Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File:                     uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier:          NoUGVUoQERK9d+TsDd89y9a7ABbbip624f3v1LwHmqs=
Subject key identifier:   23:29:70:58:B1:A6:27:D0:3B:7A:91:26:E9:F0:E2:70:91:6D:54:67
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer:       /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial:       0CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number:          0CAD
Signing time:             Tue 24 Mar 2026 18:18:57 +0000
Manifest this update:     Tue 24 Mar 2026 18:18:56 +0000
Manifest next update:     Tue 31 Mar 2026 18:18:56 +0000
Files and hashes:         1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: xIoz5kPSqgcybxeafynH2362V+RzAI9yfbHSdPtr3l0=)
                          2: C4391160305611EABE7DF272C4F9AE02.roa (hash: BMZ1UeFP1Job+RaL0SOd32/rdZOcQ/RtABlN62ClMsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
                          rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
        Validity
            Not Before: Mar 24 18:18:56 2026 GMT
            Not After : Mar 31 18:18:56 2026 GMT
        Subject: CN=69c2d591-2e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:62:d4:de:a4:22:ed:bf:a4:90:c6:76:35:
                    30:9f:b4:28:79:47:60:82:a1:dd:a9:b4:4a:f3:bf:
                    f0:fe:23:e6:d2:46:7e:bd:76:39:e7:26:4a:27:87:
                    40:74:d8:d3:a1:06:87:bb:14:66:92:9a:c9:7e:06:
                    5a:7c:6e:f7:bb:4c:ec:63:c6:b4:b3:a0:a7:62:5b:
                    15:71:d8:b8:dc:2b:83:35:1c:90:3e:2a:58:ab:12:
                    26:3a:f0:cc:b4:e3:04:7c:4b:61:2e:a4:b4:96:72:
                    6a:8a:4f:c9:78:bc:7e:d1:b0:4e:4c:d4:ba:54:6d:
                    66:9a:58:e7:53:9f:0f:fc:03:e9:07:88:bf:2a:f0:
                    47:d3:51:0c:c7:53:f9:99:b0:07:a4:52:09:e3:a0:
                    e8:8b:db:74:a9:48:44:35:45:48:8e:79:92:90:a1:
                    76:c0:c4:67:e4:cd:a1:28:d0:ea:b2:95:ef:f0:1b:
                    52:15:bd:3e:59:ed:2f:b6:6d:17:ff:30:9a:ca:d4:
                    e6:56:99:cf:36:8c:e8:32:32:e4:74:d3:5b:40:13:
                    96:ff:ea:5d:c0:e1:0e:0d:cc:dc:49:42:51:2a:f5:
                    e6:96:9b:2b:2b:6b:5a:7d:cb:55:b0:3c:fa:c2:97:
                    78:38:0a:d4:a7:64:d5:9c:7b:8d:7a:1a:c7:ac:de:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:29:70:58:B1:A6:27:D0:3B:7A:91:26:E9:F0:E2:70:91:6D:54:67
            X509v3 Authority Key Identifier:
                keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:90:98:83:63:14:15:10:05:eb:ed:e4:13:1a:87:b2:4d:
         d2:f2:3c:2e:46:e3:bf:b5:8a:4c:20:b0:33:ed:c3:42:f8:08:
         f0:80:43:e5:41:42:e7:be:a3:54:62:56:b0:24:8a:a6:67:ea:
         90:dc:e4:97:e7:d3:de:17:e5:ad:69:72:fb:50:1b:34:c8:97:
         f9:ad:dd:e2:f2:7a:75:fe:f2:bc:37:77:e2:0c:70:72:34:23:
         dc:ff:ff:1d:d9:fa:fd:ca:9c:dc:ef:14:27:a6:d2:97:5f:1c:
         66:40:f7:9a:34:c4:1e:aa:5f:e0:f4:30:a7:0c:a9:88:1e:f3:
         f7:6a:26:7c:0f:a1:09:de:fb:3c:ba:a6:a2:98:c1:e2:47:9e:
         1e:f5:31:64:37:72:4c:c6:ce:6b:1b:bb:0b:b0:7e:62:96:6c:
         26:a3:4b:10:63:2e:bf:3f:7c:46:26:0c:bb:e3:88:18:86:e2:
         d6:38:52:6e:54:7f:0e:5c:a8:ed:a6:eb:37:0f:b9:78:52:77:
         b5:9d:2f:3e:54:fd:4e:05:55:af:a7:07:38:24:47:4b:3b:94:
         71:ca:f6:c2:c2:32:06:77:eb:ce:53:7d:43:a4:f0:1a:e0:d1:
         22:1c:76:35:67:18:f5:bd:ef:9b:6f:92:81:e2:64:ca:30:25:
         8b:01:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:36 2026 by rpki-client