Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
File:                     uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json)
Hash identifier:          +cST2oNWp2Ih3oMP9y+G/ewTOUBlLrCEXvkcAPy8JNE=
Subject key identifier:   24:A7:34:59:53:81:69:C3:AF:22:56:14:4E:90:06:10:BE:AF:2F:54
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
Manifest number:          01F2
Signing time:             Mon 02 Mar 2026 02:34:42 +0000
Manifest this update:     Mon 02 Mar 2026 02:34:41 +0000
Manifest next update:     Mon 09 Mar 2026 02:34:41 +0000
Files and hashes:         1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: c+FYkHqpTfhy/vqsEIEr7kuViFxF1Y6VHYtSjtCZDSE=)
                          2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: ov/9BkEaYkDmQmtSpTz5UFlrQf7IG2kL1CNch/NyMh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl
                          rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217, serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
        Validity
            Not Before: Mar  2 02:34:41 2026 GMT
            Not After : Mar  9 02:34:41 2026 GMT
        Subject: CN=69a4f742-9ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:83:09:44:4f:0f:b3:9a:fe:2d:bd:d2:ad:
                    94:67:77:d8:c1:5f:83:b8:1d:d3:1a:4c:31:c6:b9:
                    76:8c:08:56:9e:b1:d6:cf:6a:6b:75:16:ff:d6:41:
                    a9:b3:85:97:20:d4:9a:6f:0c:6f:b9:39:dd:58:20:
                    55:e3:1d:84:f5:29:c8:99:da:e1:5b:5e:a3:c0:81:
                    47:d8:11:be:6b:7d:d5:80:40:26:93:75:32:2a:c9:
                    b9:7e:70:9a:5b:ca:76:e8:32:2d:17:bf:ab:91:41:
                    01:35:12:5c:62:43:f8:39:7d:7c:71:51:de:2b:81:
                    25:11:78:fe:93:f5:39:9d:be:60:f0:47:de:d2:f0:
                    cb:c7:7a:d3:d3:40:d3:97:be:16:6e:38:62:cc:80:
                    97:29:50:0d:83:62:7e:4b:58:b8:8b:32:88:9f:48:
                    70:e7:1a:a9:22:84:88:33:ae:4c:b5:4b:10:c4:2e:
                    ed:09:92:d9:d6:27:2b:a4:32:50:9a:f8:94:4c:02:
                    94:97:09:57:8d:6b:ee:3f:4f:88:6a:79:fa:84:5b:
                    b5:d9:3f:69:75:eb:48:09:67:2c:8a:41:ec:90:4e:
                    19:d7:00:50:f7:c2:aa:5b:d5:d8:31:2f:29:e9:4f:
                    a1:c1:a9:b7:9d:9d:35:02:57:e6:d4:a7:8b:fe:d2:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A7:34:59:53:81:69:C3:AF:22:56:14:4E:90:06:10:BE:AF:2F:54
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c2:d0:fa:d7:16:2e:59:54:01:d5:a4:b6:79:40:00:cd:68:
         c0:7f:17:c3:b1:de:b3:6d:21:b7:ee:69:a7:ad:0b:12:8d:0a:
         9c:43:bd:85:d0:0a:9e:30:1c:96:d1:f0:20:a4:e4:62:e6:4f:
         c4:a2:3f:6a:53:fa:55:10:a9:e0:88:00:c5:51:a9:e0:27:2e:
         41:c7:8f:09:9c:5e:2b:f7:78:dc:f6:f1:fc:9d:bb:26:e9:e8:
         8c:43:19:97:1e:d1:23:a1:0d:bb:b8:6a:b3:0d:e6:e1:63:24:
         50:a9:e6:e8:c1:1a:67:f2:de:6e:e0:b7:0a:0c:8e:52:01:f5:
         4c:15:dd:bf:ad:aa:f6:4d:ee:9a:e3:43:10:95:0e:75:ce:83:
         00:72:95:69:12:6b:a3:3e:10:1c:e4:d9:ed:c3:0a:49:c6:8c:
         9b:56:73:77:5b:c7:c9:0b:5d:00:36:fd:70:e2:68:8d:52:8b:
         16:3d:a4:59:51:9b:d3:c7:1e:26:44:aa:cf:bd:84:c5:bf:96:
         a0:15:c1:4d:aa:b3:f0:15:25:aa:52:aa:f9:10:90:8a:81:d2:
         bd:f7:5f:26:95:79:06:9d:fb:dc:75:44:1b:69:e7:05:4e:39:
         71:09:eb:98:09:07:28:05:3c:79:d2:e1:3f:5c:ef:6c:5f:18:
         9b:5b:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:58 2026 by rpki-client