Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
File:                     uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json)
Hash identifier:          8OZ6ghwfbfUqyX69Sk8hR6z7xW/9y6M3cjzRP1XsA/I=
Subject key identifier:   F7:1B:16:72:AB:EE:5B:BE:A1:10:6C:84:3F:C3:05:84:68:7E:5B:F5
Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8
Certificate issuer:       /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
Certificate serial:       03D9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
Manifest number:          03CE
Signing time:             Wed 25 Mar 2026 00:14:26 +0000
Manifest this update:     Wed 25 Mar 2026 00:14:26 +0000
Manifest next update:     Wed 01 Apr 2026 00:14:26 +0000
Files and hashes:         1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: FeKGzvdDrPpmNR8UryvzUfF/z0njPn7iGpy8tpAVHpc=)
                          2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: v0duyXrCqBjTImOPXg/jRu5Eda4FNDXKiiyW1J3+wcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
        Validity
            Not Before: Mar 25 00:14:26 2026 GMT
            Not After : Apr  1 00:14:26 2026 GMT
        Subject: CN=69c328e2-e6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:2e:b9:38:7f:cf:cf:ac:39:a8:fe:8e:b2:
                    af:a0:2c:8c:57:73:71:9f:36:f9:de:cf:b7:de:39:
                    ac:63:d6:5f:ba:f7:8f:31:35:ed:31:5f:97:4b:be:
                    50:7e:cd:37:b3:4f:4d:55:41:58:bf:c6:8e:ea:a8:
                    fb:57:af:ac:93:ff:09:41:e8:0e:ff:48:2e:64:9f:
                    cd:f2:1b:13:ba:d2:d4:5d:45:ee:58:c0:1c:fa:e9:
                    2a:b9:9e:99:6c:1d:9e:40:7a:2f:06:2e:3a:08:97:
                    73:6d:de:c1:6e:1e:cd:1c:01:b9:bb:c1:d1:e8:38:
                    db:21:16:c7:b5:db:a2:0d:18:3f:87:fd:37:4b:78:
                    c7:11:d2:97:49:51:ea:25:bc:24:39:af:f3:e5:d7:
                    71:88:28:32:0b:a9:43:5c:70:6f:07:92:42:34:77:
                    c0:c8:29:90:6d:27:66:2a:0c:d0:27:27:26:d1:1a:
                    d8:90:80:f2:2f:79:6f:77:51:22:21:bb:d5:40:cd:
                    08:3d:10:31:f0:c2:b5:30:cc:66:4b:4c:d2:ee:9d:
                    fc:b9:ac:ff:be:d3:e4:86:f8:2c:ae:6e:09:85:d4:
                    30:bd:7e:f1:60:db:95:5b:9e:e2:08:86:34:e2:fb:
                    27:f8:81:9f:e6:54:ed:96:be:48:40:eb:6e:74:04:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1B:16:72:AB:EE:5B:BE:A1:10:6C:84:3F:C3:05:84:68:7E:5B:F5
            X509v3 Authority Key Identifier:
                keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:dc:69:1e:4f:c2:73:32:b0:ee:34:95:28:27:dc:c9:00:
         6f:4c:ce:20:0f:35:d0:5c:df:d1:a3:2d:e2:10:36:d8:4f:d5:
         ee:92:a2:eb:7e:84:60:51:c6:f8:5d:f3:d7:30:6b:8c:a1:4e:
         5b:3e:ba:24:51:85:53:a2:7f:6c:c3:de:5f:b7:63:b4:16:1a:
         76:2c:f5:d4:97:be:5a:b1:58:4a:96:35:04:f4:a3:46:bc:42:
         33:ec:8b:cf:60:c1:04:ea:5c:10:82:2c:ce:f9:cb:bf:de:48:
         38:85:30:43:ba:9a:e1:1b:2e:74:f9:01:60:44:e6:69:00:27:
         35:d9:67:fa:60:6f:db:ef:15:6c:d5:24:a9:fa:0f:43:f6:81:
         75:ee:6a:bf:6b:8d:ea:03:71:8b:01:12:b5:8f:9b:28:e7:21:
         10:32:45:7b:f4:02:50:3a:e2:56:b1:7f:e6:25:d7:95:ac:46:
         d3:59:28:c1:89:ab:53:ce:75:92:44:2e:1a:31:54:a2:81:1f:
         2f:47:81:53:0b:25:c8:5b:6f:0d:f3:9f:92:64:ef:1b:57:f3:
         78:2e:17:87:78:49:b2:f9:97:a5:66:af:39:26:23:22:e2:7b:
         d6:1a:a3:c1:5d:ab:18:90:89:41:ec:77:e6:c7:e7:1e:ae:6d:
         e3:d2:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:57 2026 by rpki-client