Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft
File:                     uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json)
Hash identifier:          /c5NIacRoDBnv764fS1xcZ9Cv9pi384uWGJY3ZlEzVc=
Subject key identifier:   04:60:8F:89:75:EA:12:04:43:53:3A:09:60:D1:82:3E:4C:13:DB:5F
Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
Certificate issuer:       /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
Certificate serial:       04D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft
Manifest number:          06AB
Signing time:             Thu 26 Mar 2026 23:40:44 +0000
Manifest this update:     Thu 26 Mar 2026 23:40:43 +0000
Manifest next update:     Thu 02 Apr 2026 23:40:43 +0000
Files and hashes:         1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: 4MiDOTuYnioiRQ+J7Vatd35RZOIY6VzNEsyyn/TyLqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
        Validity
            Not Before: Mar 26 23:40:43 2026 GMT
            Not After : Apr  2 23:40:43 2026 GMT
        Subject: CN=69c5c3fc-9fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:a1:08:ce:18:1e:2d:d2:40:68:8e:09:42:
                    da:d7:07:bd:4e:99:94:d0:d8:67:7b:f3:a6:5c:cc:
                    12:ce:33:64:32:a0:39:9c:95:35:2d:c9:01:16:d3:
                    b8:9d:3a:4f:00:ec:13:60:cd:5b:79:98:db:65:07:
                    5f:c5:2f:13:48:24:71:b3:d1:17:c2:b2:45:da:95:
                    d9:ff:d7:88:dc:28:2b:9c:86:9f:55:de:4c:3c:f6:
                    de:7e:f8:91:c7:c0:45:f0:4c:c5:68:1f:67:c3:92:
                    b0:99:e1:36:db:f8:ee:d6:62:49:c4:07:9e:28:af:
                    2a:50:0e:cf:ae:63:57:3e:1e:c5:eb:25:5d:78:af:
                    af:01:f6:00:b2:7d:2b:01:60:3a:29:50:5b:87:75:
                    eb:b5:df:03:e7:b3:83:65:91:03:ce:a8:02:4b:50:
                    18:52:09:4a:2b:75:8b:c4:c2:38:a0:a5:db:5d:68:
                    95:76:dd:73:a4:56:17:1d:37:82:ad:60:11:e5:27:
                    d6:0f:b2:4d:ad:1e:7d:02:6b:1d:6d:f8:55:e7:9f:
                    d0:13:9b:98:d1:b0:3b:67:2b:e9:90:db:98:be:14:
                    9f:3d:36:59:f2:3a:d2:96:ed:d5:d2:9f:c6:d9:89:
                    c5:2d:7e:da:49:d8:4a:2f:42:d9:b2:1f:39:c6:32:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:8F:89:75:EA:12:04:43:53:3A:09:60:D1:82:3E:4C:13:DB:5F
            X509v3 Authority Key Identifier:
                keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:35:0a:96:fa:cf:9c:0a:89:44:32:ab:d3:a7:86:fb:34:3f:
         1c:06:90:30:24:f7:4d:14:35:34:e8:4f:03:15:e2:f2:50:eb:
         62:50:78:d0:5a:17:85:f4:77:2f:bf:d1:5d:0e:55:a7:3b:eb:
         46:42:41:b3:f0:3a:a4:aa:4c:77:4a:36:2e:b2:0f:4b:e4:5c:
         57:96:34:bc:12:44:a6:fd:dc:c2:5d:e7:8f:4f:d7:71:79:45:
         ef:1c:db:69:71:da:6b:b0:0b:84:44:79:5c:23:44:1f:62:73:
         30:66:94:76:8a:bf:d6:89:03:c0:6e:a4:7a:5c:c7:ba:38:70:
         8f:c0:c3:8a:16:7f:db:72:50:f4:fc:67:e8:73:92:53:f5:8a:
         01:77:aa:8e:bc:5e:2a:72:d8:40:bd:ea:5b:57:15:e4:ff:7a:
         9a:a3:9f:5d:e4:31:83:77:6a:5b:e5:48:7e:e1:25:22:2f:17:
         94:1a:2b:7a:5e:ed:b7:b6:26:a7:a6:86:2c:80:22:99:57:cf:
         a6:d4:61:a6:1b:50:73:e2:da:a5:90:74:99:50:01:7c:86:7c:
         c9:6a:24:80:c2:40:f8:55:7b:aa:83:b5:59:94:94:b9:67:88:
         06:f6:79:3d:14:85:3d:86:c8:fe:f9:84:21:72:00:26:56:da:
         29:83:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:10 2026 by rpki-client