Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
File:                     UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json)
Hash identifier:          LG/BaH+yWlksjPq2qNde0CF+QAojoIkbf+jXr7fJ6ag=
Subject key identifier:   03:C2:EF:9E:B9:F7:22:F2:9A:E5:5E:79:CE:4A:AD:DE:D8:FB:6F:E4
Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
Certificate issuer:       /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
Certificate serial:       1DAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
Manifest number:          1DA0
Signing time:             Tue 24 Mar 2026 16:02:39 +0000
Manifest this update:     Tue 24 Mar 2026 16:02:39 +0000
Manifest next update:     Tue 31 Mar 2026 16:02:39 +0000
Files and hashes:         1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: I5+Ug8EqNLxLSb64eY7UCcS8V0iUdz3zzphfU0LPlQ4=)
                          2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 93wp2YI5n78cTk9dSb9dKf64IstzTNAT7tMeQkp2bC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl
                          rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7599 (0x1daf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
        Validity
            Not Before: Mar 24 16:02:39 2026 GMT
            Not After : Mar 31 16:02:39 2026 GMT
        Subject: CN=69c2b59f-3487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:1c:eb:05:dc:c6:c6:13:74:ec:ed:1a:2d:
                    df:d1:4c:59:56:46:72:21:50:bc:05:26:d4:d1:4c:
                    85:d3:98:6b:da:d0:33:d1:24:bd:d3:53:73:50:2d:
                    d9:66:1c:22:cd:ef:d2:5a:43:0d:7d:31:6b:91:8c:
                    7b:41:a4:4c:42:dd:b5:ee:1a:b6:8f:1e:00:9a:e8:
                    0d:10:ac:bc:f3:12:cc:43:83:e3:e8:32:4c:48:e5:
                    bb:72:91:18:68:64:86:66:92:bc:11:c3:c3:51:75:
                    8c:11:19:f3:96:da:e6:dc:48:b7:86:be:7d:12:d5:
                    5e:74:00:04:b0:bc:eb:56:f8:95:5e:17:36:03:6d:
                    fd:03:d6:15:60:b9:25:7b:0b:2b:97:5d:2b:c6:b5:
                    55:3a:c5:0d:94:f8:85:8a:36:35:4e:e3:ff:cf:a4:
                    11:a9:8c:7a:d3:1d:a7:04:f3:ec:8b:e0:0c:a1:fc:
                    9b:1f:aa:d5:c8:c3:24:fe:75:91:4a:e3:ed:f3:af:
                    dd:5b:c3:7d:7c:5e:93:6f:03:8d:bf:8f:1a:62:b8:
                    fe:87:9f:fc:98:91:63:88:be:6d:f6:d2:6b:73:8b:
                    d6:a9:2c:90:85:f2:d1:06:41:69:44:be:ff:b2:91:
                    c5:39:28:e9:b2:b5:44:dd:cb:23:0d:a0:fc:03:73:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C2:EF:9E:B9:F7:22:F2:9A:E5:5E:79:CE:4A:AD:DE:D8:FB:6F:E4
            X509v3 Authority Key Identifier:
                keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:55:34:6b:17:9d:df:f5:6f:ca:1b:5d:06:dc:b4:82:f7:73:
         3b:1f:0c:b3:02:bb:7a:ec:9b:2e:10:a9:fe:86:a3:4e:9e:41:
         c6:b4:7b:de:0c:35:f2:c9:fa:a5:eb:d5:0a:4f:48:41:f2:e0:
         8c:57:d5:ef:99:38:b1:0c:ca:3f:93:74:75:02:f1:e0:56:9a:
         7a:75:93:92:40:14:9b:6f:f9:a5:ac:29:f1:fa:40:35:2f:17:
         71:8f:73:69:1b:97:88:ae:61:3f:39:3e:12:66:d6:a9:bb:9a:
         79:79:27:45:01:b2:3c:9c:9f:71:cd:ea:5b:64:1a:2f:7a:3f:
         a1:b3:f7:39:d7:ab:66:f6:ef:62:98:aa:14:04:0a:bd:f9:af:
         21:6e:29:f7:5c:f2:22:eb:1b:5e:4d:75:11:3e:ae:60:ef:75:
         cf:d5:50:c0:74:a2:bd:2d:59:26:12:f9:43:21:bd:d9:04:da:
         88:7b:90:ac:17:1b:84:2c:93:0f:90:26:93:4f:8c:ca:ca:52:
         80:71:50:fe:e8:e6:c2:90:39:45:42:57:6f:98:79:dc:50:de:
         95:6f:f9:0d:b7:8a:9e:91:26:1d:e3:ab:5b:2f:62:22:63:25:
         db:a3:1a:84:d9:e9:ec:7d:0a:17:0a:b5:73:ab:c2:49:70:b1:
         2f:64:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:23 2026 by rpki-client