Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
File:                     UzfctqkbQdUhGkTCFqljq6zH4rA.mft (raw, json)
Hash identifier:          TalR4TwdeC6ESVkIET/JFKf4h1qAeztNq7Tw5YBeUcU=
Subject key identifier:   E8:6B:16:84:84:EE:BB:1E:34:47:FB:33:2C:B8:00:FB:FA:42:E8:A8
Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
Certificate issuer:       /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
Certificate serial:       354A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
Manifest number:          3531
Signing time:             Tue 24 Mar 2026 14:44:48 +0000
Manifest this update:     Tue 24 Mar 2026 14:44:48 +0000
Manifest next update:     Tue 31 Mar 2026 14:44:48 +0000
Files and hashes:         1: UzfctqkbQdUhGkTCFqljq6zH4rA.crl (hash: CK01JvUdrG+TjXmBSHoyRQBxxR7ojUX1Zmw0pWX7Xlo=)
                          2: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (hash: p/2uNWrvsoQCe3Fz5EtEFh3Vm41+SYB3tWpnLf8PUUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl
                          rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FBC, serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
        Validity
            Not Before: Mar 24 14:44:48 2026 GMT
            Not After : Mar 31 14:44:48 2026 GMT
        Subject: CN=69c2a360-12f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:5a:45:8a:33:cc:bc:63:1e:83:a6:ca:fa:
                    cb:40:cd:1c:40:13:0e:60:b5:e9:e0:95:c6:04:68:
                    b8:01:c1:89:f5:18:03:f3:25:ac:70:8a:0e:42:3b:
                    18:ba:0e:49:be:65:04:84:70:1b:a4:89:b6:43:ee:
                    b0:ad:b0:28:78:c6:3c:6f:a0:91:39:a2:01:65:47:
                    8d:98:e3:e4:41:95:96:0d:4a:e5:87:63:3c:62:a1:
                    e3:1c:a3:06:6f:89:83:63:fe:c9:e7:b7:a6:b9:75:
                    ee:f4:66:04:a9:fd:d9:a9:8f:3f:64:e9:b5:21:0c:
                    29:7d:35:43:ef:ab:3a:28:93:e7:1e:f4:53:57:70:
                    9c:e1:f6:74:19:b6:e7:a5:6f:b7:c0:11:43:b0:8a:
                    5a:c6:34:52:f3:c8:02:25:fd:5d:65:8c:5b:49:8b:
                    04:f5:81:fb:17:5a:67:b0:27:66:55:12:0b:ff:47:
                    33:13:bb:2c:5e:0d:07:b3:4f:91:ec:01:3e:33:e6:
                    23:7d:2f:a0:51:b0:01:a7:7d:7f:cd:f0:6e:c5:ce:
                    76:2c:bb:6d:1a:63:04:9a:a0:b6:49:35:21:d3:00:
                    1e:8c:43:05:8f:b8:26:50:81:27:c5:28:21:66:0b:
                    b0:ca:aa:a1:b9:06:6f:35:96:35:c4:77:7b:c1:6a:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:16:84:84:EE:BB:1E:34:47:FB:33:2C:B8:00:FB:FA:42:E8:A8
            X509v3 Authority Key Identifier:
                keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:45:cb:e7:3b:67:51:2b:3c:a7:1d:76:9b:92:a9:e0:b1:
         38:ef:06:52:19:f7:3a:55:5a:f9:15:3d:61:19:64:15:20:c9:
         ae:8c:1b:e3:1e:72:f2:d4:76:8f:e4:e4:98:7f:95:57:c6:f9:
         f7:07:3c:98:00:10:4e:97:29:14:c1:fa:45:50:39:aa:dc:e5:
         74:0d:76:56:1c:7b:07:d9:68:69:9a:5a:ec:f2:e3:6e:77:00:
         ad:91:fc:62:83:b2:b1:48:32:8b:75:75:19:8a:79:bf:33:ad:
         98:4a:41:86:b1:3c:3a:b7:51:8d:5f:53:d1:f3:2f:f6:76:16:
         25:50:bb:36:9e:60:80:19:7e:ea:a7:71:ea:7b:ab:46:24:6b:
         3a:dc:0f:c6:92:0f:ca:d8:39:1c:b1:c4:44:38:43:48:2d:69:
         a5:65:98:4b:da:e9:7b:e8:33:3a:b6:20:05:00:b2:b6:b6:b5:
         2e:b9:3f:16:10:5d:7f:2c:d1:7c:15:a3:9e:49:77:29:70:0c:
         cc:fb:8b:7e:59:48:c0:bb:98:49:9f:f6:5a:ea:f7:60:22:0e:
         e8:b6:19:7f:1a:2d:ae:dd:a0:71:92:35:84:98:19:c4:7e:ca:
         7e:88:e0:08:0d:61:46:82:4d:19:01:bd:ee:ed:62:91:04:77:
         2a:fc:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:46 2026 by rpki-client