Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File:                     _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier:          kj2mdrM/F61QqNXTy4ufRdog/Anooo/5WK0To3tJazQ=
Subject key identifier:   DB:17:60:99:A3:FF:5F:06:AD:3B:D2:72:11:85:ED:65:F1:95:20:EE
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer:       /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number:          0233
Signing time:             Wed 25 Mar 2026 02:04:29 +0000
Manifest this update:     Wed 25 Mar 2026 02:04:29 +0000
Manifest next update:     Wed 01 Apr 2026 02:04:29 +0000
Files and hashes:         1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: Lmg6WVuiEn+uTisRVuKHrxu3myicMLHwicnMPQtCDKE=)
                          2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=)
                          3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: KoscC2+CKPk9KEZZ95MIfhzhcgEnyjRIFFpZQcedXxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
                          rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
        Validity
            Not Before: Mar 25 02:04:29 2026 GMT
            Not After : Apr  1 02:04:29 2026 GMT
        Subject: CN=69c342ad-4260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:21:6e:9f:bc:52:77:8c:e8:f8:2b:9b:4f:
                    bf:db:7c:65:f6:4c:4c:39:bf:1d:69:0b:f9:41:6a:
                    cc:03:f0:10:ad:30:4c:36:51:46:b9:c1:0d:c5:4f:
                    30:8a:04:17:23:4f:52:1b:80:85:a7:69:1a:9f:c3:
                    82:2e:3e:50:5a:0d:41:3a:6d:5f:dc:d0:98:e4:f6:
                    03:c1:94:56:dd:18:f8:a4:98:65:b2:0d:86:40:00:
                    2f:e2:dc:4a:a7:2d:7b:94:62:f9:d3:6d:5c:79:47:
                    ff:d9:56:72:38:d3:4c:2a:d7:f4:75:ae:56:2c:5f:
                    de:54:b8:48:e1:0b:5e:ba:b7:ff:f2:46:19:c6:85:
                    45:2f:d0:df:23:7c:7f:07:df:bd:67:02:44:12:0f:
                    69:a9:7c:c4:9a:bb:88:a8:b7:bb:ea:99:e1:10:2d:
                    97:b6:19:82:d5:9a:43:a8:b1:26:be:ba:e6:3c:0a:
                    f4:8b:c9:91:56:f3:7c:b6:6c:e5:38:bf:9d:68:5f:
                    72:88:9c:52:bd:21:e1:96:0b:75:98:3d:db:d3:24:
                    49:69:03:be:32:b0:05:f1:0a:0e:8e:5f:b2:88:0f:
                    c5:e5:7b:b9:4d:14:9b:ad:ae:90:85:11:6b:d0:8d:
                    3c:20:62:24:d2:30:a4:68:a8:09:06:dc:c4:6d:d8:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:17:60:99:A3:FF:5F:06:AD:3B:D2:72:11:85:ED:65:F1:95:20:EE
            X509v3 Authority Key Identifier:
                keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bf:f2:f8:59:c6:39:d9:58:f1:4a:8e:39:92:9b:27:dd:5d:
         7a:2f:87:82:be:2a:05:9d:c5:56:a5:4f:87:d0:81:f1:12:0d:
         26:89:59:fc:95:b4:eb:b4:89:bc:ef:54:3f:87:9c:3e:76:86:
         4e:3a:7f:69:07:e0:5b:15:e2:80:23:12:c9:a4:88:bb:38:bf:
         0f:c0:24:6a:75:75:00:6c:f2:2a:bf:ba:e9:05:3b:de:a6:b1:
         48:e2:9f:12:f9:3b:c0:bc:6c:76:42:40:e9:f4:3b:46:3f:30:
         56:a1:d4:6d:7e:1e:e7:0b:91:67:72:26:92:f3:8a:79:0c:e9:
         28:ad:5c:9b:c7:3d:88:a5:73:f3:fc:3f:13:4b:cf:62:e8:a6:
         f1:4a:a1:bd:01:66:50:0c:6d:ce:3a:e2:90:77:de:08:90:7c:
         e5:f2:96:2f:8c:33:96:d2:dc:80:fd:02:a7:b7:c5:53:cc:3f:
         be:e4:5b:17:7a:cc:30:bc:d9:ed:59:f0:02:7b:48:37:43:87:
         5e:3b:4a:9a:3e:0a:88:e5:8f:55:98:0c:40:39:03:8a:d6:76:
         38:51:80:6c:af:9a:38:f6:1f:d3:a2:53:a1:ac:03:81:b2:d9:
         f9:1d:0a:c7:58:f1:a4:c0:cd:d1:a7:33:e7:eb:4d:f9:77:14:
         42:0c:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:15 2026 by rpki-client