Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File:                     uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier:          3Aqc7j8w6dpuUYeTQs7rcLd+v43g+G7ZWzLtAlvrtOM=
Subject key identifier:   C7:DE:06:0D:2E:D1:19:05:F8:45:78:C2:43:0D:70:EF:35:AA:A4:E5
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer:       /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial:       040C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number:          0405
Signing time:             Fri 27 Mar 2026 00:13:16 +0000
Manifest this update:     Fri 27 Mar 2026 00:13:16 +0000
Manifest next update:     Fri 03 Apr 2026 00:13:16 +0000
Files and hashes:         1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: EzXgxF5mZTzzIsVR6BzQCnJaqHgRstP9KDniqK1ZkZA=)
                          2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: epKRw41KBWpJS0cS06bdYab65bSZPCjDLsCD9m8JyLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
        Validity
            Not Before: Mar 27 00:13:16 2026 GMT
            Not After : Apr  3 00:13:16 2026 GMT
        Subject: CN=69c5cb9c-52b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:d7:cf:6f:41:9f:cd:ef:02:18:b4:f9:36:
                    dd:06:98:82:cf:fd:e0:79:79:38:d9:a8:28:5f:cf:
                    d3:6e:e3:38:ac:eb:07:84:0d:b5:9b:1c:e6:80:ea:
                    ae:32:6c:19:0f:fa:bd:dc:98:4a:4d:49:0d:10:63:
                    57:67:8d:02:1a:fc:0d:74:e9:bf:01:b3:2d:39:51:
                    88:25:e5:3d:5a:83:de:24:91:b6:fc:49:28:d5:c1:
                    ae:b2:b6:58:33:fa:df:8a:b2:80:00:76:8f:8a:a7:
                    48:17:b4:cb:76:8c:9b:bf:08:8d:fa:01:71:fa:50:
                    3a:7f:d8:76:f0:3a:33:45:54:a6:79:ab:54:46:8b:
                    49:89:05:ef:b4:04:e1:88:ab:25:dc:a0:0c:13:bf:
                    e3:10:5e:40:03:c5:a8:6d:a8:de:8c:ad:3b:4e:82:
                    12:50:f2:0a:ac:33:74:aa:c8:7a:b8:77:57:7e:b5:
                    81:a4:63:67:95:fd:ae:95:b9:17:9e:19:b8:33:04:
                    07:00:5d:a9:b6:28:31:e2:d9:c3:ea:70:75:80:9f:
                    0f:71:ac:db:c5:0a:7d:09:42:ce:2e:df:80:22:ce:
                    0b:f9:e6:e4:9e:2a:35:87:46:04:d9:01:47:60:17:
                    50:92:dc:6f:82:23:bb:ac:1c:eb:5c:47:db:8f:90:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DE:06:0D:2E:D1:19:05:F8:45:78:C2:43:0D:70:EF:35:AA:A4:E5
            X509v3 Authority Key Identifier:
                keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:4d:36:33:e3:59:08:e7:da:31:90:ce:ae:17:16:0e:d8:
         a3:e3:1b:92:d5:64:1a:e0:94:6e:49:4f:4b:bf:8e:72:12:98:
         ac:1f:16:fa:ae:a6:db:2d:07:1b:6e:fa:36:ed:a6:99:8e:c8:
         16:32:5e:c5:e6:a0:d6:39:ce:62:fc:3e:8a:93:6b:a9:da:19:
         18:23:1c:c0:62:15:ee:a3:3d:31:23:7d:af:06:5e:4d:0a:ca:
         4d:f5:8d:8f:96:17:2a:70:bf:e7:0e:8d:6a:e4:13:8d:39:d3:
         1b:08:82:8f:e3:55:d3:b0:df:94:1a:41:c3:48:b8:87:8d:ef:
         90:2b:ea:d8:ce:86:3f:89:f0:1e:66:42:d7:11:c7:1b:6e:3d:
         e9:ce:e6:84:0f:99:63:aa:7a:fa:97:2a:72:2d:52:72:71:06:
         ed:b1:85:54:d4:bc:9c:82:6e:a4:10:d0:07:c1:21:4c:dc:2b:
         ce:35:91:52:5e:ac:4f:87:d8:1d:66:80:00:bb:08:f6:dc:c9:
         ce:e3:e0:18:88:d5:d0:d7:e0:2e:0f:4f:95:6b:34:88:ab:12:
         2f:a0:d4:cc:2e:b6:ac:fd:6b:ec:0f:98:d5:38:bf:22:74:75:
         19:03:7a:da:da:fd:78:91:22:f5:3f:6f:07:69:3a:30:cc:84:
         68:79:f0:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc1Q0MxMTAvBgNVBAUTKEI4QTIyMjc3RUNDNkIxMEEzRDIwMkFBMzkwQ0NBN0ZC
QjkyQTQ2RTAwHhcNMjYwMzI3MDAxMzE2WhcNMjYwNDAzMDAxMzE2WjAYMRYwFAYD
VQQDEw02OWM1Y2I5Yy01MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IrXz29Bn83vAhi0+TbdBpiCz/3geXk42agoX8/TbuM4rOsHhA21mxzmgOqu
MmwZD/q93JhKTUkNEGNXZ40CGvwNdOm/AbMtOVGIJeU9WoPeJJG2/Eko1cGusrZY
M/rfirKAAHaPiqdIF7TLdoybvwiN+gFx+lA6f9h28DozRVSmeatURotJiQXvtATh
iKsl3KAME7/jEF5AA8WobajejK07ToISUPIKrDN0qsh6uHdXfrWBpGNnlf2ulbkX
nhm4MwQHAF2ptigx4tnD6nB1gJ8PcazbxQp9CULOLt+AIs4L+ebknio1h0YE2QFH
YBdQktxvgiO7rBzrXEfbj5BkDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfeBg0u
0RkF+EV4wkMNcO81qqTlMB8GA1UdIwQYMBaAFLiiInfsxrEKPSAqo5DMp/u5Kkbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xM0U3RDcyRUFG
RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NRbzlJQ3Fqa015bi03a3FS
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3VLSWlkLXpHc1FvOUlDcWprTXluLTdrcVJ1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzVDQy8xM0U3RDcyRUFGRTMxMUVDQTJDQjA2NkRDNEY5QUUwMi91S0lpZC16R3NR
bzlJQ3Fqa015bi03a3FSdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASOBNNjPjWQjn2jGQzq4XFg7Yo+MbktVkGuCUbklPS7+OchKYrB8W+q6m2y0H
G276Nu2mmY7IFjJexeag1jnOYvw+ipNrqdoZGCMcwGIV7qM9MSN9rwZeTQrKTfWN
j5YXKnC/5w6NauQTjTnTGwiCj+NV07DflBpBw0i4h43vkCvq2M6GP4nwHmZC1xHH
G2496c7mhA+ZY6p6+pcqci1ScnEG7bGFVNS8nIJupBDQB8EhTNwrzjWRUl6sT4fY
HWaAALsI9tzJzuPgGIjV0NfgLg9PlWs0iKsSL6DUzC62rP1r7A+Y1Ti/InR1GQN6
2tr9eJEi9T9vB2k6MMyEaHnwQQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:03:05 2026 by rpki-client