Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
File:                     UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json)
Hash identifier:          aSB1El6Xn3XNm0iCiE1D/AnKPS1F+dviU2TwbRzzSXY=
Subject key identifier:   C1:B8:77:3B:C8:DA:71:4C:18:ED:3E:18:BB:E4:BB:ED:41:70:4B:3C
Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57
Certificate issuer:       /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57
Certificate serial:       0DFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
Manifest number:          1613
Signing time:             Mon 02 Mar 2026 02:29:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:29:52 +0000
Manifest next update:     Mon 09 Mar 2026 02:29:52 +0000
Files and hashes:         1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: ERdepMkhYSpUlYxy5mnv4574G1wTqn621Jf4ue/iCgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=50FBB403643473F991273626277A922C0706AC57
        Validity
            Not Before: Mar  2 02:29:52 2026 GMT
            Not After : Mar  9 02:29:52 2026 GMT
        Subject: CN=69a4f621-9f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:cb:39:c4:f1:8d:77:27:09:6e:8c:5c:31:
                    63:c9:5c:9c:64:0d:87:f3:99:8b:91:8c:66:22:fb:
                    b5:ef:75:30:5d:8d:b5:0f:09:91:fa:95:7a:c1:8b:
                    70:69:1d:b3:26:f4:c9:b8:37:b2:43:bf:e1:69:48:
                    72:02:38:9b:bf:22:3a:a1:19:2d:e8:07:8f:37:94:
                    ce:a4:d5:3f:30:5c:23:97:70:a9:61:a1:90:c3:89:
                    7a:b6:ba:e8:4e:64:d9:d5:24:e7:3a:53:e8:27:e1:
                    a2:a5:32:d1:3c:8d:5e:c0:e3:ab:8c:74:bb:4b:be:
                    3f:c8:5c:87:ea:5b:61:cc:be:03:23:3e:27:08:89:
                    4f:71:9f:52:27:a6:88:8d:87:9e:7f:b1:89:5b:65:
                    63:83:24:19:2a:e9:36:58:45:b9:c9:e7:72:53:ae:
                    5b:60:c5:5d:cf:23:8d:f6:2e:d4:83:f9:66:b5:78:
                    8b:03:00:6e:c2:e2:fe:cc:76:41:21:5a:8d:4e:fa:
                    d0:7d:fe:ab:e2:a7:8c:c3:5e:43:1f:06:a2:96:89:
                    36:80:13:a1:2d:cc:97:c0:11:5f:05:51:28:b0:d7:
                    36:0f:43:b2:84:a9:5f:42:8e:48:55:44:8e:6b:78:
                    6c:28:8d:6b:5e:79:33:01:cd:20:ba:84:ef:07:93:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B8:77:3B:C8:DA:71:4C:18:ED:3E:18:BB:E4:BB:ED:41:70:4B:3C
            X509v3 Authority Key Identifier:
                keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:e3:2c:1d:63:d3:18:4c:4b:d3:ed:9b:aa:ad:44:86:75:
         98:20:00:a9:9d:70:12:ad:9c:26:f0:98:fb:11:6c:2e:0e:89:
         f7:5b:4c:65:a6:07:1a:96:5c:d6:0b:68:ba:6d:1f:70:64:92:
         d7:90:84:bc:7d:1e:79:2a:f4:46:1a:f8:90:bd:2e:04:63:8b:
         a0:d8:cd:b6:2e:1a:64:e4:f8:8b:1e:d4:27:6e:ea:32:43:a4:
         81:48:b4:cf:30:7b:a3:cc:de:f6:62:a0:dd:1a:da:c0:ec:c9:
         df:f1:e7:d4:44:bf:15:4c:8f:ca:42:df:0f:bb:d7:ca:fc:f9:
         7f:2a:18:77:b3:b0:55:c7:a8:c1:43:32:38:c9:db:b8:5f:51:
         63:3f:41:2f:c1:c7:32:ab:7d:b0:74:c9:79:59:44:1a:2d:50:
         1a:65:c1:51:f6:8d:58:d5:32:59:8f:6f:6a:74:71:f8:eb:40:
         8c:82:6d:c8:c8:71:af:28:77:e5:2f:51:bf:07:5a:db:ce:7a:
         fc:78:1e:7f:41:72:60:32:14:16:1e:6d:cd:2b:9e:33:03:c7:
         34:56:23:c2:89:c4:ad:50:6a:cd:11:54:44:9b:de:3b:cb:8b:
         d2:2e:77:91:1f:67:d8:12:b7:58:a6:c4:a0:6a:8d:d3:fd:a7:
         c7:f9:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:45 2026 by rpki-client