Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          dNC8SuXTIqFfXbaubh4gvSvVAsAlZGSLxlRX26i5aIU=
Subject key identifier:   B6:EC:17:34:86:0A:4B:C6:71:95:4D:12:53:E5:A5:A2:45:B4:A3:50
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       08B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          0880
Signing time:             Tue 24 Mar 2026 20:26:36 +0000
Manifest this update:     Tue 24 Mar 2026 20:26:35 +0000
Manifest next update:     Tue 31 Mar 2026 20:26:35 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: 8X0CBQASgnj7aLI9S3Aqyso0s6ACJjiEr1TenX7zDxU=)
                          2: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: uuc/6Rzby9wnILe/qRPLJpCHKAxsiYD3RMUjHfhtRhk=)
                          3: 13EFC134D76A11F0B167783877D3641D.roa (hash: kVjqo5zG4uUJol2yH/Uy+gEkSnM8vZ/R3aNHFvH1mGM=)
                          4: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: O+JwB/SEAHAqD7WtU6nBxA0f+/QZlJ1WVpx3bHligPk=)
                          5: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: MEH+/hoe8OY25Wy/4OSxzZr0rDbZRuSg03Fo8orAav8=)
                          6: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: oF66sE4VVdSppAlWLDJZOCJCTi3cKgb7nU6uP9HE/vw=)
                          7: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: 4516lLcwdbhs9raS1s1qYezVIgjpvS8lGp3X+O41JmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Mar 24 20:26:35 2026 GMT
            Not After : Mar 31 20:26:35 2026 GMT
        Subject: CN=69c2f37c-24a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:f2:b4:0b:5e:8e:1b:07:1d:22:33:03:cd:
                    c8:fe:d5:28:c0:f9:dc:8b:dc:38:50:e6:fc:d4:6b:
                    3f:a1:f8:e9:6e:10:a6:d0:55:f4:78:9c:45:7c:6f:
                    1d:57:32:33:ac:c0:eb:c0:a5:f4:7c:a5:f5:0b:ec:
                    f3:b4:8c:a8:a4:80:1a:54:4d:5f:96:59:75:0c:a2:
                    9e:74:db:1b:71:c1:53:29:3e:26:06:d1:5c:4d:9b:
                    3f:e7:86:a8:75:47:e6:83:b1:82:91:95:43:0c:9e:
                    fb:ab:17:f4:77:50:7e:b4:08:b2:88:d5:5b:34:1d:
                    3d:66:f4:a7:ed:34:25:a8:ee:cc:5d:86:ef:08:ac:
                    ea:fa:aa:6c:5d:b7:2d:0b:34:8b:08:47:22:09:45:
                    25:56:86:6b:35:9d:de:f1:68:1e:ea:b9:0c:b7:95:
                    d6:4f:57:d9:fe:e8:d6:98:b0:f2:22:4d:70:bd:c7:
                    6f:e7:a8:99:5d:72:7b:ef:a3:e6:a8:ee:9f:75:77:
                    1d:2d:c3:ec:03:3f:32:31:ab:93:bf:cd:be:e1:c5:
                    03:7c:9e:e3:15:c5:35:05:e5:4c:c1:b2:29:04:64:
                    01:bb:59:38:95:2c:30:af:5f:da:b5:d9:64:85:ca:
                    13:c3:47:d0:9e:3f:4f:24:18:81:5c:ff:cf:ef:5d:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:17:34:86:0A:4B:C6:71:95:4D:12:53:E5:A5:A2:45:B4:A3:50
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:70:d8:68:8d:6e:ce:e0:cf:70:68:a2:b4:34:a9:03:7d:c5:
         45:7f:de:6a:cb:af:8d:68:fb:1e:aa:ee:2c:fe:ca:ab:45:66:
         a6:54:06:63:11:d5:16:0c:85:ce:23:36:09:a3:ea:9a:05:ab:
         d4:66:27:c3:b1:25:14:2b:37:d7:62:fa:06:58:7f:7c:1c:e0:
         2e:5b:8c:d9:97:dc:4f:36:d7:8c:b9:58:ed:28:18:0e:31:26:
         cc:40:a1:b9:23:44:f5:26:e1:c7:ff:6d:d2:d8:4e:64:b4:a5:
         63:02:20:82:d4:96:7d:89:28:2b:96:8e:76:c3:23:5b:35:b3:
         98:9b:de:d7:b8:d7:2a:7b:da:d3:d8:e5:11:c4:a6:3c:9b:fe:
         80:53:a5:d5:25:bc:62:ff:fe:1f:02:dc:0d:e7:3f:b4:e1:63:
         99:d0:5a:01:fd:41:9e:d1:9c:28:47:d7:59:a9:96:dd:e0:ac:
         c8:53:34:5c:56:87:0c:45:90:0c:9d:a8:46:a5:e3:2e:02:b3:
         4c:eb:a1:1d:b9:11:82:ad:a1:77:1c:63:87:cc:74:a1:cd:b7:
         96:40:25:f4:88:6f:d6:b6:e9:7f:c4:55:63:52:e3:35:2c:79:
         34:f3:f8:82:af:ee:1d:01:88:f7:7f:db:15:82:e0:f9:d9:94:
         58:1c:5b:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2
QzNBMEUxQzkwHhcNMjYwMzI0MjAyNjM1WhcNMjYwMzMxMjAyNjM1WjAYMRYwFAYD
VQQDEw02OWMyZjM3Yy0yNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmTrytAtejhsHHSIzA83I/tUowPnci9w4UOb81Gs/ofjpbhCm0FX0eJxFfG8d
VzIzrMDrwKX0fKX1C+zztIyopIAaVE1flll1DKKedNsbccFTKT4mBtFcTZs/54ao
dUfmg7GCkZVDDJ77qxf0d1B+tAiyiNVbNB09ZvSn7TQlqO7MXYbvCKzq+qpsXbct
CzSLCEciCUUlVoZrNZ3e8Wge6rkMt5XWT1fZ/ujWmLDyIk1wvcdv56iZXXJ776Pm
qO6fdXcdLcPsAz8yMauTv82+4cUDfJ7jFcU1BeVMwbIpBGQBu1k4lSwwr1/atdlk
hcoTw0fQnj9PJBiBXP/P712QNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbsFzSG
CkvGcZVNElPlpaJFtKNQMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy
ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp
NFVjMzJUN2o1dk5zT2c0Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABHDYaI1uzuDPcGiitDSpA33FRX/easuvjWj7HqruLP7Kq0VmplQGYxHVFgyF
ziM2CaPqmgWr1GYnw7ElFCs312L6Blh/fBzgLluM2ZfcTzbXjLlY7SgYDjEmzECh
uSNE9Sbhx/9t0thOZLSlYwIggtSWfYkoK5aOdsMjWzWzmJve17jXKnva09jlEcSm
PJv+gFOl1SW8Yv/+HwLcDec/tOFjmdBaAf1BntGcKEfXWamW3eCsyFM0XFaHDEWQ
DJ2oRqXjLgKzTOuhHbkRgq2hdxxjh8x0oc23lkAl9Ihv1rbpf8RVY1LjNSx5NPP4
gq/uHQGI93/bFYLg+dmUWBxbjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:58 2026 by rpki-client