Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
File:                     ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json)
Hash identifier:          ZQMiuU/BN/VZdYz3BqDVp77iPcpwc/AnlfbdvZZ2Dks=
Subject key identifier:   C0:96:2F:C1:9A:61:93:E7:F2:A2:5C:BD:83:8D:8E:68:1A:A4:C0:3E
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Certificate issuer:       /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial:       0B01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
Manifest number:          0AF8
Signing time:             Tue 24 Mar 2026 19:09:40 +0000
Manifest this update:     Tue 24 Mar 2026 19:09:39 +0000
Manifest next update:     Tue 31 Mar 2026 19:09:39 +0000
Files and hashes:         1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: CUB3UJILYWNTL2OCPAwNlJNYLWKtZVtI2I3tDsd9yQc=)
                          2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: R1rlYcsCi8CSVIACxllh01Uvohkay9HT1gj9YqXkxQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2817 (0xb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D
        Validity
            Not Before: Mar 24 19:09:39 2026 GMT
            Not After : Mar 31 19:09:39 2026 GMT
        Subject: CN=69c2e173-0f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:76:95:97:60:d0:75:34:5e:81:5e:35:d8:
                    fa:87:dc:53:2f:2b:96:33:f3:33:ac:f2:e9:49:ef:
                    71:23:a4:68:63:00:62:ce:6b:e7:5a:ab:68:b3:90:
                    c0:74:0f:e8:78:e1:b1:f6:0d:3f:59:3f:95:b3:b7:
                    3c:44:50:53:94:68:d0:a9:69:cd:6d:83:62:a2:a3:
                    aa:2d:c5:eb:c2:e2:c5:3b:7d:97:ea:50:a9:f0:0e:
                    fe:1f:70:b9:cd:ab:7c:a9:ec:ef:39:b7:22:37:32:
                    1b:f8:2c:6b:7b:c7:41:b4:cf:e1:f7:a3:b2:2e:20:
                    dc:6b:59:d8:a1:1a:87:b0:e7:5b:68:62:20:18:01:
                    88:b1:d4:5d:f2:e6:01:0e:d3:32:ef:a1:39:62:ef:
                    e1:8f:f6:5e:68:5f:f4:39:fa:77:a9:33:5a:52:32:
                    9e:18:f5:c7:df:67:bb:c9:a9:9c:fa:76:10:f6:20:
                    db:1b:bd:0b:86:98:aa:65:ce:e9:91:0d:5b:9c:8b:
                    6d:60:a1:8a:c2:13:cf:13:aa:96:14:ad:8a:40:7b:
                    6b:b9:c3:89:6c:f9:ef:12:02:8b:1b:2a:6b:2f:a1:
                    bc:16:9d:13:f0:03:fe:e6:3c:82:c6:ef:dc:2d:17:
                    5a:b2:ca:53:28:cb:91:96:6f:b0:79:af:36:8d:01:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:2F:C1:9A:61:93:E7:F2:A2:5C:BD:83:8D:8E:68:1A:A4:C0:3E
            X509v3 Authority Key Identifier:
                keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:42:3b:8a:6d:53:7e:55:77:ff:cc:f0:b6:c3:9a:8b:1c:dd:
         df:24:8c:e0:63:02:6c:98:a4:61:bd:6d:7f:0c:46:0f:86:80:
         ff:6d:6a:64:64:34:39:92:76:d1:32:dc:93:fb:0b:6f:79:fa:
         f6:50:e4:df:81:e6:11:04:02:fb:79:53:1d:5a:2c:94:e1:fb:
         6d:94:37:43:f5:73:43:95:1d:00:e6:2e:a1:84:a8:ce:db:02:
         42:05:3e:9d:55:15:ca:b0:49:93:71:cf:b5:83:50:37:82:0b:
         11:70:d3:a5:a8:10:3e:55:88:10:6f:23:81:16:32:a9:fe:fd:
         b0:50:87:e6:e2:9f:5c:99:9d:7d:5d:ff:4e:9e:59:3c:9a:91:
         be:37:17:78:fb:2e:f2:86:49:00:c3:f2:03:24:d5:e6:0c:25:
         7e:9f:31:0e:64:7e:5b:7a:60:50:57:5b:cc:2a:48:c2:88:4b:
         18:90:00:81:22:3c:72:52:11:e2:94:7e:ae:40:18:59:d6:99:
         22:62:25:73:78:8a:0d:8c:b8:76:e5:f3:6d:4a:3a:fe:e7:18:
         3f:e8:2f:b2:6c:13:1d:6f:30:70:09:9e:e0:24:5a:9d:11:7a:
         55:94:98:04:95:7d:e7:c1:e2:fc:2d:df:1e:54:87:b0:2e:57:
         2a:f2:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:33 2026 by rpki-client