Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          N25rBfurEGlkV20ZrFHgqBHPcBMt6HH+Lf1YO+J16+E=
Subject key identifier:   C2:88:6C:2E:C1:D8:84:C3:B8:23:BC:72:DB:07:86:BD:60:EC:8C:B7
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          FC
Signing time:             Mon 02 Mar 2026 02:58:38 +0000
Manifest this update:     Mon 02 Mar 2026 02:58:35 +0000
Manifest next update:     Mon 09 Mar 2026 02:58:35 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: vUA8/oe9cILPyXkrpJ7vc3zMooSCFmc7BeL1j/i6bIA=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: FXgcqSwIcOtjJXrtuwb30InUYea2PVbqiaYnf/D8IVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Mar  2 02:58:35 2026 GMT
            Not After : Mar  9 02:58:35 2026 GMT
        Subject: CN=69a4fcde-091a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:f9:ea:31:56:e4:fe:fc:7d:c3:40:cd:32:
                    92:cf:f9:33:e2:b4:0f:55:10:e1:8e:07:57:33:32:
                    78:25:ab:2d:a2:91:fb:2a:48:21:2a:32:f0:3a:2f:
                    39:77:6a:cf:25:b2:c2:ff:fa:82:81:f1:f0:4f:45:
                    39:27:7b:cf:ef:92:27:cd:73:30:aa:5a:4c:90:3a:
                    74:a7:09:d7:12:b1:ab:0f:37:7b:49:dc:fa:16:05:
                    dc:a6:82:69:51:5a:0d:9e:6f:a1:db:09:8f:69:92:
                    5f:f6:60:bc:f3:0d:d8:f5:37:d5:a1:64:c2:fd:22:
                    8b:45:e3:d2:d3:aa:0b:8e:ca:c5:c9:dc:7a:48:a8:
                    a5:fc:c9:8e:b2:16:e2:39:87:52:22:e9:f0:0f:7c:
                    40:58:be:b3:5f:8b:6f:ca:ac:7c:86:2f:5c:7c:8a:
                    f2:42:34:4e:30:46:c0:b1:20:a9:35:24:17:89:7d:
                    8e:c5:3c:4c:0c:a9:38:49:bb:b5:9a:1c:9c:f2:34:
                    5e:15:dd:51:28:3d:f8:bc:11:94:87:fe:de:93:57:
                    12:4d:db:7f:ca:28:65:b4:d6:19:a5:9f:97:7c:72:
                    d9:24:c0:3d:d6:6c:f9:5b:e5:c0:4a:09:75:47:bf:
                    fb:ec:34:c1:32:7c:5e:ae:0e:c0:cf:33:6b:f8:87:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:88:6C:2E:C1:D8:84:C3:B8:23:BC:72:DB:07:86:BD:60:EC:8C:B7
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:87:25:ab:8b:f0:ff:b2:d4:2d:46:a8:35:a6:46:30:92:
         04:f3:ac:2d:24:37:c3:6f:f2:fa:16:59:a7:5a:fb:97:7e:4f:
         e5:a6:59:63:e4:eb:02:e0:c7:22:10:15:55:91:69:09:4a:73:
         f6:de:f2:b6:77:30:a5:a3:3c:de:40:e0:f5:77:62:c8:41:a0:
         3e:a0:1e:cf:e0:ff:d5:0a:23:4b:28:d7:04:5f:51:a9:bf:6d:
         a5:43:0b:63:85:cd:08:82:47:6b:57:2a:90:d2:5d:f7:7c:3d:
         c6:2a:b8:36:0c:b6:6f:ed:05:ff:8f:a2:12:d9:44:f6:1b:ef:
         a8:6e:56:c6:d0:e1:98:24:0f:af:3f:ee:36:3c:c4:2d:1e:f3:
         cb:f4:e6:cb:44:6b:af:e2:5d:be:d4:17:5f:35:d0:c8:ec:36:
         e9:1c:6d:09:37:f9:db:c7:02:d4:15:b5:91:9d:35:73:c4:21:
         58:d8:03:c9:45:c0:b3:cf:16:76:41:0d:d5:1c:71:f6:ec:7f:
         01:15:0e:54:6b:09:1c:de:7e:d7:33:43:1e:6d:77:f3:55:e4:
         49:a7:f8:6d:80:c0:52:4d:dd:75:67:73:90:d3:54:e2:60:61:
         e6:02:9d:80:c5:95:f5:d9:aa:71:de:4f:ef:62:1c:71:6a:41:
         2b:2e:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:03 2026 by rpki-client