Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          fH0fR1rC7qrSx5oHI6EY9iLG4n+isf92tYUF2YGE5Jg=
Subject key identifier:   BD:4D:A2:49:C2:E9:2F:A6:8F:96:52:AF:55:E8:03:09:42:39:17:F0
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          01DC
Signing time:             Wed 25 Mar 2026 02:48:03 +0000
Manifest this update:     Wed 25 Mar 2026 02:48:02 +0000
Manifest next update:     Wed 01 Apr 2026 02:48:02 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: zZOzeVFsa/yKCr2K5EYdWKSJ/WJS2rxT/To2OYEfmbc=)
                          2: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=)
                          3: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=)
                          4: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Mar 25 02:48:02 2026 GMT
            Not After : Apr  1 02:48:02 2026 GMT
        Subject: CN=69c34ce2-2bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:61:ed:47:26:97:21:6d:6b:24:73:79:0d:
                    9f:02:2e:c3:1b:10:f1:47:52:62:f5:5b:7c:3e:87:
                    f3:2b:1d:31:de:8e:53:b1:1f:d7:08:fb:ba:e5:36:
                    a2:04:b7:41:d2:b7:d3:b7:ed:20:a3:e0:3b:fb:52:
                    4e:90:33:6b:11:6e:cb:e5:92:17:ea:3b:07:15:10:
                    3d:fc:42:ac:89:96:c4:56:ef:a3:22:34:a9:e6:54:
                    dd:98:0b:cf:e7:86:56:b3:b2:3a:93:15:8f:44:81:
                    8a:fc:c9:d4:55:8c:c1:e1:df:30:44:76:48:f1:c3:
                    55:e1:b1:2e:fa:94:9d:a2:15:3f:ba:96:0b:8f:6f:
                    b6:6a:bd:e9:cb:ab:0f:e1:54:95:0d:47:69:e9:58:
                    f1:0e:07:ff:f6:e7:ed:f9:4f:55:24:a6:74:c5:3e:
                    a9:0d:83:72:a8:eb:ff:b7:1c:46:72:a8:0a:40:db:
                    28:cc:c5:f8:f0:df:0d:bd:ed:81:f6:54:a3:94:f0:
                    0b:0b:13:bd:60:1d:b6:c4:08:d4:9b:61:c9:08:bc:
                    c0:fa:56:5f:d1:08:7c:c0:a6:8a:ad:cb:37:0d:f6:
                    02:cb:55:e9:89:f1:45:85:46:0f:35:81:02:f0:e3:
                    c0:1b:7d:70:e2:67:08:0a:64:8a:6d:1f:b5:24:ed:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4D:A2:49:C2:E9:2F:A6:8F:96:52:AF:55:E8:03:09:42:39:17:F0
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0a:ed:1a:56:bb:de:65:50:47:8c:d9:d4:d2:53:30:91:3e:
         86:67:8c:8d:ee:69:e0:38:49:7c:6c:4f:a1:83:55:40:db:dc:
         9b:f9:57:b9:1f:22:45:f7:2e:d9:aa:64:1e:84:f9:55:8e:fe:
         2f:90:d4:fb:1e:74:02:b2:4d:6a:37:51:84:ad:64:04:52:87:
         d8:46:a6:ea:a0:9e:37:1f:9d:9a:c0:61:7f:57:9c:91:05:a2:
         1d:1a:39:b1:ed:70:69:71:77:e7:39:60:c3:21:bc:f8:3e:f3:
         68:7f:af:a0:70:f6:5f:96:1a:46:0b:aa:22:e3:b9:7e:a0:9b:
         64:f7:56:8e:0a:38:4d:9a:9b:56:00:1b:77:65:18:ca:2f:12:
         e0:e9:48:3d:1c:9b:8e:65:b2:b8:32:da:52:f6:38:6e:69:8f:
         c6:e0:21:a2:86:f7:70:10:63:e1:64:21:10:c5:de:a3:e4:21:
         f5:57:51:2e:ec:02:35:19:fa:32:39:0c:46:60:15:01:7c:c0:
         83:de:7e:c2:af:38:d6:23:ef:c9:d1:85:87:e7:de:f0:a5:be:
         3b:ed:39:56:8b:57:18:1d:13:ac:0b:cc:b1:78:da:23:8f:89:
         3d:60:52:5c:7b:db:4d:b4:1c:e9:45:45:1b:78:a0:aa:9c:35:
         98:9e:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:57 2026 by rpki-client