Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File:                     UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier:          MUGJuru05i/aRmGpu+BnTqbZ5ECayeg+3C1qrXHBR+c=
Subject key identifier:   91:2F:FE:C0:9B:F8:79:93:3F:A4:49:92:2B:61:BB:4D:E7:E0:75:7E
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       3125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number:          310B
Signing time:             Thu 26 Mar 2026 15:27:30 +0000
Manifest this update:     Thu 26 Mar 2026 15:27:29 +0000
Manifest next update:     Thu 02 Apr 2026 15:27:29 +0000
Files and hashes:         1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: METLrgAVC4MebwNTVcEdFNNr8ujS8tshnYZ5GzLC2D4=)
                          2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=)
                          3: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=)
                          4: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: q4IKP4eGJJ0oDgbAG4b8WsxXK5K7aSMyKfuwqjPJmm4=)
                          5: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: 6OqlVcYAqCDhteCgFv3UWoxb9hgSROAufjQ6ZVdl01Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12581 (0x3125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Mar 26 15:27:29 2026 GMT
            Not After : Apr  2 15:27:29 2026 GMT
        Subject: CN=69c55061-6d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:69:31:49:42:af:0f:5a:21:02:da:ba:02:
                    91:3a:a4:40:c1:ca:8c:0c:c8:25:9a:53:64:87:8b:
                    d8:eb:ed:ee:99:58:8f:e7:16:b9:23:1e:17:97:70:
                    78:fa:32:38:17:5d:7f:6f:3a:cc:c5:27:c4:19:e6:
                    a9:2b:13:83:67:9b:c4:2f:e2:61:50:9d:97:25:c3:
                    9c:e6:83:92:02:ab:6a:b6:20:49:d9:70:83:5c:54:
                    7f:0f:92:1f:26:c7:cb:60:06:16:9b:b8:1d:40:b1:
                    70:31:6e:7c:98:0b:5f:b2:4a:47:03:d7:8e:38:63:
                    5a:83:cd:a1:1f:7e:e0:6a:a1:6d:86:e1:72:ad:2a:
                    a2:eb:68:8c:4b:1f:8e:f6:16:72:8a:2f:6f:74:0c:
                    0d:d1:6d:2b:b5:12:94:5d:e8:92:6f:36:d2:2e:1c:
                    a6:02:57:e4:56:8a:75:8e:f3:a0:54:0e:8b:2b:c7:
                    2b:7c:9a:09:05:22:aa:6f:23:b6:14:a6:7b:9e:ef:
                    1d:c2:6e:36:87:60:db:a7:7c:d4:0f:c8:46:7f:01:
                    1a:f1:d6:8c:4b:65:99:37:23:72:50:46:90:20:f0:
                    ee:bf:fb:5e:5b:13:2d:51:c6:db:eb:a7:2d:ae:5f:
                    3e:f7:6f:97:52:5a:ae:f0:0c:06:e2:55:ae:ff:58:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:FE:C0:9B:F8:79:93:3F:A4:49:92:2B:61:BB:4D:E7:E0:75:7E
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:71:94:9a:3a:fb:8f:e3:f4:5d:78:e1:40:6e:9c:df:d6:2e:
         6b:57:54:a2:c6:d1:cb:21:13:53:51:11:d0:d8:35:d5:24:41:
         49:b2:8b:28:9e:81:15:1a:65:01:3c:a8:31:6c:73:68:f8:2e:
         63:0d:bd:1f:00:e9:41:ab:7f:73:97:09:e6:b6:90:d7:3c:53:
         e7:64:54:d9:a4:d2:e5:00:f2:46:87:82:22:2f:72:8c:5e:7a:
         d1:c4:9e:f1:5a:f6:24:73:8e:2b:11:6c:d4:96:ca:dd:56:20:
         85:0a:cb:d2:2b:bd:9e:79:b7:0d:30:9a:98:58:d6:7f:15:0f:
         28:37:d1:2e:12:3e:8c:ae:d8:d2:b6:84:1e:54:7f:c1:2e:2f:
         fc:49:87:bd:8e:96:18:2a:1c:6c:06:e5:5e:18:da:ea:19:bd:
         fd:fd:65:52:58:47:ef:03:4d:48:1d:0f:a1:b1:1a:a1:13:60:
         8b:a4:3b:1f:cc:6f:ee:92:ba:56:b7:76:f8:4e:4d:0e:84:27:
         a1:74:99:2e:44:55:95:d9:fa:5e:27:b1:fc:7c:b7:26:98:42:
         3d:a5:9c:07:2e:b1:86:73:8b:81:0c:34:ab:59:b1:76:f3:39:
         f5:65:d1:97:1c:35:58:14:a8:2f:71:2f:fe:63:a5:66:f8:41:
         0f:87:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:05 2026 by rpki-client