Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
File:                     UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json)
Hash identifier:          QVbvjJwB5juGZMM9/hqVYRDzS2M4Wu6Q53jyUaJs5ro=
Subject key identifier:   8A:95:86:97:CE:68:C4:27:CD:FD:84:82:E7:FC:80:79:E8:74:48:91
Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1
Certificate issuer:       /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
Certificate serial:       0C91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
Manifest number:          0C86
Signing time:             Thu 26 Mar 2026 18:29:41 +0000
Manifest this update:     Thu 26 Mar 2026 18:29:41 +0000
Manifest next update:     Thu 02 Apr 2026 18:29:41 +0000
Files and hashes:         1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: Ck/1oIayDoZUppE4D4a7ap20BE7gehyxdXaRwYEYNM0=)
                          2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: xp5zsEzN7zQEFnga7J3pKyc5OlYecxV9fEuTdBE9xxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl
                          rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
        Validity
            Not Before: Mar 26 18:29:41 2026 GMT
            Not After : Apr  2 18:29:41 2026 GMT
        Subject: CN=69c57b15-1881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:d5:cb:09:af:0f:22:a1:4f:26:a7:f7:d0:
                    7e:be:10:b3:02:62:a0:9e:c6:08:77:88:0f:b7:20:
                    f4:36:e3:fd:dd:0a:14:df:69:21:04:39:8d:01:83:
                    23:2b:c1:d8:b4:14:7f:ee:8e:93:00:11:6f:c0:1d:
                    aa:a9:ca:41:c5:39:74:0d:14:53:5c:21:68:2e:89:
                    ea:53:24:c2:c4:0f:7e:cf:2d:1a:19:5e:4d:0d:63:
                    4c:42:34:90:a1:7b:c0:c9:38:7d:c4:28:c1:d7:37:
                    0c:9f:f4:57:3a:2b:43:00:02:52:b1:d4:d4:db:64:
                    b0:42:1b:7c:90:9b:fc:85:bd:a0:46:cb:40:d4:a5:
                    7d:1e:97:02:09:6a:e2:c9:a8:ea:24:25:ad:b9:3d:
                    99:3f:0d:e5:35:e1:f3:c3:66:77:a4:ef:5a:36:c2:
                    d1:fb:93:52:b1:34:08:a4:68:9a:98:1e:77:dd:e5:
                    8b:b2:a9:80:5a:41:2d:62:de:39:29:f9:d4:2b:72:
                    15:16:7b:5b:3f:33:81:c7:3f:cd:65:1d:aa:4f:6f:
                    d4:50:84:16:63:9a:d1:d2:56:07:79:5d:2c:bc:af:
                    7e:0b:3a:ad:4f:01:93:58:65:20:c6:15:cd:07:30:
                    fe:0a:e5:5e:be:77:4c:81:be:2f:5c:30:56:51:ec:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:86:97:CE:68:C4:27:CD:FD:84:82:E7:FC:80:79:E8:74:48:91
            X509v3 Authority Key Identifier:
                keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:89:00:88:6b:16:6f:e6:a5:26:a4:3e:91:98:53:9b:01:0a:
         76:64:15:38:69:8f:4c:83:17:9e:e3:c1:97:d9:21:46:f5:0a:
         a2:d7:f0:6c:09:5a:eb:47:83:5f:fe:8c:33:6a:a9:8c:d7:34:
         af:02:4a:53:74:4b:f4:10:09:bd:a7:5b:0c:3c:49:3d:62:9b:
         a2:08:e7:03:38:22:3a:d6:f2:5f:c2:52:6d:13:73:d6:78:1f:
         28:96:a2:82:4d:ed:a2:35:62:36:b4:73:96:3e:70:4a:4d:95:
         e9:ef:02:1b:d1:df:14:6c:c8:f1:ac:d5:d4:40:64:b3:6d:01:
         1e:70:ec:74:de:ce:5f:3a:9c:4d:2c:ed:9b:a0:ac:36:8a:87:
         8e:32:79:5d:ca:01:f5:11:98:93:29:14:5a:5a:72:a4:33:53:
         76:8a:61:79:64:f5:01:c4:73:0a:a7:f1:48:43:9a:68:6b:d6:
         c9:e3:fa:87:83:ca:ea:40:06:02:86:dc:52:b9:43:16:6e:53:
         a5:8c:e1:4f:d9:26:b9:32:4f:06:2d:0f:a0:2a:b2:dc:6c:3b:
         23:1f:28:32:fe:cf:22:a1:56:64:72:fd:06:e5:08:ff:dc:32:
         f3:0b:81:7a:d8:5a:16:6e:1d:c6:46:64:3a:22:95:8d:b3:39:
         b2:0e:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:42 2026 by rpki-client