Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
File:                     Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json)
Hash identifier:          HdutsWrqeiBFyBGCA6TTLVU4wNhGqp8BZoh492/fc9k=
Subject key identifier:   E6:0D:3C:1E:62:D2:A2:14:2F:A5:B7:DF:C6:8B:55:36:08:35:17:13
Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
Certificate issuer:       /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
Certificate serial:       027D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
Manifest number:          026F
Signing time:             Wed 25 Mar 2026 01:33:56 +0000
Manifest this update:     Wed 25 Mar 2026 01:33:55 +0000
Manifest next update:     Wed 01 Apr 2026 01:33:55 +0000
Files and hashes:         1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: wRxL3G7K06FK3R3eF8wMwA76nuymrk4YWf03KD1IbC8=)
                          2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: Qu2Z6Dmd9/Rzo8XDYKdFCYmaMNlzbJyV+6G2m4jbJmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl
                          rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
        Validity
            Not Before: Mar 25 01:33:55 2026 GMT
            Not After : Apr  1 01:33:55 2026 GMT
        Subject: CN=69c33b84-39bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:af:2c:bc:f1:1b:c9:02:ed:19:ab:89:45:
                    7c:e2:a5:df:01:db:cc:b2:e7:7e:be:0b:fe:f2:49:
                    19:83:d7:51:b4:00:d3:1f:a5:36:53:2b:cb:04:b9:
                    19:ba:d9:e3:0e:2f:13:ba:4d:61:c6:b3:fb:cc:6a:
                    85:6e:f9:08:97:46:11:7c:8a:42:1d:c0:42:ec:27:
                    37:ce:6f:36:2e:fd:74:1a:f6:e6:89:32:76:4f:3d:
                    fe:26:b8:03:91:e7:f3:85:d1:79:f1:85:8b:f5:d0:
                    18:f0:9d:50:0c:a8:df:38:07:1e:8a:25:37:54:09:
                    5c:a2:24:ed:a9:6d:77:0e:c8:ae:b1:d8:da:0a:24:
                    4b:c8:ac:1f:07:b9:f5:81:45:f9:59:3a:4d:0c:49:
                    aa:71:76:0e:ac:16:e3:f6:ce:43:ef:2a:55:fb:00:
                    17:9d:03:6d:01:37:44:fd:36:cc:db:7d:f8:d3:8a:
                    ab:af:d6:14:16:5b:93:c6:8e:8d:77:ef:b4:fc:ed:
                    77:d5:f6:fc:05:5f:30:80:c0:3d:0c:ef:6b:e0:95:
                    15:c8:72:aa:89:2b:71:61:c0:a0:dc:5a:c4:f9:cc:
                    51:62:86:2f:f3:a8:d3:35:5f:a9:ee:6d:26:f0:95:
                    10:4c:f1:1a:66:4b:22:e6:56:85:f4:ab:1a:b3:a8:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0D:3C:1E:62:D2:A2:14:2F:A5:B7:DF:C6:8B:55:36:08:35:17:13
            X509v3 Authority Key Identifier:
                keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:88:6a:eb:fd:71:1b:9d:76:40:e2:3d:6f:f6:7a:f6:5a:32:
         8b:75:37:0e:89:50:fb:ae:8c:1a:0f:a4:2b:41:c9:84:ca:9c:
         43:d0:da:40:db:bc:6f:55:ee:de:c4:86:08:0e:12:ad:d1:b2:
         7d:62:68:d0:cc:19:15:18:9b:79:9f:9c:da:df:a1:09:a7:56:
         1c:b8:25:80:5c:0d:75:84:75:14:7f:94:9c:72:49:b2:c1:58:
         26:fb:6f:d8:04:d7:2b:42:33:c9:c4:b3:6a:6d:5a:b1:a1:ce:
         63:8a:95:f0:98:2a:d9:a2:59:82:24:f6:2b:89:8f:af:17:d7:
         e8:f9:b2:24:9a:01:00:58:d0:3c:9c:c4:67:ad:ef:49:0e:c8:
         f5:89:dc:61:90:32:f1:32:06:09:e5:09:a2:a7:2a:42:4e:7d:
         02:7c:56:57:89:b5:01:d3:0a:46:7d:01:34:b9:fa:f6:0c:45:
         af:e6:df:e5:be:c2:a5:14:af:cd:f2:cf:6b:39:1e:c6:f0:29:
         35:e5:89:c5:7b:a7:a1:26:39:b4:65:7c:df:42:6d:c5:df:33:
         3a:78:97:7d:ce:51:24:fa:ec:b1:fe:72:57:6a:e7:15:6b:a1:
         8a:14:4f:95:bb:80:b4:c7:9d:8f:bc:0b:eb:81:49:37:59:df:
         01:c7:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:20 2026 by rpki-client