Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          6XhJZ1Ghjpp8LlUbRPyiVCtOF+10u4CYqgmUaMchdU4=
Subject key identifier:   C4:46:2F:9A:F7:F2:14:B1:41:F0:15:5F:A1:D5:A5:2B:C0:8C:2D:D5
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       0984
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          0984
Signing time:             Thu 26 Mar 2026 02:44:45 +0000
Manifest this update:     Thu 26 Mar 2026 02:44:44 +0000
Manifest next update:     Thu 02 Apr 2026 02:44:44 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: VKwdl1AsudyWOwXi91X8O7WLu5sOZVeEuAAScniVXA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 02:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436 (0x984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Mar 26 02:44:44 2026 GMT
            Not After : Apr  2 02:44:44 2026 GMT
        Subject: CN=69c49d9d-294d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:49:31:36:0a:67:2a:d5:14:56:e6:5c:29:
                    22:53:b5:d4:03:db:2a:ef:78:8e:58:66:e2:f2:cd:
                    11:ac:bd:08:ef:08:2a:f5:5d:0d:36:3e:e6:78:a7:
                    d6:c7:ed:48:29:c4:18:f0:13:c9:ba:f9:2d:9d:06:
                    42:25:b9:65:3d:f0:35:e3:a3:03:fa:ed:86:f2:4b:
                    f4:e0:94:27:83:ca:88:66:49:d4:92:de:8d:ac:9f:
                    b0:f2:18:dc:9e:8d:39:f7:b3:36:c0:91:e7:4e:e5:
                    75:a2:d7:88:9c:ae:55:fc:b6:58:31:60:e5:15:f4:
                    54:af:78:32:0e:2a:cd:a9:08:f3:df:06:61:f1:11:
                    14:f9:76:cc:64:d1:66:c7:34:c0:71:ac:7d:c6:01:
                    a4:84:40:79:92:16:fa:e2:0a:e3:ed:df:31:d9:9b:
                    8d:d9:3c:2d:92:e4:22:8f:98:6c:aa:54:32:76:32:
                    a4:05:ab:c0:fd:e7:d6:bd:d3:73:51:6a:db:61:4c:
                    7a:9b:3d:2b:91:2a:0f:06:0d:ec:23:9e:93:6e:4b:
                    36:d2:5f:45:10:ca:2d:af:32:b9:8e:80:d2:bd:61:
                    3b:20:58:3e:03:e6:46:58:df:42:c0:de:cc:83:63:
                    82:50:d2:27:50:65:97:e3:22:5f:db:01:dd:a8:05:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:46:2F:9A:F7:F2:14:B1:41:F0:15:5F:A1:D5:A5:2B:C0:8C:2D:D5
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:66:16:c6:de:44:68:c8:03:7a:4e:3f:f9:60:46:a3:2a:09:
         02:1a:94:4f:06:9b:ba:c9:a9:82:f4:fe:57:2d:a4:e5:0f:c0:
         14:2e:02:6d:d2:22:c5:8f:92:d9:09:db:12:af:32:59:3e:ad:
         20:3e:86:18:a5:6f:5d:73:a7:51:38:fc:c7:c2:99:24:eb:69:
         52:26:ed:22:ba:ad:2e:1c:2a:03:f0:4b:6a:0c:fe:0d:27:c7:
         6e:49:83:d5:e6:71:d1:2e:7b:c3:02:fe:cd:67:ba:64:06:12:
         d9:d7:0c:9f:cb:6d:69:0d:e8:ef:15:e1:47:8e:91:07:6d:7c:
         04:19:33:db:72:40:3e:fb:b2:1c:2a:b8:13:fd:db:1d:2a:10:
         bb:c6:4d:7b:0a:54:f6:30:4f:0b:d8:ea:db:f9:a7:4f:75:f4:
         81:9e:c9:05:a8:f7:50:cf:a7:cf:68:f2:94:e9:ca:a1:b1:ab:
         93:4c:3b:cf:71:85:84:32:10:14:da:73:dc:9f:cf:db:62:52:
         98:ae:2d:40:9a:6a:fd:d7:9b:29:68:2c:1a:2c:20:c9:52:31:
         fe:b8:4f:ad:66:97:c6:0a:02:1f:04:fb:4f:ca:b2:a2:91:2f:
         b7:ee:1e:5e:a7:34:f2:b7:05:6a:9e:bc:53:98:0b:27:75:1b:
         3f:ed:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:38 2026 by rpki-client