Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
File:                     uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json)
Hash identifier:          a/BsdgzjNTZ3zyAJt7mZlw5cvlsegDC6e8KYf3VZpSA=
Subject key identifier:   93:83:FF:8F:6A:A6:9A:63:A6:1B:F1:9C:CF:E5:A7:AB:46:CB:DE:3E
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Certificate issuer:       /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial:       069D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
Manifest number:          068F
Signing time:             Tue 24 Mar 2026 22:12:02 +0000
Manifest this update:     Tue 24 Mar 2026 22:12:01 +0000
Manifest next update:     Tue 31 Mar 2026 22:12:01 +0000
Files and hashes:         1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: 0LteKvq9JISZXWbxMazZA6fZm+mWdUaMEOdLwN8iFpQ=)
                          2: E40449BED7A011EFB0DF210CC4F9AE02.roa (hash: ZL9r3LkZsZ+yKkIHYt9MrrpLX2zWgZVZa1PQWAZtU/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
                          rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
        Validity
            Not Before: Mar 24 22:12:01 2026 GMT
            Not After : Mar 31 22:12:01 2026 GMT
        Subject: CN=69c30c31-a37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:f4:e6:3e:de:a4:94:2c:b6:1a:18:3a:67:
                    7c:58:39:37:b3:5f:bb:a7:2c:bc:90:34:e4:af:ae:
                    46:d8:2e:41:9b:a2:c7:a3:6b:98:f4:13:de:dd:3d:
                    6f:8c:21:0e:ce:ce:24:a9:ea:f5:68:67:0f:c9:55:
                    52:3e:0b:ea:43:d1:da:1d:d2:5e:ce:9d:69:3a:e3:
                    dc:f2:23:a0:b6:19:c1:70:23:85:59:d8:fc:6c:02:
                    c6:55:2e:6e:0f:da:19:11:bf:61:47:a3:b9:b3:1d:
                    54:cd:20:1d:d2:1a:56:34:5c:6a:b4:f3:03:46:46:
                    07:b5:7d:a9:6d:59:bc:2c:c8:fd:6c:99:9f:df:a8:
                    2f:95:80:12:2d:7c:ff:2f:1e:e9:47:19:d2:ca:7c:
                    99:12:df:0b:c6:38:a8:20:97:5a:df:25:71:4b:31:
                    84:fc:56:fa:09:ee:7c:b5:93:bd:a3:99:fa:a3:da:
                    bf:e3:42:ab:42:80:d1:eb:ad:18:d3:25:e9:ec:79:
                    fb:32:17:6d:ff:a2:e5:7a:c5:10:9c:21:13:74:28:
                    3c:ca:c5:8f:66:70:1f:85:2b:a4:5c:0b:2a:28:0e:
                    0b:80:32:11:86:ab:54:3b:d4:12:50:38:22:bb:cc:
                    36:92:aa:7e:7a:fb:51:6f:6c:b2:69:35:fe:1c:d7:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:83:FF:8F:6A:A6:9A:63:A6:1B:F1:9C:CF:E5:A7:AB:46:CB:DE:3E
            X509v3 Authority Key Identifier:
                keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7c:1b:93:40:61:36:38:4c:dd:22:23:ca:e7:dc:eb:69:67:
         0f:1a:54:ad:ea:21:fa:df:16:4c:4c:87:8c:2e:3c:3b:5a:c4:
         df:96:fb:a5:76:a2:be:ea:d5:4c:bd:a6:dd:0c:54:92:71:33:
         76:56:1c:42:ee:50:33:3b:06:c5:d5:aa:c6:2b:19:5e:82:7d:
         14:a8:6d:48:07:4b:6a:7b:2d:ec:34:8f:f0:27:56:28:62:45:
         24:fb:93:e8:74:00:01:85:13:85:ca:84:30:d2:1d:a4:b0:d9:
         de:49:ac:31:c8:95:fd:a9:b0:aa:9e:33:64:f3:7e:88:b8:28:
         f3:03:c7:15:cb:af:95:2d:96:e7:03:18:96:32:44:f7:22:f6:
         8d:2c:70:32:96:df:02:6f:b4:f6:34:ac:a2:96:05:ae:c5:6e:
         ca:db:09:10:55:87:3f:83:e5:bb:2c:b7:2d:08:e3:44:d1:09:
         4f:1c:d2:c7:5f:eb:de:55:fe:97:83:82:bc:62:85:6d:66:8b:
         6b:ad:0b:61:11:ee:16:4c:dc:6d:15:4b:c0:7a:87:b3:60:81:
         cd:6d:8a:a5:65:6d:99:0d:d7:a5:25:37:93:72:30:63:1e:6a:
         16:0d:94:d3:d0:44:4c:f0:60:15:5b:b0:69:20:6d:ab:8a:80:
         5f:3f:7f:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5NzcxMTAvBgNVBAUTKEI4MDcwREZDNTdFQUUwRUJFOEFFRTRCQjVDOTFEMDZB
QkQxQ0E3MUEwHhcNMjYwMzI0MjIxMjAxWhcNMjYwMzMxMjIxMjAxWjAYMRYwFAYD
VQQDEw02OWMzMGMzMS1hMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2n05j7epJQsthoYOmd8WDk3s1+7pyy8kDTkr65G2C5Bm6LHo2uY9BPe3T1v
jCEOzs4kqer1aGcPyVVSPgvqQ9HaHdJezp1pOuPc8iOgthnBcCOFWdj8bALGVS5u
D9oZEb9hR6O5sx1UzSAd0hpWNFxqtPMDRkYHtX2pbVm8LMj9bJmf36gvlYASLXz/
Lx7pRxnSynyZEt8LxjioIJda3yVxSzGE/Fb6Ce58tZO9o5n6o9q/40KrQoDR660Y
0yXp7Hn7Mhdt/6LlesUQnCETdCg8ysWPZnAfhSukXAsqKA4LgDIRhqtUO9QSUDgi
u8w2kqp+evtRb2yyaTX+HNczawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOD/49q
pppjphvxnM/lp6tGy94+MB8GA1UdIwQYMBaAFLgHDfxX6uDr6K7ku1yR0Gq9HKca
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3Ny9COTRCOEM5OEIy
MDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRPdm9ydVM3WEpIUWFyMGNw
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VBY05fRmZxNE92b3J1UzdYSkhRYXIwY3B4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Njk3Ny9COTRCOEM5OEIyMDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRP
dm9ydVM3WEpIUWFyMGNweG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPnwbk0BhNjhM3SIjyufc62lnDxpUreoh+t8WTEyHjC48O1rE35b7pXaivurV
TL2m3QxUknEzdlYcQu5QMzsGxdWqxisZXoJ9FKhtSAdLanst7DSP8CdWKGJFJPuT
6HQAAYUThcqEMNIdpLDZ3kmsMciV/amwqp4zZPN+iLgo8wPHFcuvlS2W5wMYljJE
9yL2jSxwMpbfAm+09jSsopYFrsVuytsJEFWHP4Pluyy3LQjjRNEJTxzSx1/r3lX+
l4OCvGKFbWaLa60LYRHuFkzcbRVLwHqHs2CBzW2KpWVtmQ3XpSU3k3IwYx5qFg2U
09BETPBgFVuwaSBtq4qAXz9/zA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:40 2026 by rpki-client