Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File:                     UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier:          BwQqL48q6H6W+BtUPWZ8LKXYhDwPILTboThV9K+5mog=
Subject key identifier:   58:81:04:7F:1F:4B:39:FB:CE:99:6A:5D:E6:AC:DF:31:DD:D4:6A:C7
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number:          013C
Signing time:             Sun 01 Mar 2026 06:21:42 +0000
Manifest this update:     Sun 01 Mar 2026 06:21:41 +0000
Manifest next update:     Sun 08 Mar 2026 06:21:41 +0000
Files and hashes:         1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: WmRXulNHfKqT86ccZAwKfO3/M9WSCbjQkvqYenU76tw=)
                          2: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
                          3: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Mar  1 06:21:41 2026 GMT
            Not After : Mar  8 06:21:41 2026 GMT
        Subject: CN=69a3daf6-3d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:68:65:db:90:ac:dc:bb:fa:02:e3:bf:a8:
                    10:a0:c5:b8:31:37:a0:50:fc:1d:3b:12:ca:02:ff:
                    15:58:0e:e1:a4:a1:73:b1:17:ec:34:5e:3c:68:68:
                    18:0f:b1:de:e5:ff:f5:3a:78:22:56:32:4a:cc:b4:
                    1f:53:c7:94:1c:54:37:9c:bd:90:ec:58:e0:70:f0:
                    33:6f:63:02:60:84:1c:bd:c3:9a:2d:37:49:8d:11:
                    3e:b1:5b:9a:d3:ff:87:4f:6e:9a:df:b6:9d:a1:61:
                    a4:76:51:aa:6e:91:43:a7:b6:67:39:6d:cc:a8:37:
                    4c:d7:97:9b:7c:f4:91:dc:7c:a1:43:dd:10:2f:3d:
                    f7:30:dc:22:2a:b8:29:32:36:cf:bd:b1:11:ee:81:
                    c4:2a:38:89:3d:59:72:ec:04:17:c8:fc:be:ba:ff:
                    8c:7b:2c:ad:17:b0:18:d9:7f:07:3f:0f:38:e2:d3:
                    e6:5b:2b:82:80:f3:7b:9c:fa:5a:8e:1e:be:7e:9a:
                    49:cf:13:69:04:1f:1f:ce:df:2a:8e:ad:ae:5a:3a:
                    cc:2d:d0:5c:a5:1a:46:c6:83:b9:62:5b:64:9a:d4:
                    0b:7e:1e:ba:8b:73:5f:23:6b:05:13:83:46:e4:ba:
                    34:e6:a5:a2:25:76:d7:8e:a0:79:1f:ae:d5:e9:6f:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:81:04:7F:1F:4B:39:FB:CE:99:6A:5D:E6:AC:DF:31:DD:D4:6A:C7
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:80:60:33:49:4b:1c:fe:07:ad:6c:0a:ff:79:ae:cc:ee:de:
         1e:50:65:b2:e3:21:1e:d3:a2:3f:3c:d3:58:70:38:9f:c8:fc:
         a2:c7:65:90:7e:ff:a1:09:dc:47:10:c6:57:cb:59:19:58:51:
         9c:03:ea:93:ad:b7:36:fe:4e:a7:b7:25:22:da:4a:8e:85:4a:
         a8:d8:f0:53:83:df:d9:2f:db:08:8e:2a:58:61:47:d3:84:bb:
         77:3b:f8:46:f4:27:a9:64:69:79:fd:d2:23:a3:db:90:dd:aa:
         d5:f4:91:4b:ac:9b:26:91:b1:4b:9f:04:28:34:af:9f:18:ea:
         0c:8a:bf:d2:46:72:a3:90:9a:88:42:db:83:6b:e0:17:34:4b:
         5d:35:a1:4c:a8:09:15:6b:4e:38:6f:09:9c:37:d3:77:4b:d2:
         a5:0f:7d:9b:fd:f0:c8:e5:f0:10:27:48:fa:91:d1:89:cb:c1:
         64:b7:4b:53:cd:22:ee:f7:50:de:e6:9f:fd:2d:c7:fe:47:d5:
         7e:45:87:04:6e:c3:9f:24:14:f2:75:e0:e3:82:6b:52:28:05:
         62:13:9e:52:4e:4b:1f:33:fe:08:71:d9:06:8f:9f:ed:bc:a2:
         b9:1a:1b:ef:b9:f7:64:1f:4b:d6:f1:ca:18:30:96:e3:1a:1c:
         7b:6e:ca:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1
RDhCQTU4RTIwHhcNMjYwMzAxMDYyMTQxWhcNMjYwMzA4MDYyMTQxWjAYMRYwFAYD
VQQDEw02OWEzZGFmNi0zZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCVoZduQrNy7+gLjv6gQoMW4MTegUPwdOxLKAv8VWA7hpKFzsRfsNF48aGgY
D7He5f/1OngiVjJKzLQfU8eUHFQ3nL2Q7FjgcPAzb2MCYIQcvcOaLTdJjRE+sVua
0/+HT26a37adoWGkdlGqbpFDp7ZnOW3MqDdM15ebfPSR3HyhQ90QLz33MNwiKrgp
MjbPvbER7oHEKjiJPVly7AQXyPy+uv+MeyytF7AY2X8HPw844tPmWyuCgPN7nPpa
jh6+fppJzxNpBB8fzt8qjq2uWjrMLdBcpRpGxoO5YltkmtQLfh66i3NfI2sFE4NG
5Lo05qWiJXbXjqB5H67V6W/BZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiBBH8f
Szn7zplqXeas3zHd1GrHMB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz
NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4
WUNWRVgwQTVfSGxkaTZXT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEoBgM0lLHP4HrWwK/3muzO7eHlBlsuMhHtOiPzzTWHA4n8j8osdlkH7/oQnc
RxDGV8tZGVhRnAPqk623Nv5Op7clItpKjoVKqNjwU4Pf2S/bCI4qWGFH04S7dzv4
RvQnqWRpef3SI6PbkN2q1fSRS6ybJpGxS58EKDSvnxjqDIq/0kZyo5CaiELbg2vg
FzRLXTWhTKgJFWtOOG8JnDfTd0vSpQ99m/3wyOXwECdI+pHRicvBZLdLU80i7vdQ
3uaf/S3H/kfVfkWHBG7DnyQU8nXg44JrUigFYhOeUk5LHzP+CHHZBo+f7byiuRob
77n3ZB9L1vHKGDCW4xoce27KpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:45 2026 by rpki-client