Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
File:                     01UDTjnACz53K-oBQambzhQnrfQ.mft (raw, json)
Hash identifier:          wHd5f7CHII12RnCierVAltnfr3QNZOtzM1Yip7r2HFA=
Subject key identifier:   97:6C:42:94:D9:22:79:D8:0B:1A:99:0E:9B:57:86:EB:DE:72:16:E5
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
Manifest number:          06
Signing time:             Wed 25 Mar 2026 08:26:52 +0000
Manifest this update:     Wed 25 Mar 2026 08:26:52 +0000
Manifest next update:     Wed 01 Apr 2026 08:26:52 +0000
Files and hashes:         1: 01UDTjnACz53K-oBQambzhQnrfQ.crl (hash: zNNyMz1uBrMKWRSgwR2LS3rkIHBq3DyvZfR25Y9y4n8=)
                          2: 58EE9E1227E311F1A1CB4281AA833773.roa (hash: ke/LfOJ0ZKhmHw2EzTdXLtCmQ4LbPHYhXcvWovxzDWQ=)
                          3: B32ED56A27EB11F1BCE516B1AC833773.roa (hash: mfYPELhyFi3+ksWi51fs3IkPk6Ldr6hQWYywSX9UUpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: Mar 25 08:26:52 2026 GMT
            Not After : Apr  1 08:26:52 2026 GMT
        Subject: CN=69c39c4c-085a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:e4:50:07:a5:fe:26:27:6b:9c:ba:3f:80:
                    d1:14:ef:32:5e:ce:5e:83:1f:ba:6e:31:77:07:34:
                    73:60:3b:b8:b1:6f:29:29:0a:ed:bf:c9:f2:6e:d5:
                    3d:d3:24:0a:f1:48:04:f6:8d:a4:a5:01:d6:4b:2a:
                    18:70:a8:b7:c3:a5:d2:1b:92:a2:6f:f1:7e:0e:aa:
                    16:b0:17:2b:a2:3c:88:e9:0e:81:7d:ef:95:e8:b0:
                    b9:30:da:1d:a1:35:13:b6:7f:51:17:25:da:d5:b0:
                    1b:32:f6:bb:db:d9:84:71:b2:74:ff:a6:bd:36:e2:
                    58:96:26:1b:7a:ad:dd:b4:cf:67:81:0b:c3:a1:42:
                    3e:9f:16:74:b6:ed:79:99:90:b9:ac:c0:94:45:e5:
                    17:fb:30:4c:f9:23:86:49:78:84:3d:e1:a1:66:76:
                    03:9d:c3:2e:09:6f:cf:ad:be:02:99:6a:0d:d6:d9:
                    13:3c:a6:77:ff:93:9f:70:81:f5:e2:c2:cc:ae:72:
                    ad:f0:6f:61:f1:fe:38:cb:5d:be:7c:43:a9:2e:38:
                    2e:f9:fc:a7:dd:39:33:61:24:2a:0b:0d:e8:63:55:
                    93:7e:4e:ee:d5:a5:d4:8f:7c:3e:f7:53:53:89:34:
                    d5:26:6a:88:f6:2f:ad:1d:93:4e:5e:7e:a5:d1:db:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:42:94:D9:22:79:D8:0B:1A:99:0E:9B:57:86:EB:DE:72:16:E5
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:df:fc:6b:bb:50:8e:2c:17:80:11:d8:56:c4:c3:35:f0:
         12:47:55:60:b9:56:ac:fb:9d:33:1b:48:88:63:76:fa:85:e1:
         9f:aa:d0:c0:e1:e8:da:32:94:7f:13:47:b8:22:1b:0e:ce:02:
         40:e8:53:ee:4e:35:f1:76:8c:04:9e:55:1d:62:45:dd:e6:b9:
         b7:09:a3:05:d9:da:80:ea:90:f5:8c:fd:f1:12:c9:6b:a3:4e:
         a4:ba:15:d9:0e:c5:84:cb:08:5f:9f:13:f4:1e:e0:9c:4d:a1:
         ec:ea:b3:db:97:b3:9f:85:a6:96:3f:a9:9c:80:9a:cd:ca:b6:
         9b:44:a1:e3:7a:8d:b7:f3:dc:ac:b9:18:90:8f:c2:f6:02:fc:
         3e:bb:4a:9a:e1:28:ac:f7:ac:88:a0:32:fb:75:60:27:59:69:
         31:47:19:b2:9d:1e:fc:36:12:3d:1d:f0:72:8d:b5:8c:f3:05:
         4f:b2:6c:f4:8e:71:72:3a:d6:83:0f:32:7c:fa:be:9e:b4:14:
         64:83:08:0d:9e:a5:43:8d:2c:64:2b:f5:35:03:cf:9c:b6:04:
         aa:88:2d:77:ab:19:a0:e7:81:2d:c1:68:1d:5e:ff:d6:44:70:
         30:50:21:9d:ab:88:af:e8:3d:ef:e8:8d:19:5e:c5:2c:bc:2b:
         33:3a:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:17:04 2026 by rpki-client