Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
File:                     UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft (raw, json)
Hash identifier:          Ph9MJsCe3FEFM19yF8NlZaWrp2PD3eR77/Vn8OOjpws=
Subject key identifier:   CA:AF:4D:94:36:50:B4:0E:CC:64:E7:9D:AA:87:B6:08:05:C9:75:9B
Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67
Certificate issuer:       /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
Certificate serial:       06F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
Manifest number:          06E9
Signing time:             Sat 28 Feb 2026 22:35:25 +0000
Manifest this update:     Sat 28 Feb 2026 22:35:25 +0000
Manifest next update:     Sat 07 Mar 2026 22:35:25 +0000
Files and hashes:         1: UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl (hash: hEVLiVsLiInCwFwfyKDlookZX0pTA0vPgej2fzuSo8Y=)
                          2: C3FEC56C855711EB871D267FC4F9AE02.roa (hash: pn41QbwI43rxSeVr0SInvG6/Q6c7Gj04UiR8iNhF0jM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl
                          rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911902E, serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
        Validity
            Not Before: Feb 28 22:35:25 2026 GMT
            Not After : Mar  7 22:35:25 2026 GMT
        Subject: CN=69a36dad-1594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f8:9a:71:0c:6d:22:8d:88:66:55:67:31:01:
                    38:62:1e:d6:0a:a5:e0:7d:dd:33:d5:fd:21:b3:0b:
                    a9:e8:c0:49:c7:56:38:16:c2:10:4e:ef:62:47:11:
                    96:3a:e8:aa:c2:96:c7:66:49:d7:12:d8:20:67:84:
                    e9:fb:2c:59:1e:d9:13:91:cc:d8:ef:9b:5e:bb:9b:
                    1c:b5:0b:2b:99:90:3b:98:c5:9f:a9:08:db:e9:3a:
                    7f:f2:5c:e2:70:7e:08:81:8d:b2:a3:33:94:ae:84:
                    4b:19:50:19:e0:93:09:a1:d7:c2:34:b4:4f:2b:81:
                    00:f6:bc:4a:16:41:88:9e:51:c0:76:16:22:32:2f:
                    f1:25:5c:21:2c:bd:7b:06:70:53:dc:d4:d6:ba:fc:
                    1b:7e:f2:48:09:dd:74:3f:34:67:0c:a2:91:22:67:
                    6f:26:6d:bb:45:e8:c5:da:da:e6:35:9f:5a:7d:f3:
                    28:ae:e8:34:77:f5:43:21:18:fa:c9:cd:d1:37:81:
                    3d:68:d2:68:f3:41:7e:a6:58:54:20:74:35:a0:48:
                    14:67:20:ba:8e:59:1f:2d:21:5d:41:f9:36:3e:0a:
                    35:f3:f1:5a:3f:80:52:92:dc:07:42:37:7c:71:3d:
                    5a:cc:3b:d8:31:85:e9:03:ce:dc:9e:c4:56:00:1a:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:4D:94:36:50:B4:0E:CC:64:E7:9D:AA:87:B6:08:05:C9:75:9B
            X509v3 Authority Key Identifier:
                keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5f:3d:0c:7e:1c:94:f6:16:b6:3d:95:13:90:6f:21:79:32:
         a7:52:b7:19:1c:60:f4:d8:d8:7f:e9:5d:c3:71:65:5d:eb:40:
         a9:20:f8:0a:59:c9:06:66:0a:76:15:cc:6d:64:61:d7:18:e6:
         ac:cf:78:cc:ee:55:71:de:ce:9d:4e:b3:46:48:7d:5b:1a:b7:
         80:be:55:55:ff:fe:cd:94:11:b0:39:78:60:e3:28:b9:ec:27:
         87:6a:a2:73:07:4e:c9:41:ff:e5:b9:c4:2c:74:0a:8a:fb:88:
         5a:e8:c2:b1:7f:7b:ec:63:a8:2e:c1:93:95:64:af:6c:03:36:
         93:92:bf:94:7b:6c:7d:8a:5c:f2:e0:8c:8a:3a:ff:a4:ab:4b:
         bc:21:e7:27:a7:68:a5:ea:f2:7d:01:05:3b:b3:f6:f4:26:57:
         f5:b6:88:f2:23:04:48:4f:eb:9a:5d:b1:6f:b5:ab:59:7a:ea:
         55:ca:d0:80:f8:1b:c4:26:0e:da:8e:b4:fa:78:e9:c6:8e:58:
         8c:95:97:40:c2:1c:11:18:d9:e1:d5:53:a0:2c:8f:d1:8f:6c:
         e6:79:bc:07:76:8c:c3:a3:2b:ab:ba:21:88:7c:77:6e:ed:07:
         db:6a:78:92:98:ca:a1:ef:5e:a7:e8:14:f2:96:42:cc:3a:0d:
         be:88:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:19 2026 by rpki-client