Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
File:                     UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json)
Hash identifier:          O8WAaghOXO5Zp1ZRNK0SBLZfaeXHiMDsUyL3l9iMwu0=
Subject key identifier:   56:A0:DC:30:14:43:CA:AF:05:E4:36:BC:BD:F2:5F:AF:11:CC:45:D7
Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
Certificate issuer:       /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
Manifest number:          0473
Signing time:             Sun 01 Mar 2026 00:49:30 +0000
Manifest this update:     Sun 01 Mar 2026 00:49:30 +0000
Manifest next update:     Sun 08 Mar 2026 00:49:30 +0000
Files and hashes:         1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: u6OocVs56QYCsLWKwNgvtNd1z7lTf+HyV7imS0Yvwkc=)
                          2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: 75eZM/Pn5fV11WrvJUnUrFhvKQhEtrEs1POmskjBp6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
                          rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
        Validity
            Not Before: Mar  1 00:49:30 2026 GMT
            Not After : Mar  8 00:49:30 2026 GMT
        Subject: CN=69a38d1a-0466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:33:92:23:91:68:a8:de:7e:5f:c8:da:aa:
                    d3:13:b5:41:1c:b1:71:12:ab:ab:14:39:85:a8:42:
                    1e:8b:e1:31:f5:63:9b:14:9f:cd:eb:02:8d:92:62:
                    8c:14:f2:db:15:dc:83:94:4b:98:e9:b8:7c:0c:ce:
                    e4:02:66:c0:ea:4d:cf:0b:ee:1d:52:f2:e8:b7:17:
                    66:17:3b:99:db:b8:2e:bd:46:86:d1:a5:5e:7e:28:
                    c5:0a:98:8e:75:d6:1d:d7:4a:eb:48:be:75:b7:4b:
                    9a:8d:56:e5:5f:47:3a:14:98:d4:56:ad:c3:66:ab:
                    8d:e2:f0:ab:a8:f7:8c:cd:a8:d8:48:ff:85:48:c3:
                    80:0f:85:c1:e0:2b:e8:7a:a8:64:97:75:8f:b2:dc:
                    77:54:01:8d:85:cf:c4:53:44:24:a3:df:ce:4c:60:
                    55:b8:7b:0d:51:69:b3:5b:e5:e2:09:ba:c7:dd:2e:
                    c5:9b:2c:c4:01:c8:3d:7a:91:7a:b6:d9:8f:16:ac:
                    99:84:67:84:17:84:d3:4b:32:7b:be:d5:96:b4:38:
                    93:be:87:1b:2e:64:3b:71:1c:2f:48:47:0c:c7:67:
                    a6:83:b1:a2:c8:a5:57:b2:ed:5f:b3:79:9f:f3:4e:
                    ad:f8:d8:0a:6f:8b:04:6e:68:54:0f:8a:3a:99:b5:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A0:DC:30:14:43:CA:AF:05:E4:36:BC:BD:F2:5F:AF:11:CC:45:D7
            X509v3 Authority Key Identifier:
                keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:fb:11:7a:eb:03:a5:8e:46:90:55:13:47:1b:91:8b:a8:
         e3:96:3c:36:cc:00:28:ee:ba:29:7d:c9:a2:d5:f9:e2:02:95:
         d8:88:71:cd:d7:f6:e2:75:bf:83:32:b2:e2:a0:81:c2:a7:9e:
         49:84:9d:6d:a6:dd:b7:dc:f4:e5:7e:38:1f:d2:2b:e9:5f:03:
         56:bb:20:78:b2:ff:c3:af:90:e6:4f:22:5e:e1:d6:9a:31:91:
         e3:9a:72:93:ae:51:bf:38:81:6f:82:c0:65:3a:59:f5:fe:d7:
         28:3e:a2:41:86:eb:43:87:16:c0:d6:f7:d5:46:79:93:55:fb:
         6f:f5:ab:93:74:31:92:b6:e3:d7:57:7d:6a:24:86:8c:a1:dc:
         a3:05:c7:7c:f1:a6:59:1c:0c:53:fa:f4:12:0e:49:c5:1f:e8:
         58:ec:38:42:5a:0e:1b:12:f4:41:b3:7e:97:05:49:a6:fb:9e:
         87:fc:80:3e:a8:72:8c:6b:46:76:de:f4:d1:ca:35:95:09:39:
         33:c3:7f:e9:7e:14:d8:bc:d5:44:1e:d5:88:b2:5b:e4:22:e1:
         ee:86:2c:90:9e:e1:3f:55:8a:63:44:ad:51:aa:7e:5c:f4:5a:
         6d:09:06:fd:c9:e3:c6:92:8c:20:cd:cd:7f:22:d9:5d:ce:07:
         59:a7:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:41:17 2026 by rpki-client