Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File:                     UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier:          VWVTDSMm5oRaMFGlsdKFrx0phL1P4hZl6Fo6zGo+vJU=
Subject key identifier:   43:1D:94:C8:23:35:BD:CB:9E:F2:B1:58:65:08:8F:E8:36:8B:45:84
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number:          3F
Signing time:             Wed 25 Mar 2026 07:42:25 +0000
Manifest this update:     Wed 25 Mar 2026 07:42:25 +0000
Manifest next update:     Wed 01 Apr 2026 07:42:25 +0000
Files and hashes:         1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: Oi9S3oWyZTzW1B7veVa02zfNsth8Zqw1ppgHuOuSYO0=)
                          2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: GaDjg2LGrHhGqPo1QDhu/WF1zoWXbcBF0LoFtrNXHC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
        Validity
            Not Before: Mar 25 07:42:25 2026 GMT
            Not After : Apr  1 07:42:25 2026 GMT
        Subject: CN=69c391e1-1524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:20:61:a5:48:3b:ee:7f:fd:29:4f:94:e9:
                    16:e2:7a:59:90:5f:c5:6b:9c:82:21:eb:41:b7:62:
                    4a:92:59:00:7f:46:8b:c7:e9:76:2d:80:29:31:22:
                    4b:a0:80:99:9e:e5:58:8a:65:0c:c8:1a:ef:b8:f6:
                    89:a4:84:1a:61:cc:c6:75:1c:8f:c6:71:bd:e5:e5:
                    df:b7:70:ed:87:a9:69:83:2d:4a:7a:3d:f6:a0:5f:
                    87:0a:f0:08:ba:47:da:d1:cb:24:df:2f:93:c4:c9:
                    51:7a:95:8b:d5:28:a6:0a:48:7f:0a:27:67:bb:16:
                    75:6a:49:92:75:a9:fc:fe:4e:2e:ce:57:ff:5c:1a:
                    fa:0a:53:0f:80:02:ee:14:d1:e1:a5:d6:64:89:b7:
                    1f:7f:ba:7b:5d:13:da:71:29:48:0b:06:24:41:21:
                    09:49:cd:48:13:8b:a8:b7:b3:77:c1:39:fa:ff:b6:
                    ec:95:30:c3:09:d0:5e:23:cc:76:f5:83:8f:41:5b:
                    1e:3a:03:aa:60:4b:01:45:ed:95:a2:92:50:05:ea:
                    c5:ea:7c:43:79:84:f2:36:ba:a0:02:ba:b7:f4:16:
                    ac:35:51:bd:89:63:d8:5d:0f:97:86:5e:27:e2:66:
                    91:98:16:01:6d:94:71:15:f2:df:02:e6:45:29:75:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1D:94:C8:23:35:BD:CB:9E:F2:B1:58:65:08:8F:E8:36:8B:45:84
            X509v3 Authority Key Identifier:
                keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:54:63:c8:d5:66:14:40:56:1a:74:1f:d8:fd:07:ac:f6:77:
         aa:30:fb:c7:22:23:1e:fc:87:d3:70:d5:37:86:d2:87:1b:f0:
         53:29:72:79:3a:fe:d5:04:93:af:64:ab:cb:cd:61:02:27:8b:
         c2:8e:8e:4f:d9:65:94:90:13:e4:80:fa:ed:8b:17:d1:84:f4:
         4a:f7:2f:e3:e6:26:22:4d:c7:ab:e0:78:80:30:17:4b:82:57:
         ce:00:a5:2e:68:9f:9a:5d:a3:82:05:f6:e8:89:9a:14:6a:e3:
         b4:55:07:04:82:a4:26:f0:13:85:c4:db:22:c5:6a:8a:9b:07:
         5f:62:02:c4:17:43:64:52:e3:f9:ca:e0:8e:79:5c:48:0c:4d:
         11:d7:ae:68:27:90:91:cb:3b:fe:af:03:95:c4:96:e9:35:d8:
         cc:cf:13:c3:4f:8b:ce:5e:e7:95:81:b7:43:1c:98:1c:36:cd:
         da:6f:7b:c0:3b:88:4e:31:a3:3c:37:cc:3e:df:c4:f8:20:9a:
         5e:e8:ca:f4:41:e3:e3:43:f1:26:9e:5d:cc:ae:e6:71:30:bc:
         e4:ec:4f:f3:d4:7d:2e:30:cc:0b:65:d1:7c:00:00:d7:9c:0a:
         e2:c4:c9:a8:6c:50:b7:f1:25:ef:5a:d3:22:72:18:b3:f7:49:
         e2:e3:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:32 2026 by rpki-client