Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
File:                     umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json)
Hash identifier:          qYVkf71ZG0/ftVVz8+B5Rm8LibWRrYjqt47TEM/FT/k=
Subject key identifier:   D6:3F:EE:B7:76:7A:81:EC:2E:42:50:1C:B4:40:F6:1F:60:31:53:CA
Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
Certificate issuer:       /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
Manifest number:          012D
Signing time:             Wed 25 Mar 2026 04:48:05 +0000
Manifest this update:     Wed 25 Mar 2026 04:48:05 +0000
Manifest next update:     Wed 01 Apr 2026 04:48:05 +0000
Files and hashes:         1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: +riXJ6r2liv8/+K8sHcJxzbtkKANIZdANbA/Y0uuMp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
                          rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
        Validity
            Not Before: Mar 25 04:48:05 2026 GMT
            Not After : Apr  1 04:48:05 2026 GMT
        Subject: CN=69c36905-1aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:a7:4c:9e:17:34:9a:37:97:e7:fd:3f:d0:
                    b1:9b:c9:54:e1:29:3a:b0:f6:1e:76:72:22:42:dc:
                    51:45:cf:b4:cb:b0:f8:52:5c:ef:24:38:28:e8:7e:
                    fa:de:a6:f4:1a:b9:86:e7:7b:a5:30:63:47:37:1a:
                    7c:99:1a:82:2c:5e:35:8f:fd:b6:24:9a:f0:c9:b2:
                    5a:18:bb:56:a0:38:dd:5a:e0:f2:c1:24:92:3b:26:
                    30:d6:75:d1:c8:66:6b:c6:e9:fb:ba:3e:4b:cc:e7:
                    60:f7:53:29:b0:70:36:17:ad:2e:92:59:bb:e3:7e:
                    28:da:75:00:33:cf:65:27:b3:e0:6b:f6:ec:9e:60:
                    45:e3:f6:0a:5e:51:d7:d4:1a:2d:85:b2:55:3b:6b:
                    43:23:df:d9:2d:1a:c6:da:17:96:c5:98:27:42:ba:
                    6e:8d:03:98:11:6a:51:98:b3:0a:16:c9:80:83:07:
                    13:d0:b8:68:97:55:e9:a3:b7:f8:c3:fe:e5:ee:be:
                    c6:ff:10:d1:81:1e:49:6a:6c:02:b6:cc:4d:1a:76:
                    69:33:3c:7b:66:d3:e6:c3:9e:b5:7b:64:e2:99:80:
                    72:29:2a:d9:7b:f0:e6:cc:83:e5:0f:9e:4e:36:77:
                    10:b2:72:a2:e1:b2:7c:71:a6:d9:a8:3a:d1:eb:95:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3F:EE:B7:76:7A:81:EC:2E:42:50:1C:B4:40:F6:1F:60:31:53:CA
            X509v3 Authority Key Identifier:
                keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:87:7f:fb:7d:d1:b6:5e:cd:d2:28:0c:40:04:6d:63:d5:32:
         87:c6:b7:60:9e:92:c3:d0:da:a8:b2:cf:fe:9e:9c:41:d1:18:
         7f:c1:97:5f:99:ad:f9:48:75:9e:ed:01:0a:17:3b:10:ca:1a:
         09:7b:9a:f8:91:51:00:d2:bc:74:86:01:e0:af:df:e0:2e:bb:
         b9:db:9d:fd:0a:f0:6b:d2:a8:7e:77:c1:97:70:49:b5:a8:af:
         d7:84:0d:6d:e6:0d:ae:7e:28:a7:47:21:9c:4a:db:73:12:69:
         1f:35:1e:bb:c7:0e:8a:33:ee:54:e6:3f:b5:85:49:6c:08:d4:
         6f:a9:55:d6:96:a7:0d:fe:11:3c:58:3a:94:7b:34:97:22:a1:
         11:b5:ba:2b:08:fd:2f:30:f9:97:bf:c6:ff:9d:74:88:17:7c:
         08:e5:55:37:6c:95:80:22:e6:0a:94:43:5f:56:a0:56:4f:f0:
         0a:67:e2:2a:91:7d:9f:51:45:b9:b6:39:95:b8:d5:28:5c:fd:
         65:d3:ec:6e:6a:3a:b5:24:35:ef:6b:8d:da:95:52:49:4b:37:
         e3:60:1a:37:94:1d:30:7f:86:5d:74:7c:8b:6c:17:28:09:eb:
         86:92:5a:61:90:fc:de:b4:56:bf:8b:76:9d:aa:f0:03:3d:82:
         06:ed:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:25 2026 by rpki-client