Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File:                     uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier:          el2q09SzOaaO2dTecu7WEXqGE75kR8vBHF3LDwfJnYI=
Subject key identifier:   32:D3:F3:04:6B:DE:38:9A:CF:00:C5:36:EF:55:0E:82:DF:7D:93:04
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer:       /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number:          C0
Signing time:             Wed 25 Mar 2026 06:11:50 +0000
Manifest this update:     Wed 25 Mar 2026 06:11:49 +0000
Manifest next update:     Wed 01 Apr 2026 06:11:49 +0000
Files and hashes:         1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: Rfxd4yegymxzN4SDHn/8Cm2iVz1yiTqZ3uTUJST0X0Q=)
                          2: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
                          3: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
                          4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
        Validity
            Not Before: Mar 25 06:11:49 2026 GMT
            Not After : Apr  1 06:11:49 2026 GMT
        Subject: CN=69c37ca6-915f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:ed:64:f1:a7:f8:33:52:47:56:02:74:8f:
                    d3:3b:39:c8:8d:ec:61:a4:d6:f9:ef:f6:d7:ba:09:
                    a8:0d:94:3c:9c:dc:64:28:77:e1:29:3d:0e:9a:ea:
                    a8:47:77:2f:23:cf:4c:54:30:01:47:73:7e:94:57:
                    1f:97:24:2f:d0:be:09:aa:f0:3a:71:b1:b0:b3:8b:
                    1b:16:0f:31:0e:23:db:c1:2b:6e:4b:9b:19:39:d9:
                    07:68:d3:ec:78:b7:7a:4d:aa:89:08:aa:f6:dc:15:
                    2d:50:11:0a:9f:92:64:ee:42:42:f7:9a:eb:09:fd:
                    fd:b6:4a:fc:ad:fe:93:e4:c7:91:bc:c7:f9:61:a6:
                    95:10:fb:e9:15:c6:bf:5c:74:23:16:07:91:05:8b:
                    30:2b:d4:9d:03:e7:7e:7b:db:79:22:53:3a:b7:01:
                    49:55:3c:7b:48:98:54:db:20:4f:4f:bc:43:fb:55:
                    77:90:0c:18:b8:50:9f:ac:15:85:3a:15:fc:63:a6:
                    20:a5:b6:eb:d9:6a:db:53:e9:bd:9f:0e:64:de:7d:
                    b3:97:92:a6:39:8a:32:38:d4:01:00:26:ab:83:73:
                    17:0b:c0:53:19:e5:4f:10:3e:0f:f6:b6:ad:bb:0c:
                    ec:3a:06:cf:b7:bf:65:d4:87:fc:21:4d:83:18:29:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D3:F3:04:6B:DE:38:9A:CF:00:C5:36:EF:55:0E:82:DF:7D:93:04
            X509v3 Authority Key Identifier:
                keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:42:7f:e3:6e:69:72:5d:14:57:e5:27:c7:4d:f6:af:8b:70:
         25:75:cb:ae:d4:b2:07:26:fc:46:41:31:28:01:16:c5:5a:8f:
         7f:76:34:6b:00:15:ca:89:32:5e:e3:4b:57:1d:6b:96:eb:5e:
         39:df:1a:eb:67:7c:4b:3c:8f:04:10:9e:cf:33:9b:e2:d8:f1:
         3c:78:a5:6f:62:d6:7b:b6:29:ea:52:fc:b0:b3:34:2c:57:ab:
         6f:56:1e:6a:95:65:e5:ee:f7:9e:26:77:b8:8a:bc:70:04:bb:
         22:89:ff:92:36:ae:62:7e:d6:54:68:80:ad:98:8f:7c:7b:51:
         27:05:88:2e:80:28:bd:62:ac:51:01:89:63:5e:bf:3f:2f:9d:
         22:2c:af:f8:36:5d:dd:39:c0:37:da:22:d4:41:19:42:d0:19:
         a9:86:cd:49:ec:96:21:80:83:aa:2b:c0:4e:93:60:86:04:00:
         b5:3e:a3:8d:bc:53:e0:c5:2e:9e:8f:8c:dc:e3:63:e8:47:2a:
         a1:de:f6:23:b8:fc:14:09:d8:b9:6d:31:b6:0d:1b:c8:9a:4b:
         11:2c:f3:29:26:fb:f7:02:c1:e2:45:21:aa:55:0b:29:14:8e:
         9d:64:08:56:57:69:4a:9b:5f:11:52:02:19:5a:57:2a:4e:1a:
         55:da:c7:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3MjUxMTAvBgNVBAUTKEI4N0ZBRDY1NEVDNDIxN0M2NTAwRDBGMDZCMTlCRTMx
OUQzREFERjcwHhcNMjYwMzI1MDYxMTQ5WhcNMjYwNDAxMDYxMTQ5WjAYMRYwFAYD
VQQDEw02OWMzN2NhNi05MTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3CjtZPGn+DNSR1YCdI/TOznIjexhpNb57/bXugmoDZQ8nNxkKHfhKT0Omuqo
R3cvI89MVDABR3N+lFcflyQv0L4JqvA6cbGws4sbFg8xDiPbwStuS5sZOdkHaNPs
eLd6TaqJCKr23BUtUBEKn5Jk7kJC95rrCf39tkr8rf6T5MeRvMf5YaaVEPvpFca/
XHQjFgeRBYswK9SdA+d+e9t5IlM6twFJVTx7SJhU2yBPT7xD+1V3kAwYuFCfrBWF
OhX8Y6Ygpbbr2WrbU+m9nw5k3n2zl5KmOYoyONQBACarg3MXC8BTGeVPED4P9rat
uwzsOgbPt79l1If8IU2DGClfawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLT8wRr
3jiazwDFNu9VDoLffZMEMB8GA1UdIwQYMBaAFLh/rWVOxCF8ZQDQ8GsZvjGdPa33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTcyNS84MDFCQ0FBNjA4
M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlYeGxBTkR3YXhtLU1aMDly
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlY
eGxBTkR3YXhtLU1aMDlyZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqkJ/425pcl0UV+Unx032r4twJXXLrtSyByb8RkExKAEWxVqPf3Y0awAVyoky
XuNLVx1rluteOd8a62d8SzyPBBCezzOb4tjxPHilb2LWe7Yp6lL8sLM0LFerb1Ye
apVl5e73niZ3uIq8cAS7Ion/kjauYn7WVGiArZiPfHtRJwWILoAovWKsUQGJY16/
Py+dIiyv+DZd3TnAN9oi1EEZQtAZqYbNSeyWIYCDqivATpNghgQAtT6jjbxT4MUu
no+M3ONj6Ecqod72I7j8FAnYuW0xtg0byJpLESzzKSb79wLB4kUhqlULKRSOnWQI
VldpSptfEVICGVpXKk4aVdrH0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:02 2026 by rpki-client