Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File:                     UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier:          1dWzObodzRSbKcIiGGYtcXIaiO4y6nFR2fc7KaGC1JE=
Subject key identifier:   A7:B3:E2:6A:1C:89:F2:B6:16:32:A7:96:AD:3E:A8:51:21:86:74:4F
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer:       /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number:          017C
Signing time:             Wed 25 Mar 2026 03:53:41 +0000
Manifest this update:     Wed 25 Mar 2026 03:53:41 +0000
Manifest next update:     Wed 01 Apr 2026 03:53:41 +0000
Files and hashes:         1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: 7p5QNnIP6kDEO1bP8f8VBZU2CLTPifj0ifLdZbUL2uQ=)
                          2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: xQmsVP4QLFQ4i3YXyMm0tpulZSIAm9nn/IhZaNrB5cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
                          rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
        Validity
            Not Before: Mar 25 03:53:41 2026 GMT
            Not After : Apr  1 03:53:41 2026 GMT
        Subject: CN=69c35c45-cc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:e9:40:ad:36:8e:c1:76:5f:83:43:0c:df:
                    a4:f0:e7:fe:25:45:96:fa:39:63:cb:34:41:d2:a6:
                    f2:df:07:34:fb:6f:d8:42:a4:26:f0:aa:42:21:af:
                    44:cd:c8:ea:6a:b9:41:40:de:36:f6:ff:45:5a:36:
                    d6:bd:0e:c1:14:6f:50:f5:b0:26:66:e5:39:ad:f9:
                    c2:d0:a2:db:24:cd:13:b5:09:ae:16:a8:9c:fd:2c:
                    4a:f7:46:e1:9c:95:60:6c:9e:50:4e:e3:26:25:2f:
                    04:cc:bf:bf:94:3f:7d:c9:36:29:3f:4a:5a:98:d5:
                    dc:13:0c:ba:eb:d2:64:29:55:f9:a2:d5:fb:78:d6:
                    ed:38:39:ea:b7:64:18:91:25:11:20:20:4c:1e:4a:
                    46:e3:73:f9:4e:11:e3:6a:a7:56:76:6f:48:8c:9c:
                    5e:dd:b3:29:1a:aa:26:92:ad:69:04:37:2d:ff:d3:
                    7b:5b:37:88:ed:9e:ba:89:a5:5e:6e:49:fa:47:76:
                    4a:f5:0a:02:55:5e:65:c4:a2:e0:9b:d1:df:eb:ba:
                    f3:8d:f4:e2:ff:a3:b5:29:09:bb:7d:12:4c:84:3a:
                    c2:63:c8:a6:91:c8:e2:69:2d:ea:f1:2a:45:da:b4:
                    9e:11:a5:73:e7:ff:44:9c:ca:68:0a:05:1e:54:14:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B3:E2:6A:1C:89:F2:B6:16:32:A7:96:AD:3E:A8:51:21:86:74:4F
            X509v3 Authority Key Identifier:
                keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:77:57:6c:4c:ed:ce:53:8f:e7:55:d4:a1:1c:7b:b6:53:ea:
         7e:74:44:87:fb:7c:9a:e8:e1:37:a3:8e:37:cf:4a:be:36:dd:
         7d:3d:d8:06:cc:68:99:56:1f:ac:a9:ab:02:02:c8:99:52:4b:
         5f:e0:ec:78:98:a6:f1:b2:a0:5a:e1:1b:1d:e0:47:56:e9:73:
         25:96:91:2b:ca:a9:ba:5a:0e:d1:2a:1c:92:36:07:01:58:5c:
         e6:98:15:3f:a4:6e:25:51:f5:35:33:b2:be:f0:35:84:62:56:
         12:ea:02:f1:23:a2:97:96:46:c0:1e:86:bb:0f:05:28:7d:2e:
         b6:88:50:3c:56:87:07:c6:c4:d8:80:11:39:ca:06:c0:2c:6d:
         69:b9:3a:ff:53:35:dc:7b:3b:33:39:3d:f9:9e:6e:d3:f4:fb:
         bc:a4:f6:19:af:21:f9:6e:66:81:75:3c:18:89:a9:87:dc:2a:
         de:89:56:2d:bb:96:1d:54:ec:95:1e:74:79:58:ac:71:89:10:
         4c:6b:4a:60:4f:7b:fd:18:ce:08:73:6d:50:6d:00:0b:6d:40:
         5b:08:f5:5d:31:1c:14:41:bf:a7:cb:5c:09:df:39:ce:9f:ef:
         c9:38:98:45:57:96:4b:0c:66:ab:21:db:89:0d:e7:49:3a:0f:
         e8:80:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:56 2026 by rpki-client