Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
File:                     UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json)
Hash identifier:          9S8U/H6QY59y+lMvqrA1/AYHS9MAyuKrYeENWH6xdgs=
Subject key identifier:   E1:89:AE:20:F6:25:34:E5:A5:1A:40:5E:50:41:91:92:7E:AA:97:2A
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Certificate issuer:       /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
Manifest number:          026F
Signing time:             Wed 25 Mar 2026 01:32:16 +0000
Manifest this update:     Wed 25 Mar 2026 01:32:15 +0000
Manifest next update:     Wed 01 Apr 2026 01:32:15 +0000
Files and hashes:         1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: bdpdm8kZ6lYV7KwDzRdzBk8/fVykFR+tk+Kt21CxEKI=)
                          2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: clsZuFy5g+1emvntcOY/P2Vw/DD0Zep7TP+9f225EEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
                          rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
        Validity
            Not Before: Mar 25 01:32:15 2026 GMT
            Not After : Apr  1 01:32:15 2026 GMT
        Subject: CN=69c33b1f-d9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:0c:e5:fe:e2:60:aa:3f:24:f7:92:65:42:
                    38:f9:2d:4d:ce:42:b4:d5:e9:0b:0a:ba:3b:80:23:
                    36:46:2a:60:41:53:e0:9a:4c:e9:f8:04:77:91:c4:
                    26:05:67:41:91:df:9d:67:22:c1:48:c4:f3:e0:49:
                    84:60:8e:9b:7c:05:d7:8b:f9:cb:d4:a5:54:85:70:
                    61:51:23:27:bd:63:04:e2:2d:a0:b9:2f:6e:9b:06:
                    1f:44:69:dd:19:af:ec:24:6f:d3:c7:68:a7:d5:57:
                    b0:f1:97:dc:f4:23:ed:7e:7c:ca:a4:bd:e4:b4:a3:
                    cc:28:5a:53:cd:6f:b0:b0:b1:8a:75:f1:45:77:20:
                    e5:08:5c:9c:f4:e2:14:e9:66:e3:5d:09:05:e7:c0:
                    51:5c:13:85:aa:a1:c6:36:aa:47:c0:2a:5a:98:da:
                    0d:f6:9b:1a:bf:b1:17:72:09:ee:c2:a1:6a:21:75:
                    32:f7:7b:71:64:b3:fa:d0:59:fd:55:4d:c2:7e:3f:
                    f0:2e:29:4d:d9:6f:0a:c6:27:40:c3:27:51:07:97:
                    1a:7f:8b:d0:7d:73:16:61:f4:03:44:cf:31:ae:b6:
                    7a:9b:59:80:63:aa:c3:3e:da:41:06:92:28:87:8a:
                    a7:ed:f7:71:a0:fc:ed:52:d1:e8:c5:6c:cc:78:7a:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:89:AE:20:F6:25:34:E5:A5:1A:40:5E:50:41:91:92:7E:AA:97:2A
            X509v3 Authority Key Identifier:
                keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:3b:d8:56:0b:06:6d:40:bd:2d:a6:dd:d1:b0:9a:47:45:
         55:58:ef:62:f4:0f:2b:04:19:99:a2:b9:34:9d:8e:94:12:72:
         bb:48:2c:c9:3f:e9:f6:74:c9:85:6e:e1:f0:18:bd:e9:d5:9d:
         bc:35:90:b2:3c:1f:f7:79:04:77:4e:dc:3b:ff:6f:fc:4e:1b:
         03:d0:42:e3:8c:33:74:d3:7a:ea:17:1f:47:50:17:6d:e4:a3:
         70:a4:ad:f3:09:9f:4a:62:32:f8:17:21:32:cd:c8:e0:c1:b3:
         58:7c:c9:c8:1d:a5:37:93:22:aa:2a:8f:66:94:f2:4c:99:7b:
         54:7f:13:90:b5:8f:89:4b:a0:12:ca:96:7e:a2:73:9a:23:dc:
         60:59:2c:22:ac:62:94:be:80:c6:1b:28:ea:f5:a6:52:0d:a6:
         0b:91:fa:8f:47:33:ef:48:c3:89:55:9b:e9:b3:77:52:cc:95:
         29:bb:91:bf:bf:85:08:18:76:50:7c:46:b0:84:fb:43:7d:84:
         07:78:76:c8:4a:ca:22:cf:6b:37:1b:7f:dd:29:ce:58:64:38:
         ae:c2:fa:a5:53:02:77:f8:f9:90:9b:ff:03:4e:76:d4:57:c5:
         12:59:39:55:85:a4:72:c2:32:b5:f2:a2:5f:e5:fd:7f:3e:b3:
         c5:62:ae:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNENjUxMTAvBgNVBAUTKDUwMDhCRTA0MUY5OTk3QjI1OUQyNTg0NDgzQTUzQTBE
RkYwQjE3OEMwHhcNMjYwMzI1MDEzMjE1WhcNMjYwNDAxMDEzMjE1WjAYMRYwFAYD
VQQDEw02OWMzM2IxZi1kOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6MM5f7iYKo/JPeSZUI4+S1NzkK01ekLCro7gCM2RipgQVPgmkzp+AR3kcQm
BWdBkd+dZyLBSMTz4EmEYI6bfAXXi/nL1KVUhXBhUSMnvWME4i2guS9umwYfRGnd
Ga/sJG/Tx2in1Vew8Zfc9CPtfnzKpL3ktKPMKFpTzW+wsLGKdfFFdyDlCFyc9OIU
6WbjXQkF58BRXBOFqqHGNqpHwCpamNoN9psav7EXcgnuwqFqIXUy93txZLP60Fn9
VU3Cfj/wLilN2W8KxidAwydRB5caf4vQfXMWYfQDRM8xrrZ6m1mAY6rDPtpBBpIo
h4qn7fdxoPztUtHoxWzMeHqymQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOGJriD2
JTTlpRpAXlBBkZJ+qpcqMB8GA1UdIwQYMBaAFFAIvgQfmZeyWdJYRIOlOg3/CxeM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Q2NS9FQTFFNjJENjdD
NzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3SlowbGhFZzZVNkRmOExG
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBaS1CQi1abDdKWjBsaEVnNlU2RGY4TEY0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0Q2NS9FQTFFNjJENjdDNzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3
SlowbGhFZzZVNkRmOExGNHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdPs72FYLBm1AvS2m3dGwmkdFVVjvYvQPKwQZmaK5NJ2OlBJyu0gsyT/p9nTJ
hW7h8Bi96dWdvDWQsjwf93kEd07cO/9v/E4bA9BC44wzdNN66hcfR1AXbeSjcKSt
8wmfSmIy+BchMs3I4MGzWHzJyB2lN5MiqiqPZpTyTJl7VH8TkLWPiUugEsqWfqJz
miPcYFksIqxilL6Axhso6vWmUg2mC5H6j0cz70jDiVWb6bN3UsyVKbuRv7+FCBh2
UHxGsIT7Q32EB3h2yErKIs9rNxt/3SnOWGQ4rsL6pVMCd/j5kJv/A0521FfFElk5
VYWkcsIytfKiX+X9fz6zxWKuGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:46 2026 by rpki-client