Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier:          9uLmUKJfww9kfzdtmjO1pVz0v5QoM8sj5YoKCmP1H3w=
Subject key identifier:   5D:79:BD:02:75:18:61:61:10:04:A6:DA:EF:FB:65:3F:58:28:4F:EB
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer:       /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number:          0248
Signing time:             Fri 27 Mar 2026 01:55:41 +0000
Manifest this update:     Fri 27 Mar 2026 01:55:40 +0000
Manifest next update:     Fri 03 Apr 2026 01:55:40 +0000
Files and hashes:         1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: voRlDkRGbkyzImPUcK7EnXiW9snk/FdBcSIcwj5pqFU=)
                          2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: zmCHc0q8afDD9aW0T21tFPCp1yZ3of0ogG66OtKOJow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Validity
            Not Before: Mar 27 01:55:40 2026 GMT
            Not After : Apr  3 01:55:40 2026 GMT
        Subject: CN=69c5e39c-cd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:e1:88:d6:55:98:b3:e8:00:1b:f1:a8:1b:
                    14:b7:60:df:f3:de:55:37:66:38:18:11:98:73:a0:
                    c0:54:2c:84:5f:ec:4c:e3:17:64:eb:59:44:ed:9a:
                    ac:46:1e:91:11:e4:fc:27:82:69:5b:bc:48:c6:c2:
                    33:f8:fb:bf:ca:0b:4f:3b:1f:fd:97:af:10:aa:01:
                    ba:71:dd:75:5e:4a:3a:7e:4f:dc:72:48:7e:5b:ca:
                    dc:e5:53:fb:4c:ca:53:31:a3:08:dd:58:b8:35:21:
                    63:d8:65:bb:f4:d1:95:17:a4:4f:0e:fe:26:0c:64:
                    2a:90:d0:f1:b8:ee:58:37:19:f3:29:77:f2:8d:94:
                    20:15:6f:1e:f8:24:fa:b9:68:0e:d6:f6:90:b7:cd:
                    fb:e1:eb:80:12:54:e3:1b:ad:77:34:22:62:20:f3:
                    a5:43:12:8d:46:98:fe:63:48:bc:e8:31:93:da:2d:
                    9f:f8:fb:2d:78:71:44:42:33:49:15:ad:22:f8:f2:
                    52:7f:63:c8:4b:5a:76:a5:23:b1:b2:fa:0b:bd:64:
                    11:1e:cc:40:cb:f6:fd:99:1c:2f:0b:a5:29:ed:5b:
                    f6:8b:60:43:51:ec:a4:ca:a9:82:23:8a:cb:fa:7c:
                    51:2f:10:78:f4:97:be:c3:6d:ea:e0:77:cb:20:31:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:79:BD:02:75:18:61:61:10:04:A6:DA:EF:FB:65:3F:58:28:4F:EB
            X509v3 Authority Key Identifier:
                keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:68:3c:75:89:1b:7c:e2:6f:b5:9c:c1:5e:02:70:21:f6:
         c4:92:47:f8:ff:5f:1e:37:47:43:ec:91:15:8a:cc:65:93:7b:
         e7:37:a2:77:7e:a7:8c:ab:c5:56:99:16:fb:c0:8a:1e:59:b6:
         6a:46:ba:ed:54:ad:67:ab:5a:31:4c:e1:6d:f1:77:49:10:a9:
         73:a8:85:8d:9c:3d:c2:04:c0:ab:de:88:08:0a:1a:c1:f8:5a:
         a2:9a:c7:e4:10:70:f2:69:b3:ef:1e:fb:bc:5a:5b:f9:9a:4b:
         7c:1c:2f:8e:04:04:69:94:26:32:6b:4e:2a:96:a4:7c:85:e9:
         09:71:be:24:d6:9c:20:11:db:4a:09:cf:3b:f1:b9:85:5a:9b:
         4e:0a:eb:db:6d:f0:69:56:e5:24:f3:ea:ef:ef:d5:1c:1a:24:
         83:89:d6:e2:b6:ce:4b:bd:9a:6a:85:b1:20:dc:f3:cc:40:18:
         34:ac:94:2e:be:0e:5e:9a:e0:a0:46:2a:e1:67:db:16:67:21:
         84:3a:6b:24:af:84:4c:d2:a7:d8:01:93:21:69:8f:e5:8e:d7:
         25:b5:e2:af:62:04:00:64:d4:d6:d9:13:a2:bf:27:98:fc:49:
         33:2f:15:c7:5e:72:84:a9:4d:2a:7f:f9:b2:3c:28:6a:68:67:
         dd:e7:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:16 2026 by rpki-client