Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          KYUxd5daM5+1GhEw61glIoq28YWvpI77rkTNCFNuU0I=
Subject key identifier:   69:0B:41:AB:D6:EF:56:F5:DC:C8:55:6E:AF:0A:ED:56:B5:49:E1:25
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       0846
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          081E
Signing time:             Tue 24 Mar 2026 20:51:22 +0000
Manifest this update:     Tue 24 Mar 2026 20:51:21 +0000
Manifest next update:     Tue 31 Mar 2026 20:51:21 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: XKUpReQd+xEOIXgr/jVYjT+DaaqM3JjJstwn+pVkoZ8=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4=)
                          3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: IQn111u6z6qLHojmECWDC2x1tW//DdSaFa0X28b5D0o=)
                          4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: Mar 24 20:51:21 2026 GMT
            Not After : Mar 31 20:51:21 2026 GMT
        Subject: CN=69c2f94a-d741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:80:2e:9e:9d:f2:06:09:25:f2:c1:97:c3:
                    ea:2e:df:14:7b:c5:49:2b:c2:87:bb:41:f4:ad:0b:
                    69:d9:3e:2d:6b:7d:b3:df:a0:90:0b:01:7f:46:80:
                    14:62:07:65:7d:ea:68:32:70:35:20:18:db:3b:30:
                    b1:3f:bb:f2:2c:83:f0:ef:42:78:be:b8:61:46:ed:
                    1f:75:1d:66:5a:65:f7:59:ef:08:fb:f2:5e:ad:66:
                    55:71:ae:86:50:ea:77:9d:42:49:47:45:67:8e:8e:
                    37:32:8c:d2:7a:56:53:28:ab:1b:9f:27:07:ee:68:
                    f8:41:cb:99:ff:70:16:77:43:6a:58:e5:43:95:f8:
                    16:4f:6c:97:83:d7:ec:95:2b:65:56:b5:7f:aa:94:
                    52:22:64:0b:3c:e0:4d:30:e5:4a:3d:71:e3:c0:9b:
                    a7:51:1e:33:c0:de:3f:f4:c0:03:2a:81:ee:ba:3d:
                    a5:70:14:66:93:5a:b8:70:27:f3:2f:25:b1:5a:65:
                    e8:1f:f6:84:35:ab:83:e2:a1:ba:01:51:ad:84:c0:
                    c1:56:3c:22:6c:a8:ea:c2:f1:04:14:a9:a6:0e:f7:
                    f3:7e:9d:11:8a:ec:e9:e3:2d:74:68:e5:33:d9:b9:
                    92:cd:66:7a:ce:36:28:c5:ae:c5:73:59:9d:a6:7a:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:41:AB:D6:EF:56:F5:DC:C8:55:6E:AF:0A:ED:56:B5:49:E1:25
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:3e:91:29:fb:48:58:f6:30:99:1f:20:c4:55:52:c6:61:
         07:ec:00:09:f0:58:cf:ca:89:8c:8b:c5:38:0c:a8:26:17:51:
         b6:ae:f0:4e:3d:55:b4:77:bd:24:94:47:9a:94:f8:54:c1:a7:
         e2:a8:0c:3e:28:c2:df:76:4b:a9:fe:27:cc:7e:2e:d4:99:fa:
         7a:62:82:ed:f4:59:1f:e7:8a:41:f0:bf:31:fa:36:bc:bc:c0:
         80:8a:6a:86:f4:6e:8b:01:d6:27:1f:36:b5:72:dd:22:42:9c:
         c8:6d:c3:f9:44:fb:24:c6:6a:2b:38:cb:b7:55:fe:c7:fd:79:
         c7:f7:38:bd:39:c2:77:bb:6d:05:28:a8:59:94:2a:76:72:fc:
         9b:17:60:0d:5d:85:86:08:1a:7c:91:5f:f1:50:91:cb:d4:70:
         9e:32:98:c5:7b:ad:f1:86:0e:3a:59:96:ae:09:a9:58:8d:b5:
         14:94:69:c1:95:e5:ac:0b:7b:e1:11:6d:ee:d7:20:11:ad:db:
         8b:0a:42:65:2d:2c:a8:f9:30:9d:ce:67:83:1f:e8:4c:06:25:
         9d:ef:a6:88:56:24:47:5d:cc:ab:76:ce:f2:d4:f0:79:95:92:
         5b:17:c5:6b:b5:5d:8a:1d:74:e7:23:b7:2d:f1:0d:41:13:0c:
         9e:64:fd:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3
MzU5REQ3NDAwHhcNMjYwMzI0MjA1MTIxWhcNMjYwMzMxMjA1MTIxWjAYMRYwFAYD
VQQDEw02OWMyZjk0YS1kNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgiALp6d8gYJJfLBl8PqLt8Ue8VJK8KHu0H0rQtp2T4ta32z36CQCwF/RoAU
YgdlfepoMnA1IBjbOzCxP7vyLIPw70J4vrhhRu0fdR1mWmX3We8I+/JerWZVca6G
UOp3nUJJR0Vnjo43MozSelZTKKsbnycH7mj4QcuZ/3AWd0NqWOVDlfgWT2yXg9fs
lStlVrV/qpRSImQLPOBNMOVKPXHjwJunUR4zwN4/9MADKoHuuj2lcBRmk1q4cCfz
LyWxWmXoH/aENauD4qG6AVGthMDBVjwibKjqwvEEFKmmDvfzfp0Riuzp4y10aOUz
2bmSzWZ6zjYoxa7Fc1mdpnqFQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkLQavW
71b13MhVbq8K7Va1SeElMB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4
MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjc3OS84OTAyNDk5NDE4MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1C
T2plcFdIZG1vQjl6V2QxMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr6A+kSn7SFj2MJkfIMRVUsZhB+wACfBYz8qJjIvFOAyoJhdRtq7wTj1VtHe9
JJRHmpT4VMGn4qgMPijC33ZLqf4nzH4u1Jn6emKC7fRZH+eKQfC/Mfo2vLzAgIpq
hvRuiwHWJx82tXLdIkKcyG3D+UT7JMZqKzjLt1X+x/15x/c4vTnCd7ttBSioWZQq
dnL8mxdgDV2FhggafJFf8VCRy9RwnjKYxXut8YYOOlmWrgmpWI21FJRpwZXlrAt7
4RFt7tcgEa3biwpCZS0sqPkwnc5ngx/oTAYlne+miFYkR13Mq3bO8tTweZWSWxfF
a7Vdih105yO3LfENQRMMnmT9cg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:55 2026 by rpki-client