Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
File:                     u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json)
Hash identifier:          /F7IyGV3UIx6r9OtgbMlwFIwmDoBwvTAriFJgLxAobg=
Subject key identifier:   52:85:46:3E:3A:3C:A5:1A:15:C0:A0:EC:B9:E2:13:AC:B8:E0:A0:C1
Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
Certificate issuer:       /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
Manifest number:          0368
Signing time:             Sun 01 Mar 2026 23:50:50 +0000
Manifest this update:     Sun 01 Mar 2026 23:50:47 +0000
Manifest next update:     Sun 08 Mar 2026 23:50:47 +0000
Files and hashes:         1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: 7/VNNhO/pYUBsrljgVPVRumvSKk0ICKbkguoTCijw4Y=)
                          2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: Fe5K6ZkUrGV8sNMXvsh32QNy4vnrTCujmZ10PMxAPR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
                          rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
        Validity
            Not Before: Mar  1 23:50:47 2026 GMT
            Not After : Mar  8 23:50:47 2026 GMT
        Subject: CN=69a4d0d9-73f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:67:9c:21:45:79:fb:b2:b1:2f:eb:71:17:18:
                    58:6c:1d:b4:7c:79:d5:6c:02:95:a7:39:86:03:20:
                    d1:95:28:b2:69:0e:aa:c9:b8:bd:df:9b:ce:81:bf:
                    27:70:4a:ec:8a:73:f2:24:1f:e9:9d:1d:40:e7:7e:
                    20:90:60:b9:eb:4d:51:a7:96:fd:e1:09:67:75:32:
                    f0:01:90:cd:e3:7b:47:e5:3e:2a:ce:89:be:69:d1:
                    e9:6e:fd:9f:dd:09:ff:e8:cc:1a:37:c6:bb:b5:d6:
                    82:72:d1:17:d9:c8:08:30:91:71:7c:59:37:10:52:
                    5f:9c:5e:e1:7b:55:03:7f:3f:33:cd:60:40:8a:a4:
                    3c:b7:6f:ca:10:f8:3e:cc:dd:80:c1:05:17:51:f0:
                    c7:b8:b9:87:a0:1d:0a:b6:7b:49:06:c8:0e:02:ac:
                    a5:f2:f2:fc:ee:0d:d9:96:c8:30:43:f1:9f:14:bd:
                    4c:8b:9e:cf:55:c3:ed:5c:8b:17:f5:03:5c:08:f7:
                    a7:a9:a6:3d:0f:27:29:e7:e4:02:23:ca:28:cb:ca:
                    21:58:1b:49:62:26:67:3a:e9:cb:32:0a:a2:62:49:
                    1e:6d:ad:ca:9f:1d:48:f0:e6:97:67:b7:ca:5d:c9:
                    fc:8f:bc:7b:c3:d7:90:ac:50:dc:ad:3d:a5:8e:1e:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:46:3E:3A:3C:A5:1A:15:C0:A0:EC:B9:E2:13:AC:B8:E0:A0:C1
            X509v3 Authority Key Identifier:
                keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:5a:05:55:cf:12:a7:c4:50:fd:0b:2e:7a:1f:de:78:34:
         4e:1f:44:d7:d1:b8:12:a8:4a:0e:2a:28:f5:c5:e6:2c:47:c5:
         5e:d3:23:67:52:2a:34:ff:e8:c0:63:68:3d:35:42:f9:56:57:
         44:7a:6c:de:a0:2e:40:58:31:da:e0:53:fc:ed:a8:16:3d:ea:
         ec:4d:cb:8e:bc:6d:bb:17:e6:5e:b2:04:54:64:a3:86:af:b5:
         0b:da:b4:3f:57:07:4b:f3:eb:66:a5:78:83:86:6b:8d:7e:66:
         8a:5b:81:a4:bd:48:d7:72:b8:2d:3b:80:8b:05:44:fb:e6:31:
         77:fa:45:91:e5:aa:ec:54:f2:d5:7a:94:5e:f2:65:e1:4b:46:
         eb:cb:92:5a:a7:01:ed:08:b1:f6:03:86:51:be:d1:ca:8c:f9:
         31:d3:8d:40:f0:7a:34:55:c6:2f:25:28:6b:f4:f9:36:02:6d:
         57:af:d1:7c:c9:db:c1:de:56:ca:7b:62:91:09:84:c7:57:12:
         87:fe:df:53:dd:a4:b8:e7:f6:75:29:bc:c9:79:31:0d:2d:b6:
         ac:7c:44:e4:96:84:fc:59:cd:82:4b:58:41:04:92:21:a8:0a:
         5a:ce:7a:8a:11:aa:4d:ee:8d:08:bb:8a:9a:3e:86:a7:ab:51:
         03:41:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:24 2026 by rpki-client