:46:7c:b0:42:be:
         8b:8c:58:9c:be:d2:fb:72:84:9e:a6:1b:4d:dd:29:d6:cb:09:
         a1:ad:ec:37:40:1d:48:97:bd:26:c3:eb:f8:25:97:30:9f:ac:
         cc:e9:6e:42:16:ec:1a:90:1b:2e:63:34:28:cb:27:16:1d:39:
         c4:77:2c:52:95:4b:3a:11:a6:b0:c1:d4:8c:1f:aa:86:21:78:
         cb:af:e5:39:97:66:a6:62:9f:57:17:30:a3:3a:d0:9a:0f:4d:
         4f:25:c7:28:5b:37:ca:a3:75:2d:22:0c:03:0f:31:03:e8:32:
         1c:a4:7e:d5:5c:59:c6:7e:0b:06:22:73:c3:9b:ca:fa:a0:44:
         fa:c5:1a:1e:1e:c9:29:37:f1:20:8e:71:8b:19:c1:08:75:77:
         2d:90:0c:32:2f:f5:8b:87:3d:8b:d5:cf:0d:c0:06:ff:52:c7:
         79:9e:f0:d3:dd:9c:cf:e9:e4:c6:73:6d:fb:63:f0:a0:eb:04:
         0b:1b:77:9a:aa:a9:cc:6c:cc:12:0f:81:f2:dd:66:0b:ce:65:
         5d:89:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:37 2026 by rpki-client