Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File:                     U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier:          Vj86GVDa0O2s80DhradC6UyXuyyNb6c02OtAm7iqz3s=
Subject key identifier:   96:05:BC:40:D4:89:91:A5:27:27:7F:1F:1A:A9:15:CB:10:63:98:65
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer:       /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number:          01AE
Signing time:             Mon 02 Mar 2026 00:11:48 +0000
Manifest this update:     Mon 02 Mar 2026 00:11:44 +0000
Manifest next update:     Mon 09 Mar 2026 00:11:44 +0000
Files and hashes:         1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: 4CTQsCwl063AUpyHztLe5QyyVfxIVeeFqV1iuafKyCA=)
                          2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
                          rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
        Validity
            Not Before: Mar  2 00:11:44 2026 GMT
            Not After : Mar  9 00:11:44 2026 GMT
        Subject: CN=69a4d5c3-c1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:5e:f6:a3:f4:61:c7:44:5d:5a:cb:c2:6c:
                    aa:2d:f9:44:e7:56:35:24:14:d5:89:14:e6:25:57:
                    c3:51:37:9a:c7:24:76:e7:e8:ec:7d:49:a5:72:c2:
                    52:ab:7c:d5:f5:81:c2:08:e7:ba:bb:ab:99:d2:d6:
                    1a:16:a6:9c:05:e3:29:b0:37:0a:89:01:89:d9:ce:
                    a1:d1:e3:d7:ee:20:6c:2e:c2:39:b8:bc:e1:ff:ad:
                    66:84:5c:65:1c:a7:aa:ec:e4:e0:10:ec:c8:d3:24:
                    f2:91:ca:e6:65:79:82:be:fd:c1:fe:47:ba:65:4f:
                    70:43:ff:f7:69:58:ca:ac:bc:43:35:75:d8:8a:66:
                    e0:fa:23:5f:95:ed:43:80:b5:a3:dc:b3:7e:12:9a:
                    e3:5b:50:c1:40:8c:8d:4b:bd:4e:2d:a4:11:27:02:
                    43:de:3e:46:76:d8:44:c6:da:26:45:5c:34:bc:83:
                    af:2d:a4:8d:b5:ca:e1:cf:b7:28:d9:a1:ea:83:65:
                    42:06:0d:b3:5a:03:cf:37:fb:28:04:48:f5:b1:73:
                    b4:03:98:b5:f3:7d:2c:16:fe:9a:43:f5:f9:75:3a:
                    3d:b7:be:97:0f:9d:b6:1b:1c:3e:e4:96:a1:cd:a0:
                    e8:a7:bf:c4:ba:a4:ea:a1:14:c5:34:e1:eb:49:96:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:05:BC:40:D4:89:91:A5:27:27:7F:1F:1A:A9:15:CB:10:63:98:65
            X509v3 Authority Key Identifier:
                keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:43:73:25:64:2d:30:13:ca:89:a3:a4:80:f5:f7:65:fc:
         ee:74:f7:ca:63:6a:ed:ec:4d:e3:8d:da:4d:fc:22:3a:39:64:
         00:eb:a2:96:13:8b:d3:39:1f:7e:07:d7:1b:fb:93:0e:5e:86:
         2d:5f:ee:f2:9c:23:0a:19:56:44:18:28:84:da:55:d9:5a:b4:
         fb:46:67:dc:62:b6:c1:18:8b:42:a8:e2:2d:26:3b:00:41:1f:
         9a:ad:eb:9e:f5:be:69:7f:95:a6:76:7f:78:4b:5d:01:52:94:
         55:2b:b9:51:ce:c7:df:d7:9a:fd:21:5b:07:49:ab:fa:19:83:
         5c:e8:ca:30:00:9b:1d:ad:fd:93:d0:f8:f9:63:e3:1c:99:19:
         9d:a7:e9:58:a7:14:19:35:45:7d:1f:98:61:60:d2:89:55:22:
         e0:d4:f4:57:17:a3:39:71:1d:92:21:a2:a2:9d:a1:fd:5b:fa:
         c8:5f:ed:14:c1:78:e2:a5:77:78:34:8d:22:79:58:99:00:bb:
         c0:21:53:63:1e:46:bc:ab:93:a9:b7:85:6b:bd:c6:5b:4a:74:
         7d:69:65:91:c3:78:b0:7e:a0:fe:17:01:93:2a:21:f6:8c:2a:
         14:9a:3f:20:d3:6f:56:c5:c9:f7:74:0e:2e:0c:24:91:ab:ac:
         7b:19:42:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA5QTMxMTAvBgNVBAUTKDUzQzBFN0YwNjhBQTFFRjAwM0EwQkVFMkE1RDUyREJD
ODlEQ0RGQjgwHhcNMjYwMzAyMDAxMTQ0WhcNMjYwMzA5MDAxMTQ0WjAYMRYwFAYD
VQQDEw02OWE0ZDVjMy1jMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdle9qP0YcdEXVrLwmyqLflE51Y1JBTViRTmJVfDUTeaxyR25+jsfUmlcsJS
q3zV9YHCCOe6u6uZ0tYaFqacBeMpsDcKiQGJ2c6h0ePX7iBsLsI5uLzh/61mhFxl
HKeq7OTgEOzI0yTykcrmZXmCvv3B/ke6ZU9wQ//3aVjKrLxDNXXYimbg+iNfle1D
gLWj3LN+EprjW1DBQIyNS71OLaQRJwJD3j5GdthExtomRVw0vIOvLaSNtcrhz7co
2aHqg2VCBg2zWgPPN/soBEj1sXO0A5i1830sFv6aQ/X5dTo9t76XD522Gxw+5Jah
zaDop7/EuqTqoRTFNOHrSZZj6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYFvEDU
iZGlJyd/HxqpFcsQY5hlMB8GA1UdIwQYMBaAFFPA5/Boqh7wA6C+4qXVLbyJ3N+4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDlBMy80M0ZCNjJGQThG
RTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2QURvTDdpcGRVdHZJbmMz
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U4RG44R2lxSHZBRG9MN2lwZFV0dkluYzM3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDlBMy80M0ZCNjJGQThGRTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2
QURvTDdpcGRVdHZJbmMzN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASqJDcyVkLTATyomjpID192X87nT3ymNq7exN443aTfwiOjlkAOuilhOL0zkf
fgfXG/uTDl6GLV/u8pwjChlWRBgohNpV2Vq0+0Zn3GK2wRiLQqjiLSY7AEEfmq3r
nvW+aX+VpnZ/eEtdAVKUVSu5Uc7H39ea/SFbB0mr+hmDXOjKMACbHa39k9D4+WPj
HJkZnafpWKcUGTVFfR+YYWDSiVUi4NT0VxejOXEdkiGiop2h/Vv6yF/tFMF44qV3
eDSNInlYmQC7wCFTYx5GvKuTqbeFa73GW0p0fWllkcN4sH6g/hcBkyoh9owqFJo/
INNvVsXJ93QOLgwkkausexlCRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:38 2026 by rpki-client