Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          nYYdnPJlsQ6gy6UASogeMdswt+v3brGoWoFnosIYbNg=
Subject key identifier:   55:1E:FF:70:F0:5E:CC:17:38:C6:78:48:2B:F5:3E:DB:93:AB:97:34
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       212E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          210B
Signing time:             Thu 26 Mar 2026 15:56:08 +0000
Manifest this update:     Thu 26 Mar 2026 15:56:08 +0000
Manifest next update:     Thu 02 Apr 2026 15:56:08 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: wW2TFPEeFRTsF9v2XcsUN3IxjUGwmqdfxCPJJuZ+gSM=)
                          2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ybHfR/5xx3UHYBd525TGkptsJesZi6Lna1QGzoVxLoo=)
                          3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: IX69yIubs1cdWLw+u1/cJ2ESvxKouHlRxob5F2MvTs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8494 (0x212e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Mar 26 15:56:08 2026 GMT
            Not After : Apr  2 15:56:08 2026 GMT
        Subject: CN=69c55718-f5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:96:07:98:9e:8e:c7:a0:22:65:19:f4:fe:
                    a8:34:eb:fe:30:71:da:d9:6e:ea:47:61:f3:98:06:
                    79:cd:67:81:c5:e7:2c:11:90:19:ca:0e:97:99:21:
                    f1:b4:81:4a:a7:cb:50:f5:f8:bb:4c:03:35:e5:c9:
                    96:67:39:c0:4a:09:13:47:a8:d5:a4:2f:ba:81:fe:
                    5c:dc:4f:3f:e1:84:77:74:6b:05:e9:ae:ea:f1:46:
                    73:34:df:de:72:98:3e:c8:6d:40:e3:d9:e3:89:b2:
                    5f:5a:b4:f8:08:e4:ca:19:55:24:ec:61:83:02:3c:
                    98:82:e5:16:c2:a2:30:30:5d:6f:5d:9b:91:cb:d1:
                    46:d2:38:9a:0f:3d:1a:21:e7:87:1b:15:5d:74:86:
                    64:19:63:6f:3c:cc:47:7f:67:44:4e:78:ba:ff:77:
                    62:3c:8a:e4:aa:a8:dc:e1:44:ae:0e:dd:2a:76:25:
                    39:00:fb:53:39:d7:fe:e7:1d:1a:94:5a:8a:7c:fd:
                    db:d2:ec:57:9f:f3:ce:c5:e3:5c:da:ab:f0:48:e3:
                    28:15:7d:47:08:87:8d:df:51:8e:64:83:fd:19:35:
                    89:b6:97:03:51:01:36:ee:66:6d:45:31:4d:b7:e6:
                    82:50:52:0d:25:af:4d:2f:31:c1:8f:c6:19:1f:ff:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:FF:70:F0:5E:CC:17:38:C6:78:48:2B:F5:3E:DB:93:AB:97:34
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e2:16:55:37:39:3e:a7:f5:15:7d:6e:11:e8:46:9f:ea:e7:
         ce:cd:5f:74:4b:60:15:93:a3:d0:95:1a:97:f2:3b:f3:4c:a8:
         ae:b7:51:f4:c0:12:bf:8e:c6:26:26:67:1b:7e:a6:5b:d6:09:
         ac:6d:ae:0e:8b:7e:5b:82:69:bb:45:9f:41:71:0c:d5:a5:a0:
         5f:c8:e9:5d:27:33:c5:ed:24:1b:25:87:38:fe:ed:52:b0:d1:
         d0:aa:b3:f9:05:b0:f2:7b:e1:00:12:bc:c9:1c:30:4e:36:39:
         1b:16:2a:aa:8f:e5:4d:2d:3e:24:90:1b:4d:85:dd:f8:f6:d5:
         e3:4c:d7:bf:81:91:cd:8b:f2:de:fe:db:d7:2b:cc:90:24:f3:
         1b:f9:b3:13:c7:9c:78:a6:60:1f:1c:54:c5:f0:e1:ad:05:83:
         c4:16:5f:23:d3:2b:50:ae:96:55:67:f7:50:b2:93:54:e3:a1:
         1c:9f:52:38:43:61:8e:06:5c:5d:89:ef:88:85:b1:63:15:fb:
         36:e8:77:c9:d5:92:86:8f:88:9d:62:70:3e:f8:a7:b0:13:e9:
         74:03:05:f6:c6:a7:d1:ae:11:a6:45:9b:d2:aa:f1:e8:19:c0:
         d0:eb:83:87:ab:92:b6:46:92:8d:87:24:b4:1d:b5:b8:5f:0f:
         da:5e:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:55 2026 by rpki-client