Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
File:                     uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json)
Hash identifier:          2qbpyhgbuSvFhyJs06CyQfZYSTsglgazkKvp4pnXg0g=
Subject key identifier:   06:B7:42:CD:D8:A0:05:F7:F9:C6:94:EE:07:12:6F:EF:47:E5:75:14
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Certificate issuer:       /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial:       0AD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
Manifest number:          0AC3
Signing time:             Mon 02 Mar 2026 00:56:28 +0000
Manifest this update:     Mon 02 Mar 2026 00:56:26 +0000
Manifest next update:     Mon 09 Mar 2026 00:56:26 +0000
Files and hashes:         1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: UuF3ttnKYA+W4peh/Feh9WKaCfq3KceTew0DCgf4ugA=)
                          2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: brgV9aJmNOwONrVV43STCn+H/BafcYN1QUNn18D97nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
                          rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
        Validity
            Not Before: Mar  2 00:56:26 2026 GMT
            Not After : Mar  9 00:56:26 2026 GMT
        Subject: CN=69a4e03c-a224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:e4:98:cb:76:c8:78:1b:72:d3:58:3a:dd:
                    c1:f3:3c:6a:8e:b1:19:df:53:2f:11:e6:00:21:4c:
                    eb:52:23:3f:f5:c1:75:6e:db:53:d3:83:79:f1:20:
                    ad:9b:02:e5:5c:5e:de:04:1d:9a:56:f5:03:25:e4:
                    31:77:eb:3e:9b:1e:ca:62:7a:e3:73:d8:03:86:6f:
                    49:21:b0:68:7d:6c:f4:e5:bf:6e:f9:79:f9:7f:ab:
                    b5:38:23:f9:cd:55:6f:ee:4e:91:69:07:ee:10:dd:
                    99:55:45:f3:d9:0b:23:ee:c9:85:b9:c6:bf:08:68:
                    04:de:73:d2:f9:1a:7c:21:53:31:8b:a9:70:d0:c9:
                    8c:43:d4:b7:51:9f:87:a4:07:15:49:a8:0c:ae:7c:
                    f8:07:d0:44:df:c9:c1:c8:2c:96:9a:a7:65:00:cf:
                    e3:94:c1:a2:2d:c5:eb:27:f7:e7:66:8c:1a:ac:d6:
                    c8:31:8e:c3:b2:b8:8e:d1:5c:71:f1:ed:61:28:55:
                    0f:ff:c7:f5:92:0a:ea:69:6a:ba:00:59:a9:5b:fa:
                    64:90:e6:f2:4b:d0:bb:7f:75:e0:ef:6a:38:a4:c2:
                    10:c4:b9:27:d6:9f:49:bc:4a:f9:f8:0b:ea:32:64:
                    71:02:0d:91:5f:6d:ac:33:9d:80:92:e7:78:24:ba:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B7:42:CD:D8:A0:05:F7:F9:C6:94:EE:07:12:6F:EF:47:E5:75:14
            X509v3 Authority Key Identifier:
                keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0a:9e:81:d7:a2:44:48:ce:62:59:31:b9:c9:9b:77:cf:d1:
         28:ec:b4:6d:01:84:89:04:6d:06:81:52:78:17:b8:af:e3:02:
         15:31:8a:5a:bd:1b:bb:7c:a6:48:89:80:37:1f:dc:5e:6d:16:
         30:77:e6:de:5c:96:fc:55:e9:56:59:71:ef:f2:d9:ba:3a:93:
         22:44:45:6e:09:3b:79:9d:10:bc:2d:cb:7b:75:53:ae:fa:c9:
         a4:ed:f1:cc:2c:92:45:a2:17:98:f5:28:c4:24:cd:15:7d:b5:
         f5:14:75:d6:80:8d:6e:86:43:0b:09:93:43:c5:0f:b9:a5:0b:
         26:7e:a0:4d:a8:28:f0:57:af:a8:45:f4:e9:7b:ff:ca:3b:a6:
         ba:ce:51:a8:ac:7a:30:ae:ba:74:09:3c:2a:f0:52:9c:dd:da:
         95:ed:bc:c1:7e:c3:11:20:de:1b:49:62:e8:8c:0a:70:df:a0:
         de:8c:02:72:c7:3b:6c:80:8d:25:05:9b:35:21:c0:41:3f:07:
         ed:30:7e:d7:3b:53:cc:62:b8:cd:7e:60:be:92:bf:6c:85:be:
         42:22:6c:c9:0b:71:74:76:86:c6:a1:56:97:e0:3b:aa:e8:e5:
         51:17:63:eb:06:69:96:93:4e:a9:f3:73:f7:47:84:b5:db:5c:
         2c:38:7e:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE
REMwM0VFNkIwHhcNMjYwMzAyMDA1NjI2WhcNMjYwMzA5MDA1NjI2WjAYMRYwFAYD
VQQDEw02OWE0ZTAzYy1hMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0CDkmMt2yHgbctNYOt3B8zxqjrEZ31MvEeYAIUzrUiM/9cF1bttT04N58SCt
mwLlXF7eBB2aVvUDJeQxd+s+mx7KYnrjc9gDhm9JIbBofWz05b9u+Xn5f6u1OCP5
zVVv7k6RaQfuEN2ZVUXz2Qsj7smFuca/CGgE3nPS+Rp8IVMxi6lw0MmMQ9S3UZ+H
pAcVSagMrnz4B9BE38nByCyWmqdlAM/jlMGiLcXrJ/fnZowarNbIMY7DsriO0Vxx
8e1hKFUP/8f1kgrqaWq6AFmpW/pkkObyS9C7f3Xg72o4pMIQxLkn1p9JvEr5+Avq
MmRxAg2RX22sM52Akud4JLri4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAa3Qs3Y
oAX3+caU7gcSb+9H5XUUMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC
RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk
SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKwqegdeiREjOYlkxucmbd8/RKOy0bQGEiQRtBoFSeBe4r+MCFTGKWr0bu3ym
SImANx/cXm0WMHfm3lyW/FXpVllx7/LZujqTIkRFbgk7eZ0QvC3Le3VTrvrJpO3x
zCySRaIXmPUoxCTNFX219RR11oCNboZDCwmTQ8UPuaULJn6gTago8FevqEX06Xv/
yjumus5RqKx6MK66dAk8KvBSnN3ale28wX7DESDeG0li6IwKcN+g3owCcsc7bICN
JQWbNSHAQT8H7TB+1ztTzGK4zX5gvpK/bIW+QiJsyQtxdHaGxqFWl+A7qujlURdj
6wZplpNOqfNz90eEtdtcLDh+yQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:22 2026 by rpki-client