Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          XGiwBo7EAQEYHc2m6fqw8/5BpTw47blkUOJCx7rRH94=
Subject key identifier:   86:57:FF:E9:1F:11:62:B1:A5:01:BD:FC:82:47:39:7F:F1:38:04:6D
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0C9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0C8E
Signing time:             Mon 02 Mar 2026 01:46:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:45:59 +0000
Manifest next update:     Mon 09 Mar 2026 01:45:59 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: 2nlx1izLsOY/YxQw6dI5IDWzkkvOlR9+UKxf4CbF4wI=)
                          2: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: UlK2XwEWcbOvFEYsFdkuj6xNj+WONsyKqb3Dor4n7pw=)
                          3: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 5GbxzBSfHfbTK/2PyRZ8YSXCEt+H6QAHiqTTaUK/ZBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3230 (0xc9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: Mar  2 01:45:59 2026 GMT
            Not After : Mar  9 01:45:59 2026 GMT
        Subject: CN=69a4ebd8-9991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:4a:37:6b:49:96:48:1b:7e:a6:ea:61:5a:
                    49:ae:3d:7f:92:0e:66:f0:d8:cd:cc:b8:3a:ba:6b:
                    52:4e:01:e8:bb:b6:46:6f:85:28:9e:b5:e6:e6:11:
                    33:76:70:94:e4:6c:b9:e8:8c:a8:56:55:03:ec:8f:
                    94:1d:db:fd:7e:90:38:26:a4:e9:3c:38:f4:d3:a5:
                    e9:e2:85:17:67:2a:a0:c5:dc:24:15:18:5e:4e:68:
                    b9:56:76:1e:80:5c:d7:4e:9e:18:1c:8a:7c:79:51:
                    a1:fa:a3:9b:c6:70:81:9e:a4:ab:16:0d:d1:81:49:
                    a7:2c:6b:29:63:d7:95:67:7e:07:b4:91:ee:4c:6b:
                    63:1b:a7:03:c8:2e:cb:2d:a3:1d:f4:44:7d:3f:42:
                    a5:a7:9e:0b:d2:e8:db:3d:c3:d2:4e:1a:5d:09:9c:
                    d1:de:3d:87:c9:e8:07:f0:d0:2e:e9:5a:62:4e:35:
                    85:ee:6b:68:a6:b0:e0:7c:43:a9:1e:73:95:99:bd:
                    0c:58:84:75:fa:d3:ca:fb:b0:a4:5d:b8:20:59:1f:
                    66:76:0a:cb:d3:df:10:64:0c:de:72:a8:b3:07:88:
                    19:62:26:b7:77:6e:9a:3e:61:6f:10:65:8a:c8:38:
                    fb:51:b1:0f:67:9e:a3:3a:51:fe:48:be:57:43:ef:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:57:FF:E9:1F:11:62:B1:A5:01:BD:FC:82:47:39:7F:F1:38:04:6D
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:47:7b:f4:18:69:94:07:be:d5:2c:12:c5:a0:21:d4:a8:da:
         9f:30:10:b4:87:79:9b:e0:dd:4e:70:d4:c8:b0:d1:ab:ec:9e:
         94:6c:f3:db:8c:2a:fb:16:bf:3a:27:cd:8b:ee:1f:4d:ea:e2:
         04:3b:94:70:eb:f3:d3:2e:72:79:03:50:91:3f:53:14:bc:2b:
         77:a0:3b:98:6c:fd:80:8e:bb:b4:0a:0f:b4:95:c4:b9:e7:55:
         3f:0f:e8:bc:68:65:a6:fe:4a:e6:19:dd:d1:9c:8a:cc:c5:08:
         2f:bd:7b:05:a8:a9:bf:cc:82:7c:dd:31:b1:57:b4:a0:24:e8:
         b8:70:fe:bf:29:46:3f:34:59:10:88:67:c4:d8:9d:c5:da:3e:
         0b:c5:f6:90:72:b5:f7:2b:cf:7b:60:da:fb:9c:ea:86:f1:28:
         cf:7e:df:79:19:ae:9d:44:1f:61:32:54:0c:25:04:a7:06:17:
         c1:42:89:11:e6:05:c5:3e:ff:7e:21:0e:52:ef:91:d4:4f:e9:
         5b:e3:76:ed:75:95:3f:6e:2a:1c:70:76:7d:bf:01:23:9d:75:
         78:ee:3c:84:31:ca:9a:10:16:2c:d5:a9:72:32:2e:c8:79:0d:
         79:15:12:71:8f:6e:09:15:88:45:c2:5e:1a:f5:92:70:f9:a6:
         7f:23:fb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:45 2026 by rpki-client