Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File:                     Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier:          AfYRd6qSnqV0nDPOMs21VXDDMdp2KqtoDchdUL0dSmU=
Subject key identifier:   B0:84:25:AC:A0:BC:FA:2D:BA:E4:8C:1B:33:5F:23:E9:C0:8F:AE:71
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer:       /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial:       0367
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number:          0362
Signing time:             Fri 27 Mar 2026 00:39:55 +0000
Manifest this update:     Fri 27 Mar 2026 00:39:54 +0000
Manifest next update:     Fri 03 Apr 2026 00:39:54 +0000
Files and hashes:         1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: RO5cAc3wAvNxLmmxyXqUsqQVV8ePH+mIM+FX7vvINbs=)
                          2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
                          rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
        Validity
            Not Before: Mar 27 00:39:54 2026 GMT
            Not After : Apr  3 00:39:54 2026 GMT
        Subject: CN=69c5d1db-4033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:29:db:da:30:c0:a2:b7:6b:09:e6:fc:a1:
                    c3:ad:7a:83:1a:81:77:5a:d4:8b:5c:df:5e:9f:e8:
                    96:73:ad:dd:d1:cf:10:c7:f5:27:ce:9c:55:4d:d8:
                    fd:a6:be:43:9b:38:4a:88:a7:56:90:30:10:f2:ee:
                    6b:c7:a2:54:9b:50:a4:92:45:4c:08:52:1a:8c:61:
                    c7:78:d6:3b:36:33:f3:24:53:94:30:73:58:c2:72:
                    fb:c3:5b:5b:50:6b:2f:af:d6:55:3f:77:82:6b:77:
                    0d:eb:dc:5a:79:00:93:4d:76:d0:93:1e:63:89:5b:
                    72:32:05:c1:ab:eb:44:99:5e:54:65:2e:80:f8:71:
                    61:c1:ad:1a:e5:c1:28:74:04:64:59:7c:c3:60:16:
                    a7:1d:87:3a:d4:69:48:bf:2c:74:c6:43:4e:39:97:
                    e0:eb:9c:b7:97:20:e8:df:be:db:99:32:b8:14:27:
                    2e:a7:15:54:b2:28:8b:69:b5:66:6c:ba:a0:7e:36:
                    b0:b0:d3:c6:85:e2:30:2e:78:ad:d5:28:b9:c0:e4:
                    1e:72:ed:76:a3:1a:eb:fb:ab:b0:1c:b7:7b:e1:e4:
                    18:27:28:ae:ea:21:c9:30:fb:bc:95:1e:ed:d8:d5:
                    e5:37:86:9f:13:ed:41:6b:d4:bb:ae:b3:7d:cd:7f:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:25:AC:A0:BC:FA:2D:BA:E4:8C:1B:33:5F:23:E9:C0:8F:AE:71
            X509v3 Authority Key Identifier:
                keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bd:ba:8d:74:95:a4:7d:7f:d2:c2:11:d4:c0:f0:78:82:17:
         6e:7c:d5:3b:83:03:16:1a:91:e1:72:19:dc:15:32:9e:44:b7:
         89:df:04:b4:5e:82:b4:00:a2:42:a4:c7:8c:05:55:e4:73:8d:
         20:62:98:c0:4d:99:35:4e:9d:8c:09:f8:36:1f:e1:e3:ca:ed:
         07:d0:83:b5:9a:38:e6:dd:ba:90:e5:11:e3:87:82:6b:2e:fc:
         16:f9:cc:00:4d:48:01:9f:91:12:40:1d:cd:61:0d:89:b6:f7:
         07:85:01:7c:db:22:15:31:b5:08:f8:40:16:33:11:9e:09:f4:
         e2:a7:e9:a0:19:c1:7c:c7:c3:64:ec:3c:5b:1a:0e:09:c2:64:
         5f:1b:c9:21:a8:c3:ad:01:f5:02:00:42:1c:36:16:5e:51:8a:
         10:fd:ed:cc:f8:61:2a:83:58:4c:c6:87:f0:bd:01:68:b8:d2:
         b3:31:db:06:45:23:74:8a:e9:ce:1a:6a:60:e3:32:e8:d4:e3:
         6f:7d:8e:04:29:b8:22:32:36:29:93:51:12:12:b3:c7:c6:f4:
         5b:17:e8:4b:6d:fb:56:81:76:02:4c:9b:1f:3a:bd:42:42:2c:
         c8:67:ee:88:2f:6f:58:70:9e:34:12:56:2d:e4:36:43:bb:22:
         93:ad:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:28 2026 by rpki-client