Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
File:                     UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json)
Hash identifier:          aB58TK46oJzD+sTEl/OmVcAQeYSxIxoJ4B80sPV4Afw=
Subject key identifier:   FF:DF:F2:D9:56:42:70:73:90:04:60:18:68:49:F8:9B:16:11:12:62
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Certificate issuer:       /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial:       0960
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
Manifest number:          1A3B
Signing time:             Mon 02 Mar 2026 00:38:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:38:53 +0000
Manifest next update:     Mon 09 Mar 2026 00:38:53 +0000
Files and hashes:         1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: uY9dXSkkktxOfgsMO6t3LWnO56lW5NqB9VOznZGTBr4=)
                          2: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: HTJDCglPoFk22fksfhTkeiZZB0j/VQ2aH60i8wPK/kc=)
                          3: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: ROykPYM/LeczZs6fuaskuBijSjnFp8A1FgiccxUhw58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
                          rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
        Validity
            Not Before: Mar  2 00:38:53 2026 GMT
            Not After : Mar  9 00:38:53 2026 GMT
        Subject: CN=69a4dc1e-8432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:98:1c:a0:0b:6b:fe:30:3a:ee:05:37:b0:
                    f3:71:f5:fc:b9:fb:37:31:8e:3a:a3:72:32:b9:b5:
                    7a:a7:50:d7:d9:29:4a:5c:ed:1f:a3:91:77:89:45:
                    74:62:52:91:61:9c:2c:48:b5:e3:21:ba:22:74:4f:
                    a8:af:dd:f5:8d:6b:26:68:52:bf:9d:3e:34:71:34:
                    a7:a8:2a:89:f4:0e:eb:d6:4f:70:ee:f8:89:26:31:
                    a9:7e:9e:6f:0d:6a:c7:03:bb:9f:59:cf:de:e5:91:
                    78:c6:3b:79:47:b3:4b:cd:01:5b:b0:ac:b1:76:d7:
                    14:97:61:b1:8a:75:32:d6:ea:8c:32:3b:d0:49:37:
                    19:92:e4:40:c5:6e:8d:ac:1c:b7:91:b0:91:62:fc:
                    92:2d:0a:12:db:b1:ee:7d:5a:be:28:76:cc:5b:38:
                    ff:ac:93:e4:33:40:02:08:86:11:16:9f:ce:07:66:
                    6a:84:d2:b4:ff:e8:0b:55:ff:96:4e:0b:6d:ff:33:
                    2b:d2:b2:22:35:e8:fb:ef:de:5e:78:d5:92:7b:28:
                    47:4e:4c:59:cd:88:26:c3:d1:bc:2f:42:37:fd:a9:
                    98:15:8f:98:a9:36:42:b9:85:df:01:c6:a9:3d:70:
                    12:e2:d0:da:29:6f:5a:70:cb:b3:7b:04:fb:3c:34:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:F2:D9:56:42:70:73:90:04:60:18:68:49:F8:9B:16:11:12:62
            X509v3 Authority Key Identifier:
                keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:6e:1e:13:93:25:40:fe:5f:02:18:d0:6c:79:30:16:9b:
         0a:c0:c7:4a:92:f7:e0:ac:44:40:18:fc:c6:e6:e0:93:75:df:
         58:82:c1:dc:9c:ae:b5:ac:a0:23:40:b6:72:cb:f1:cb:5f:db:
         1b:72:74:b7:62:f3:be:2d:51:bd:bc:52:10:7b:f1:4f:3e:13:
         9d:bb:ed:cf:ac:ed:de:f9:71:ca:f5:b4:d6:f7:2c:91:90:91:
         7b:82:ad:80:36:b5:94:33:86:65:53:bc:e1:82:4f:75:41:07:
         84:5e:c3:62:fb:25:d0:be:da:65:76:39:e0:6f:79:aa:09:d5:
         dc:ba:f3:fd:a0:4c:8e:02:4d:e3:b1:09:54:c3:bd:a2:eb:67:
         13:ba:05:1b:94:6f:68:5a:87:7b:eb:3e:5a:54:93:5d:c2:cf:
         46:5e:d6:86:48:fb:9f:3d:66:50:49:2c:8d:38:b0:80:05:18:
         c9:b5:38:3f:2f:8a:61:8f:90:4f:b4:5b:39:a5:eb:63:d0:f3:
         48:88:4d:75:c1:a1:47:be:d1:a4:8a:71:a6:d0:fe:dc:17:87:
         f9:b4:84:43:db:e9:b0:fd:51:4a:c3:a3:a3:30:4c:98:dc:c9:
         fa:ea:2c:3a:ea:50:01:6f:06:14:8a:fa:07:df:7b:b9:0c:43:
         dd:d4:bf:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz
RTMwNDVEQzAwHhcNMjYwMzAyMDAzODUzWhcNMjYwMzA5MDAzODUzWjAYMRYwFAYD
VQQDEw02OWE0ZGMxZS04NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQqYHKALa/4wOu4FN7DzcfX8ufs3MY46o3IyubV6p1DX2SlKXO0fo5F3iUV0
YlKRYZwsSLXjIboidE+or931jWsmaFK/nT40cTSnqCqJ9A7r1k9w7viJJjGpfp5v
DWrHA7ufWc/e5ZF4xjt5R7NLzQFbsKyxdtcUl2GxinUy1uqMMjvQSTcZkuRAxW6N
rBy3kbCRYvySLQoS27HufVq+KHbMWzj/rJPkM0ACCIYRFp/OB2ZqhNK0/+gLVf+W
Tgtt/zMr0rIiNej7795eeNWSeyhHTkxZzYgmw9G8L0I3/amYFY+YqTZCuYXfAcap
PXAS4tDaKW9acMuzewT7PDTKQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/f8tlW
QnBzkARgGGhJ+JsWERJiMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz
QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa
NF96Y01uUDAwWTAtTUVYY0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg/huHhOTJUD+XwIY0Gx5MBabCsDHSpL34KxEQBj8xubgk3XfWILB3Jyutayg
I0C2csvxy1/bG3J0t2Lzvi1RvbxSEHvxTz4Tnbvtz6zt3vlxyvW01vcskZCRe4Kt
gDa1lDOGZVO84YJPdUEHhF7DYvsl0L7aZXY54G95qgnV3Lrz/aBMjgJN47EJVMO9
outnE7oFG5RvaFqHe+s+WlSTXcLPRl7Whkj7nz1mUEksjTiwgAUYybU4Py+KYY+Q
T7RbOaXrY9DzSIhNdcGhR77RpIpxptD+3BeH+bSEQ9vpsP1RSsOjozBMmNzJ+uos
OupQAW8GFIr6B997uQxD3dS/uA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:53 2026 by rpki-client