Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
File:                     UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json)
Hash identifier:          h8uK+Qkrh39Sy9yv1mEt0qarUHGtw/IlciFxMNnsvIk=
Subject key identifier:   07:38:33:C8:C7:E7:CD:D4:AB:0C:97:15:CF:19:A9:A4:B4:BA:01:BB
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
Manifest number:          0150
Signing time:             Sun 01 Mar 2026 06:09:14 +0000
Manifest this update:     Sun 01 Mar 2026 06:09:14 +0000
Manifest next update:     Sun 08 Mar 2026 06:09:14 +0000
Files and hashes:         1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: MWqBfovog5qg7Dv3RoCuWLGD9oWV9EniArDY6ikF1yE=)
                          2: C23053B019A911EF97366417C4F9AE02.roa (hash: 7AHfRlf5obcLabSztF3WSrRoKuN5MOc2fWcxIFrj8UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Mar  1 06:09:14 2026 GMT
            Not After : Mar  8 06:09:14 2026 GMT
        Subject: CN=69a3d80a-7820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:c2:b0:1c:cb:89:95:ca:96:e5:cd:f1:7f:
                    aa:9a:cb:63:c5:67:d7:b3:08:0f:59:dd:b1:ee:54:
                    1f:22:9f:36:44:74:0b:6b:9b:e6:44:1a:89:4c:00:
                    aa:ab:4c:b7:b4:4f:fb:58:08:9e:d9:c3:d1:87:31:
                    44:d1:f1:3e:8e:11:3a:86:b3:0d:23:0f:75:70:f2:
                    57:22:b7:a9:b7:88:5c:69:99:d2:60:21:4a:9e:fe:
                    ca:26:7a:f3:00:7c:f5:af:4e:a0:84:d1:4f:8e:97:
                    2d:40:37:f4:b4:64:37:ee:a5:b4:d3:39:c3:75:8c:
                    92:d9:7b:18:a7:ae:c9:43:3c:7d:f0:aa:04:9d:99:
                    b5:80:ea:b8:b6:ff:7b:7d:1f:dd:23:fe:76:24:e0:
                    3d:f0:eb:db:59:bc:09:50:77:32:6b:e1:08:94:fd:
                    27:4f:46:df:e1:68:a9:0b:32:1a:4c:c4:8b:f0:c7:
                    d5:82:97:17:b5:23:41:f2:57:92:8a:49:ce:f4:f8:
                    e5:02:0e:e0:47:f1:0e:66:52:46:1f:c2:5f:a5:8c:
                    eb:cc:1a:c3:b8:28:cf:c1:61:d5:cb:f6:54:e0:d0:
                    29:91:02:f6:83:8e:4b:55:93:c2:8b:a0:f2:e0:98:
                    b0:32:ad:de:dc:9c:6e:a4:77:f8:56:41:be:a4:b1:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:38:33:C8:C7:E7:CD:D4:AB:0C:97:15:CF:19:A9:A4:B4:BA:01:BB
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:32:f9:c9:58:37:ff:ee:e9:02:8c:81:f7:ad:84:9a:64:
         dd:16:58:d8:12:f5:f1:50:f4:cf:ff:50:f1:6f:97:1b:ae:6c:
         fa:58:9d:de:14:25:cf:7f:fc:7b:d9:fa:81:07:4a:82:f0:2d:
         0c:97:49:ed:f4:31:fa:9c:f0:9d:06:55:eb:10:97:45:51:35:
         43:13:7e:c9:75:ce:8b:52:b1:e0:60:f4:66:4b:a9:10:c5:79:
         8f:cd:42:77:7a:3e:d3:60:4d:cb:1f:44:cf:b6:7e:2f:55:72:
         bf:69:32:6d:da:d2:37:77:da:50:b8:98:7b:c6:ea:d0:dd:3e:
         44:24:05:96:8f:a4:5e:d1:b6:f4:e0:00:8d:c2:25:32:2e:e8:
         23:37:16:4c:1c:e1:8e:5d:50:5e:65:95:c0:05:87:2e:de:0c:
         6e:61:3a:87:72:5d:91:60:62:b9:a2:54:0e:bc:e6:3f:fb:fb:
         b5:9b:e9:1e:7e:c5:02:fa:1b:d9:20:54:8e:39:e4:68:36:f4:
         bc:d8:ef:5e:25:59:bb:58:e2:fa:10:01:23:73:57:8a:9c:7e:
         33:c7:01:fd:44:45:b8:43:41:27:5f:34:49:9e:72:0e:99:93:
         62:1e:c9:50:91:8a:0b:b9:d8:f6:a6:84:73:84:65:06:1c:f4:
         01:58:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:33 2026 by rpki-client