Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
File:                     UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft (raw, json)
Hash identifier:          n+Zb732LaZzllDbrevoCn1fqtzsaA7V+jdOLwqkhHGw=
Subject key identifier:   96:2C:8C:D1:5E:C1:04:2C:B4:C2:D9:14:8D:91:BD:77:79:DB:0B:23
Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67
Certificate issuer:       /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
Manifest number:          06F7
Signing time:             Tue 24 Mar 2026 21:46:06 +0000
Manifest this update:     Tue 24 Mar 2026 21:46:06 +0000
Manifest next update:     Tue 31 Mar 2026 21:46:06 +0000
Files and hashes:         1: UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl (hash: L7e9X71qh1hb+sO50nzmBg63L7uBp0zk84rZ3NWbiEo=)
                          2: C3FEC56C855711EB871D267FC4F9AE02.roa (hash: g/1Fb0+415aOuzRJPo8ER5eYukpXTWcbaMdvlH/TvCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl
                          rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911902E, serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
        Validity
            Not Before: Mar 24 21:46:06 2026 GMT
            Not After : Mar 31 21:46:06 2026 GMT
        Subject: CN=69c3061e-7702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:d3:ab:43:fc:fd:46:dc:55:cb:33:94:30:
                    3f:a6:62:4f:e7:17:c6:3b:43:1c:5a:2b:57:f3:4c:
                    b2:3d:66:b7:c6:f0:33:e1:0c:48:50:bf:17:a0:6e:
                    66:41:3a:ca:da:8c:7c:6e:f4:25:6a:8d:26:55:39:
                    c4:4a:4d:95:74:10:0a:cf:c4:20:c1:3e:cb:fc:b2:
                    df:8f:d5:43:11:23:70:2c:59:63:88:6e:4e:84:53:
                    22:20:01:54:c5:24:01:6f:20:ef:bd:bc:64:ae:56:
                    80:37:95:cc:24:bc:5d:ff:3a:d6:2e:6d:2b:27:d2:
                    90:ce:6f:06:0b:d7:5b:6b:83:37:bb:b3:a5:f2:7f:
                    21:ee:d6:7f:35:d6:fd:d5:7d:8d:d6:b7:a1:45:e9:
                    ec:a0:3a:58:a0:f9:54:3f:ad:5c:60:ac:74:bb:fb:
                    81:21:d7:7b:14:d7:4b:15:f4:22:61:a2:66:3d:43:
                    d6:5e:0a:c0:09:f5:77:00:b2:02:5a:7e:08:2c:36:
                    05:87:ab:b0:31:d7:38:d6:37:65:a5:26:20:75:a4:
                    64:41:95:df:c2:30:e7:b6:27:ae:68:97:00:e0:9e:
                    ae:eb:aa:2d:22:ff:f7:16:d4:a0:bd:4b:b1:c6:78:
                    23:fa:bb:25:af:f4:3d:1c:15:31:89:f4:ff:58:60:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:8C:D1:5E:C1:04:2C:B4:C2:D9:14:8D:91:BD:77:79:DB:0B:23
            X509v3 Authority Key Identifier:
                keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6a:0b:1b:89:6e:3d:0c:62:33:e7:eb:f9:62:73:62:a8:be:
         e1:88:ea:16:15:ee:af:bf:c0:1f:2e:82:bf:1d:64:91:09:ad:
         2d:e5:3a:29:73:05:ed:61:70:61:c6:40:ad:6d:54:f9:62:d2:
         d6:24:3d:19:23:13:81:7b:39:97:f6:1d:bc:98:1d:e4:9f:65:
         cd:50:65:af:71:f5:f3:24:4f:f4:b9:f4:ce:a5:1e:ae:58:98:
         54:61:16:3c:4d:fc:9d:32:ee:1a:f7:03:e1:3d:bf:0e:88:03:
         70:78:9f:63:06:f3:87:cc:c9:f5:41:41:fd:3b:3d:0c:5b:fc:
         06:f5:6d:4b:76:43:cf:61:d7:07:67:c1:3e:07:24:b7:bd:4f:
         e5:ca:fc:45:c1:ac:d6:87:07:90:ae:dc:52:1c:7b:7d:7c:b4:
         54:21:98:e2:76:64:09:06:f3:1d:d9:75:bd:1f:2d:ec:98:23:
         2b:77:99:b9:a3:a3:b5:f7:39:37:5c:ad:6f:bc:7f:23:d5:f8:
         3a:c5:ae:95:e1:b9:89:71:b5:b5:ee:5f:c8:c4:b1:5b:98:13:
         60:bd:b7:73:11:73:c0:ab:fb:29:8e:d0:04:7f:3a:e8:00:38:
         b5:16:ce:1c:f8:b2:4f:03:65:d9:8f:75:24:da:81:3a:ac:f1:
         80:70:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:15 2026 by rpki-client