Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
File:                     uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json)
Hash identifier:          5U2zpTxLc6Ztp18CKHAhDmXeBrmzWTEbsDHAnKFsmHA=
Subject key identifier:   09:C7:40:3E:33:79:6D:03:C1:B3:12:BC:35:B0:73:9E:E3:22:11:F7
Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Certificate issuer:       /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
Manifest number:          0132
Signing time:             Wed 25 Mar 2026 04:40:43 +0000
Manifest this update:     Wed 25 Mar 2026 04:40:43 +0000
Manifest next update:     Wed 01 Apr 2026 04:40:43 +0000
Files and hashes:         1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: ogOwcfbudqHsKWeJFQyi4VWZxIvSCsL6dN+HlJuVfb4=)
                          2: 27995372566911EF9D53B517C4F9AE02.roa (hash: DeSR6K4bPK/5yIQimeD5bS9czMTEXaccQNS0PK5i+zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
        Validity
            Not Before: Mar 25 04:40:43 2026 GMT
            Not After : Apr  1 04:40:43 2026 GMT
        Subject: CN=69c3674b-b833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:b9:ac:95:9e:0a:9e:a6:ce:68:96:b1:83:
                    c5:00:87:e7:dd:4c:68:6f:95:b8:ec:e9:8f:87:58:
                    06:e4:b4:35:6f:00:b7:1e:c9:cc:f6:83:4a:0f:70:
                    55:d9:e2:89:0a:1e:13:29:7b:d9:52:52:ea:ce:2d:
                    ec:0e:29:08:73:75:41:17:ca:26:2a:62:09:3b:9d:
                    5e:bc:ca:75:a4:fb:9d:6d:6a:8e:1c:e7:16:b7:08:
                    3a:0a:b4:d7:5f:e6:6f:98:8c:b0:2f:f9:54:1c:f0:
                    67:44:b4:ea:8b:22:12:f5:41:67:b0:1f:d7:59:74:
                    db:37:38:8a:5f:25:f4:5b:16:73:ee:57:da:6d:86:
                    2b:d2:aa:37:f3:90:4f:43:a4:9a:7d:c7:7c:f7:1e:
                    bc:51:d6:2a:ef:2d:11:61:fc:3a:8b:17:50:2a:bc:
                    42:3b:84:bc:0d:52:1a:9d:65:04:a6:2e:dc:4d:9e:
                    cc:ba:c5:3f:8e:c0:5b:42:23:eb:84:bf:95:1b:7f:
                    98:d6:7e:4a:0f:8a:46:99:3c:19:79:ce:78:ba:c5:
                    0a:4e:52:53:30:92:2e:88:ce:49:2c:71:50:47:48:
                    c2:63:fe:1e:d4:66:79:ca:90:c2:b3:5e:10:23:cf:
                    5c:32:67:a6:1e:fd:d9:e4:d6:e4:cc:4d:eb:73:d6:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:40:3E:33:79:6D:03:C1:B3:12:BC:35:B0:73:9E:E3:22:11:F7
            X509v3 Authority Key Identifier:
                keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:fd:6f:f0:56:01:6a:8e:55:ca:91:30:69:2e:0e:ef:b0:
         0b:09:14:29:46:7b:a9:81:7f:82:29:8b:56:99:52:d4:76:c9:
         cc:85:15:68:9b:79:0e:70:ff:21:f4:92:e6:0d:8e:2c:db:3e:
         9b:39:d4:92:98:e7:e9:b7:00:3a:7d:8c:32:2f:86:54:57:3c:
         6c:33:3e:1f:1e:87:81:a3:08:87:dd:5b:40:1d:80:30:4d:0b:
         ec:28:cf:0b:07:67:ce:38:98:48:c8:8f:92:b6:0d:c1:95:5d:
         89:2a:c0:72:ad:4a:4c:2f:22:68:56:67:57:98:3b:91:6b:ca:
         19:64:3c:37:e4:ca:91:78:b0:8e:02:ac:b6:60:95:28:09:d5:
         6c:e6:b8:a2:18:ef:75:88:81:94:7b:e6:9c:2c:d9:c6:bf:b2:
         81:0f:dd:33:af:76:e0:0c:11:dc:39:ca:d3:b3:55:31:73:6a:
         bc:89:57:fc:c9:7e:c7:8e:c1:17:bd:49:ec:1f:69:52:8c:ff:
         81:7d:17:e3:77:f8:3e:27:98:f3:23:24:49:29:de:95:e5:67:
         b4:f9:22:84:10:b1:26:c1:03:3d:23:f6:2c:b1:3f:5e:78:20:
         d6:b2:31:c7:22:70:7e:94:a1:8a:c5:7e:85:b3:50:0f:ad:4d:
         13:79:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:14:43 2026 by rpki-client