Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
File:                     uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json)
Hash identifier:          V2kAiJdz1K/cryRqB4lXBDKYHqlqmDv6mdmk1Sf9Qro=
Subject key identifier:   7A:6D:DE:F2:79:FC:10:59:5D:FB:B7:DC:9A:BC:DB:1D:8F:BD:00:29
Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
Certificate issuer:       /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Certificate serial:       1082
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
Manifest number:          1A34
Signing time:             Tue 24 Mar 2026 17:14:55 +0000
Manifest this update:     Tue 24 Mar 2026 17:14:55 +0000
Manifest next update:     Tue 31 Mar 2026 17:14:55 +0000
Files and hashes:         1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: tmvWRqtRp+/sv9LYTLPZFykT/rVbXHfmQzj9D833RKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4226 (0x1082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
        Validity
            Not Before: Mar 24 17:14:55 2026 GMT
            Not After : Mar 31 17:14:55 2026 GMT
        Subject: CN=69c2c68f-b551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:07:12:69:ae:ff:93:af:35:8b:8a:10:51:
                    1f:4b:b2:ec:c1:a9:ed:8c:be:00:e6:c5:16:d0:0a:
                    08:85:1d:4f:8b:09:2c:e2:46:07:ec:b7:4a:26:53:
                    f6:81:a6:0e:ec:77:2f:83:f5:ee:43:23:01:fd:b7:
                    e5:f7:7a:e9:44:3a:90:cb:c7:6a:5e:28:ca:5c:95:
                    bb:f7:cc:ed:0f:2c:84:f5:0e:23:80:af:48:5b:65:
                    f7:f7:34:ed:09:52:f4:7a:b0:b5:2c:49:2e:5f:44:
                    23:a5:44:23:cb:29:b9:bf:a1:71:d6:d0:e5:de:3f:
                    44:86:35:1b:cd:42:67:fe:74:4f:6f:35:a8:b7:31:
                    d1:5d:42:ba:16:7d:62:dd:d8:54:8a:9c:d0:91:2c:
                    03:7b:9b:e5:d1:bf:ea:42:ce:cd:34:15:20:c0:b7:
                    c8:c5:8c:b5:af:1f:83:e1:f5:ce:a0:8b:43:ab:2b:
                    15:6c:1a:02:d7:e9:2e:85:f4:05:f6:54:cb:a9:9e:
                    c0:a5:9f:03:90:76:06:03:d5:95:d2:77:6f:f9:95:
                    3a:3f:2e:63:18:ee:f5:44:ad:26:72:52:22:b0:c0:
                    22:be:77:8c:1b:5c:74:d0:5f:83:48:c9:f8:70:9a:
                    7e:ce:c4:a4:27:d6:66:c3:bf:e7:f1:75:2e:02:14:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:DE:F2:79:FC:10:59:5D:FB:B7:DC:9A:BC:DB:1D:8F:BD:00:29
            X509v3 Authority Key Identifier:
                keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:94:38:69:3a:f5:3c:6c:2e:0d:30:75:78:df:9f:29:38:f8:
         09:4c:4e:0f:32:a5:f9:65:1d:4f:e6:1e:06:4b:35:ae:4f:58:
         81:3b:79:cb:69:42:1f:a8:4e:d5:fb:ef:32:31:59:e6:bf:16:
         43:8d:2e:d0:55:fb:79:85:fd:ab:91:b5:40:ca:94:72:cf:1c:
         46:1c:44:72:de:a7:a1:77:75:80:14:1d:6e:40:55:88:a5:cc:
         8d:57:b1:1d:59:5f:07:4a:8f:32:9b:c3:9f:08:71:e8:4e:e8:
         62:4d:50:cd:76:01:5a:65:38:4e:f2:c8:ef:83:90:1f:06:f6:
         53:63:a7:62:43:52:f2:e4:63:3c:f6:cd:29:c6:e7:c5:e7:1e:
         05:fc:96:7f:8d:da:f2:a4:5a:8e:49:b6:fa:54:d4:77:dd:2b:
         25:8e:49:4b:c4:3e:c7:05:99:e6:23:73:35:7e:66:3d:b4:54:
         8e:28:8e:8f:23:89:60:cc:c2:8a:e1:dd:c1:74:b1:04:19:50:
         5c:ae:8d:20:84:21:02:75:69:ec:a7:59:3b:de:c6:b9:9c:1f:
         05:61:d5:66:8a:db:5e:f5:bb:54:80:68:c9:d9:88:2f:dd:86:
         09:26:74:6c:3a:1a:60:b1:3b:84:ff:9d:e9:91:24:0a:fe:01:
         7e:4c:43:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF
Q0IxMUZERDEwHhcNMjYwMzI0MTcxNDU1WhcNMjYwMzMxMTcxNDU1WjAYMRYwFAYD
VQQDEw02OWMyYzY4Zi1iNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DwHEmmu/5OvNYuKEFEfS7LswantjL4A5sUW0AoIhR1Piwks4kYH7LdKJlP2
gaYO7Hcvg/XuQyMB/bfl93rpRDqQy8dqXijKXJW798ztDyyE9Q4jgK9IW2X39zTt
CVL0erC1LEkuX0QjpUQjyym5v6Fx1tDl3j9EhjUbzUJn/nRPbzWotzHRXUK6Fn1i
3dhUipzQkSwDe5vl0b/qQs7NNBUgwLfIxYy1rx+D4fXOoItDqysVbBoC1+kuhfQF
9lTLqZ7ApZ8DkHYGA9WV0ndv+ZU6Py5jGO71RK0mclIisMAivneMG1x00F+DSMn4
cJp+zsSkJ9Zmw7/n8XUuAhRIqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpt3vJ5
/BBZXfu33Jq82x2PvQApMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD
N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj
dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA25Q4aTr1PGwuDTB1eN+fKTj4CUxODzKl+WUdT+YeBks1rk9YgTt5y2lCH6hO
1fvvMjFZ5r8WQ40u0FX7eYX9q5G1QMqUcs8cRhxEct6noXd1gBQdbkBViKXMjVex
HVlfB0qPMpvDnwhx6E7oYk1QzXYBWmU4TvLI74OQHwb2U2OnYkNS8uRjPPbNKcbn
xeceBfyWf43a8qRajkm2+lTUd90rJY5JS8Q+xwWZ5iNzNX5mPbRUjiiOjyOJYMzC
iuHdwXSxBBlQXK6NIIQhAnVp7KdZO97GuZwfBWHVZorbXvW7VIBoydmIL92GCSZ0
bDoaYLE7hP+d6ZEkCv4BfkxDTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:59 2026 by rpki-client