Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
File:                     uQQiVZtYxNqonyJNSccf9E-byjQ.mft (raw, json)
Hash identifier:          o0T7P0ivvZoRlBGxffbPxpi//JULK6hMGudugvUx4fg=
Subject key identifier:   47:0C:64:47:CE:B8:CC:17:23:AC:88:6E:37:72:2B:87:14:EF:93:FB
Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
Certificate issuer:       /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
Manifest number:          0253
Signing time:             Wed 25 Mar 2026 01:49:14 +0000
Manifest this update:     Wed 25 Mar 2026 01:49:14 +0000
Manifest next update:     Wed 01 Apr 2026 01:49:14 +0000
Files and hashes:         1: uQQiVZtYxNqonyJNSccf9E-byjQ.crl (hash: sxPzL/8wMAVKFvrk+o9xkPf9StKUZlxUVg7OPhCqkVM=)
                          2: 4868355806A611F08F878981C4F9AE02.roa (hash: Lc8YGehrJGbqaoNm5IFD3ddC4TVllXFkB2NVqqtSkCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
        Validity
            Not Before: Mar 25 01:49:14 2026 GMT
            Not After : Apr  1 01:49:14 2026 GMT
        Subject: CN=69c33f1a-3fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:1d:e6:57:fc:fd:6a:ba:a8:52:bb:b2:17:
                    74:df:37:c5:c6:24:e2:4a:41:97:94:47:12:4c:73:
                    d5:67:26:bf:b9:e1:14:1c:af:cb:0a:70:a7:76:8d:
                    c5:1c:95:53:69:10:56:15:3f:01:31:4b:11:53:e2:
                    48:40:aa:84:97:d7:b3:e2:26:b2:2c:6d:ab:fc:16:
                    7a:b5:38:25:46:30:f9:67:42:35:1e:61:3d:b0:6f:
                    c0:ac:d8:a7:2f:10:9b:d9:9a:aa:59:d7:bb:4f:da:
                    b8:9e:cc:94:84:d8:63:32:8c:b8:c6:cc:b5:bb:90:
                    44:e9:5b:8a:27:c2:aa:5f:0b:f6:cb:34:f2:2b:b7:
                    4d:dc:7d:26:d7:d9:e7:f8:bb:1b:cf:1f:f3:e7:d8:
                    dd:b2:6b:5d:5b:75:a4:af:ac:df:e5:68:05:01:eb:
                    d9:45:f9:27:f6:39:65:ee:e9:86:64:de:86:13:33:
                    ab:e4:b5:a1:97:38:81:75:70:15:10:4d:18:c1:f9:
                    de:53:4a:7a:a4:1e:a3:38:f9:a2:ab:b4:bd:6e:d9:
                    04:b5:fa:1c:40:d7:81:8c:6b:f1:1d:4a:b3:5b:1b:
                    d3:3e:36:2b:35:d9:25:29:17:cb:d0:dc:ea:6b:ff:
                    88:72:f4:74:be:3b:cb:39:24:16:c8:97:89:08:93:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:64:47:CE:B8:CC:17:23:AC:88:6E:37:72:2B:87:14:EF:93:FB
            X509v3 Authority Key Identifier:
                keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a3:68:37:25:ce:b0:9d:65:9f:80:af:35:f7:78:ae:68:70:
         cb:be:a0:9a:1b:dd:2f:65:29:45:ce:ac:a0:1e:f9:54:86:f3:
         8a:b6:de:2d:42:5c:28:97:31:65:ad:30:21:96:93:20:11:7a:
         1c:6f:bf:08:2a:9a:77:ae:00:9a:d1:78:88:3a:b2:a3:79:ee:
         e8:45:15:d7:a5:cf:3e:f4:2e:34:be:4a:5b:be:9e:30:36:4d:
         97:5f:2e:cf:63:4d:ee:37:85:06:d6:ea:2f:8d:84:19:c0:da:
         97:f3:d8:94:bc:25:10:30:52:d8:d2:a4:fe:ac:f2:e3:89:19:
         82:45:d8:3f:d5:fd:93:70:9f:a4:00:5c:1b:96:95:6d:09:70:
         77:bd:60:dd:e0:2f:43:71:03:fb:49:bc:ee:97:70:1c:73:92:
         9a:9d:1f:b8:18:67:7b:8e:21:a4:0e:9a:39:6f:2e:85:63:6c:
         6a:7d:f6:de:f1:14:20:c8:76:38:1f:34:aa:4c:72:1a:ed:64:
         be:73:f4:72:64:00:3b:d4:21:f6:b7:66:23:70:80:a1:a8:62:
         c6:50:ed:c4:6f:30:3c:84:67:41:4f:7f:4b:71:49:e5:7d:9c:
         50:82:1e:13:cc:4b:ba:de:ae:8f:13:6b:52:18:e0:c3:1b:d8:
         84:5f:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:49 2026 by rpki-client