Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File:                     tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier:          NM93ze6MB3m//+I5aaMGavc/NzPgdDf5O2LzjAlEi6E=
Subject key identifier:   4A:E4:92:74:1F:92:EC:F9:B2:31:2A:2C:29:97:57:ED:E2:D0:9A:4F
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer:       /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number:          01B9
Signing time:             Wed 25 Mar 2026 03:19:22 +0000
Manifest this update:     Wed 25 Mar 2026 03:19:21 +0000
Manifest next update:     Wed 01 Apr 2026 03:19:21 +0000
Files and hashes:         1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: TAtOe4d3IR4a1Zr2oEHKU/65V7UzoniUxHSiburXr7M=)
                          2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: Vbr5tSAUt1o9rWvWC45nwleB9ODJmGpA18ZNisnMw58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
                          rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
        Validity
            Not Before: Mar 25 03:19:21 2026 GMT
            Not After : Apr  1 03:19:21 2026 GMT
        Subject: CN=69c3543a-2317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:2a:c4:69:45:fc:fc:74:06:1d:b8:24:f4:
                    d4:10:87:2f:a3:6b:cf:ac:80:86:d2:66:bb:41:12:
                    ef:ca:ea:6f:de:78:14:24:c2:58:50:ed:5e:b7:e2:
                    1c:c6:04:b9:68:07:7a:a7:02:a4:42:7c:bb:11:44:
                    e2:a0:c5:ce:f2:09:1f:44:f7:1b:03:60:33:1d:b3:
                    92:de:49:7e:74:2c:ce:5a:1d:9e:d0:a3:57:65:9f:
                    10:de:ae:d6:32:be:44:79:f1:89:fb:39:0e:b4:41:
                    f0:fb:df:6d:68:af:58:33:b2:2f:6c:11:6d:14:ea:
                    bf:ff:73:a2:1f:fe:d3:14:11:7b:61:6c:e6:8f:c8:
                    ae:04:8b:d2:63:90:13:c9:9e:9c:f5:e6:95:33:50:
                    36:ee:cc:16:94:e6:e9:48:48:72:c7:9d:f8:f5:6e:
                    35:59:c8:33:78:ea:e9:c6:1c:17:22:f0:54:f7:cc:
                    e0:43:59:5d:f2:bf:45:4f:85:67:76:32:22:45:13:
                    25:77:c8:8b:60:60:14:b9:0c:f5:39:02:ae:9f:15:
                    32:ef:a9:32:ee:9e:81:36:fd:f1:7f:16:df:97:55:
                    09:d8:48:3d:02:a9:73:ba:e6:63:da:23:39:9d:ec:
                    43:83:13:98:35:fe:66:14:d8:30:cb:f4:ca:01:4a:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:92:74:1F:92:EC:F9:B2:31:2A:2C:29:97:57:ED:E2:D0:9A:4F
            X509v3 Authority Key Identifier:
                keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:71:b6:f6:98:e9:b0:db:d3:4e:14:36:76:dc:fd:4a:0d:31:
         29:80:ac:a0:74:84:0a:ac:22:9d:be:43:b2:33:19:a4:9f:f6:
         3a:28:d8:f2:4e:ed:f2:59:f5:d8:46:cf:1b:71:05:b6:07:10:
         df:00:52:c5:da:38:5f:6e:15:d6:00:2a:c4:63:1c:76:28:03:
         dd:dc:7f:d8:87:60:ae:95:fb:57:d0:0b:13:62:b4:81:6e:6a:
         b6:aa:dc:27:a1:22:e3:d0:96:a0:26:c2:bb:a3:a3:62:b2:46:
         52:be:16:61:8b:eb:67:8f:3a:25:80:92:5e:91:31:75:19:c6:
         98:49:fd:49:b8:4e:55:af:3e:14:6d:7f:04:f7:67:4b:88:f0:
         05:be:d7:e1:c2:70:b8:6f:3c:bb:5b:39:3e:07:05:36:7e:10:
         04:5a:23:f5:83:9f:8c:a5:6a:40:12:da:cf:dc:ee:f1:8e:70:
         47:12:6f:ed:e3:1f:6c:0b:bd:9f:c9:68:8d:eb:38:85:74:70:
         19:6e:5d:20:b5:33:b2:a1:c6:b5:ec:3f:d8:a6:22:48:84:4f:
         08:31:69:08:a2:e6:02:b1:14:54:ea:da:a6:aa:2e:e7:c7:73:
         03:41:39:9a:7c:7a:ca:dd:35:27:df:0d:c2:d0:22:72:2e:ec:
         5c:09:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:44:58 2026 by rpki-client