Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File:                     UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier:          SXfqwCl1ZnRhgjNkFSOw1yfnPtmr8AUoXTfDyevQDQ4=
Subject key identifier:   FC:5E:78:AE:6C:71:59:1D:02:E2:F6:E1:B4:81:6B:F0:A6:26:26:C7
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer:       /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial:       0C11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number:          0C07
Signing time:             Mon 02 Mar 2026 01:16:25 +0000
Manifest this update:     Mon 02 Mar 2026 01:16:23 +0000
Manifest next update:     Mon 09 Mar 2026 01:16:23 +0000
Files and hashes:         1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: wkWffafl6l5H9rrTZOBA1/5paZ+kY9ZQCUrXZ6E9VO8=)
                          2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
                          rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3089 (0xc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
        Validity
            Not Before: Mar  2 01:16:23 2026 GMT
            Not After : Mar  9 01:16:23 2026 GMT
        Subject: CN=69a4e4e9-33a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:8d:c3:6e:79:3e:93:db:18:a1:2f:c4:55:
                    6a:30:7a:00:d2:50:c8:2e:7a:df:ac:d0:4f:33:a7:
                    90:1a:94:bb:7e:19:16:14:7d:1c:0b:12:74:36:31:
                    40:55:55:e6:78:8c:95:d4:eb:45:a9:4b:71:21:94:
                    a5:8a:c6:fd:b0:ec:1a:28:09:6a:c5:64:f3:53:42:
                    ad:64:59:f1:ae:90:b1:0b:48:d1:66:25:7e:7b:65:
                    1e:7c:fc:32:e9:6c:a1:be:9d:6c:43:f1:0e:d4:40:
                    d2:f9:75:e9:0c:31:b2:2a:29:62:ca:87:57:cb:3e:
                    4c:9a:b8:84:0f:17:55:28:16:63:ae:ca:ef:05:81:
                    b7:cd:f1:13:fd:5b:be:bc:52:4e:13:bd:63:1f:48:
                    db:7c:37:70:4b:51:1f:4e:f0:07:f3:cc:4a:72:dd:
                    e8:97:cf:d3:f6:bf:f3:e6:f9:79:12:1d:45:f2:70:
                    46:78:e8:3d:56:52:17:85:e6:38:99:d1:95:fb:87:
                    52:41:6d:a6:1e:60:b7:73:9e:55:0c:d4:04:04:68:
                    1d:20:31:fa:7b:bf:51:ac:a4:ae:55:5a:61:70:94:
                    fb:49:06:dd:3f:5d:9c:7b:40:6c:6a:56:11:9f:fe:
                    e7:f2:3d:35:7e:d2:06:9f:ac:4c:10:dc:2c:5d:f9:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:78:AE:6C:71:59:1D:02:E2:F6:E1:B4:81:6B:F0:A6:26:26:C7
            X509v3 Authority Key Identifier:
                keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:82:24:71:7a:d3:ea:ab:6e:64:78:2c:eb:3c:c6:d0:86:08:
         bf:e1:3c:d1:98:6b:2c:a0:e2:50:a3:94:5b:28:f8:ef:e5:17:
         57:0d:13:28:7d:3e:af:c6:ec:41:fa:39:d0:ac:de:6a:e4:ba:
         8f:ee:0c:08:52:36:8b:16:89:1e:b3:e0:52:c6:2e:3c:93:41:
         2f:91:3d:89:56:e8:e6:8a:05:f8:c1:30:72:a6:a9:a1:e4:c4:
         ab:f8:f8:d2:c2:21:04:b7:c3:55:9e:37:62:a6:4d:72:ff:32:
         e6:c6:7a:5d:71:63:79:e7:f2:29:8e:6f:81:48:70:3b:e1:3b:
         e0:78:9f:ce:4d:29:20:f9:c3:66:8c:41:a2:83:83:f5:42:99:
         c4:b3:73:6a:64:3d:a9:ba:eb:ce:23:de:99:0a:7a:67:be:0f:
         42:63:e2:0a:89:75:09:bc:a5:07:75:07:ef:69:f5:48:e6:29:
         b7:7e:0f:18:ff:57:e5:51:e3:2b:8f:ca:91:a6:a1:d0:9d:b5:
         bc:70:dc:ff:33:66:b1:43:78:b4:67:12:0b:df:30:b5:68:5e:
         32:36:ce:84:5e:ea:e0:d5:17:b0:5a:99:79:77:c2:00:67:e0:
         4e:14:b6:0b:8d:95:c1:78:54:f8:43:f1:02:84:fb:fe:e3:eb:
         07:26:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:05 2026 by rpki-client