Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          XXHPNB9ozLoIVlFCYJGh0xCJSo0vCiRa4KBeO5yuoK4=
Subject key identifier:   4C:4D:1B:C0:7E:B0:16:73:18:63:9A:CF:BB:08:67:8E:46:FB:AA:1C
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0C9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0C82
Signing time:             Tue 24 Mar 2026 18:27:59 +0000
Manifest this update:     Tue 24 Mar 2026 18:27:58 +0000
Manifest next update:     Tue 31 Mar 2026 18:27:58 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: YpZv+Bc8hALuQiQcBrm12BPbp3sKKpSy39ipM6VRuHw=)
                          2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3226 (0xc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Mar 24 18:27:58 2026 GMT
            Not After : Mar 31 18:27:58 2026 GMT
        Subject: CN=69c2d7af-d8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:da:3c:7a:b4:96:8d:82:77:13:91:67:5c:
                    c0:64:81:0c:1b:e9:0c:5d:2b:b4:92:3c:69:87:65:
                    d4:e4:95:a7:dc:c5:78:b5:4e:8e:06:75:2f:4e:d7:
                    1e:8d:71:ee:8c:d8:66:bc:c8:2f:88:b1:7d:c7:14:
                    2e:c9:8a:4d:b1:a9:f9:7e:6a:6b:81:ed:06:0d:af:
                    66:0b:95:04:4b:ab:32:9f:95:ea:08:6e:d5:a9:60:
                    04:d5:33:a5:db:a1:ac:3a:d7:45:85:ef:2d:69:cb:
                    34:4e:b0:87:e7:76:65:e0:f1:21:43:41:9e:4f:ef:
                    de:75:07:36:2b:e0:84:23:51:11:04:19:5c:3a:ec:
                    c9:5b:b2:9b:c9:bf:90:ab:99:4f:03:52:6b:d8:4a:
                    5a:e5:1f:a1:8c:ba:93:41:b5:fe:97:66:ae:2e:3f:
                    25:58:c9:5f:83:c8:00:ab:79:87:62:64:1b:c6:63:
                    db:3e:3a:c4:64:26:1e:b4:c0:eb:af:ce:c5:78:0b:
                    b2:39:f0:00:37:bb:ce:d4:83:94:89:b2:20:d1:a8:
                    aa:3f:f3:11:b9:0d:c4:52:2d:1a:22:ec:53:a3:8c:
                    6c:d1:20:48:21:d0:4f:ad:77:45:10:ad:bb:3c:90:
                    d7:33:40:f5:d8:70:d9:58:61:eb:a3:7a:aa:75:ea:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:1B:C0:7E:B0:16:73:18:63:9A:CF:BB:08:67:8E:46:FB:AA:1C
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c9:51:9d:07:dd:5d:b3:91:3c:8e:16:19:86:d3:2d:ab:62:
         5a:5b:12:3b:99:f4:6c:57:a3:87:3c:bd:f9:8b:82:a3:db:6b:
         ea:6e:75:ff:cd:7e:f5:78:13:7b:59:b3:1a:99:9d:76:3a:dc:
         a8:54:ff:74:9d:70:59:74:50:d7:1e:d7:8d:87:ec:df:6a:88:
         f0:0c:13:4c:1b:ef:98:5a:09:dc:99:be:2d:00:91:3f:d2:07:
         2e:e8:55:5e:9b:ec:6b:54:4c:11:36:70:9f:68:26:be:46:92:
         3c:2a:24:49:e9:5b:dd:ec:94:3b:78:f0:87:3e:df:90:38:32:
         e0:9c:b2:00:7c:a5:c8:a8:f7:40:b5:1c:2f:ca:e0:eb:c1:f9:
         7b:f5:f6:d0:93:f0:81:ee:5b:7f:a0:f6:1d:e7:14:e3:b8:37:
         39:11:de:36:c7:56:9b:ca:b6:e0:00:be:17:b2:c8:e4:ac:e0:
         f0:31:f6:06:db:58:4f:5f:ed:c4:ae:2e:2e:26:f3:86:ac:9e:
         5c:31:0f:68:93:2a:5f:65:3b:d9:71:8b:53:10:b7:36:11:1f:
         77:19:cf:6e:6a:84:28:44:f0:44:10:f6:90:46:ff:96:52:b9:
         2e:92:b2:22:e1:32:74:56:9c:31:1e:56:f6:5d:85:21:f7:ec:
         2c:42:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:40 2026 by rpki-client