Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
File:                     UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json)
Hash identifier:          TwYYiOU0dMR3ag0H215xC8m0PvY/uWAwbkAy8y2e7RY=
Subject key identifier:   19:CC:42:C3:54:C9:20:88:4E:EF:C3:D7:37:73:EF:78:67:AD:69:8E
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
Manifest number:          015E
Signing time:             Wed 25 Mar 2026 04:14:17 +0000
Manifest this update:     Wed 25 Mar 2026 04:14:16 +0000
Manifest next update:     Wed 01 Apr 2026 04:14:16 +0000
Files and hashes:         1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: yHtVEfx3LVkLJryV3pUqJ0J2DZhokaj9kNSw66X5tPI=)
                          2: C23053B019A911EF97366417C4F9AE02.roa (hash: oIgJzpLs8FeOdJlyApHVC57ihP+eNhUbmgmPUwprt54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Mar 25 04:14:16 2026 GMT
            Not After : Apr  1 04:14:16 2026 GMT
        Subject: CN=69c36119-42a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:97:17:87:8e:57:9a:53:54:f0:a1:dd:2d:
                    ab:ee:a5:7f:24:cc:88:81:7d:8b:a6:19:d1:12:82:
                    15:39:c8:62:7e:d4:a0:d0:21:2a:89:e4:c7:cf:b7:
                    84:a1:a5:de:e8:a3:1f:ce:69:dc:34:6e:1f:27:c8:
                    1b:2d:c1:67:02:0b:f8:74:a9:5c:e9:7e:da:5a:68:
                    a9:5a:8c:48:87:ce:cd:89:09:7a:5f:13:40:4c:e3:
                    42:88:10:94:ac:73:6f:87:db:b1:66:f8:50:93:c9:
                    b7:75:81:39:bc:c0:3b:76:9f:3c:e0:d5:d3:e1:b1:
                    1d:5b:34:26:90:17:d5:21:69:44:98:c5:53:66:a6:
                    a0:d8:22:06:99:51:19:34:55:a3:92:0c:c7:81:d2:
                    9b:44:b9:c1:39:77:d4:79:d8:e3:21:a2:4e:14:da:
                    a0:16:c4:6d:d1:6d:b3:be:10:9e:3c:ac:1d:cd:6c:
                    d1:68:76:4e:b0:a0:2d:93:b9:84:2a:6c:9f:81:1a:
                    95:cf:44:81:d6:a4:a8:85:f2:1d:61:06:46:5b:9b:
                    3f:d2:98:f1:36:dc:de:ff:c3:c5:ba:ad:fc:43:ff:
                    a6:a7:30:e4:64:eb:e5:b2:1d:05:18:a0:4d:9b:30:
                    8f:73:1d:36:73:a3:e2:b1:d8:c6:e3:27:3e:62:36:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CC:42:C3:54:C9:20:88:4E:EF:C3:D7:37:73:EF:78:67:AD:69:8E
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:06:98:f3:91:fc:ec:ef:e5:6c:0b:45:fe:ef:80:83:70:
         08:d6:27:3e:4d:8d:41:c9:68:0d:f6:e4:59:39:17:dc:c5:ad:
         cc:7b:72:20:1c:58:8d:09:ae:a4:2e:c6:2d:61:53:51:ca:10:
         9d:0b:9a:ca:4d:6f:27:ef:80:bb:8a:d0:1d:b6:61:57:71:3d:
         a7:2e:99:d1:e8:64:82:ca:d5:69:37:17:c7:e3:13:bd:ff:4b:
         b2:de:e4:f6:96:83:03:b3:e8:f5:58:01:28:80:9e:80:f2:40:
         d8:43:40:18:30:ec:e3:69:80:93:a9:05:b5:9a:4a:72:53:81:
         13:82:47:68:1f:01:ec:c6:db:d6:7b:05:9f:77:52:14:c1:76:
         84:1f:9d:ae:77:f3:8e:5b:3d:95:52:63:00:3a:7d:65:19:b2:
         ba:77:5d:91:3e:4d:ec:40:3d:4d:f6:bd:c8:7e:75:2d:a8:4d:
         90:ce:05:89:a4:b1:a2:07:f5:33:93:43:55:0b:aa:b5:a5:fc:
         80:e3:60:78:c8:51:c9:73:a0:f4:ac:a4:05:fc:3c:4b:c6:07:
         78:f0:de:81:d1:3a:d1:3c:97:92:15:74:cf:86:4d:5c:19:3a:
         da:95:cc:29:5a:a4:94:14:a9:3b:9f:3e:7a:c6:0c:88:bc:a5:
         9f:66:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:58 2026 by rpki-client