Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
File:                     -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json)
Hash identifier:          ZuiOPyqnoEzhp8ExOj98f5c6Vxk24A8MQbg+hPk0Nbg=
Subject key identifier:   02:56:30:8C:31:5D:6E:90:17:10:0F:89:3D:3F:FE:42:80:7E:FE:74
Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
Certificate issuer:       /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Certificate serial:       0CCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
Manifest number:          0CBC
Signing time:             Mon 02 Mar 2026 03:08:40 +0000
Manifest this update:     Mon 02 Mar 2026 03:08:39 +0000
Manifest next update:     Mon 09 Mar 2026 03:08:39 +0000
Files and hashes:         1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: w3sIb/6SH2aEe+lnld2akZ86gIGCEQ2WFJ8Y2GjtSDk=)
                          2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: D0GEA8Hwvgy327FVQRo8UrdiZ6su6qYeHtaXvrPJkes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
                          rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3279 (0xccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158840, serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
        Validity
            Not Before: Mar  2 03:08:39 2026 GMT
            Not After : Mar  9 03:08:39 2026 GMT
        Subject: CN=69a4ff38-91a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:9d:76:e2:5f:0b:8d:90:5e:3e:85:e0:85:
                    56:65:f9:0c:91:c1:2b:ce:a8:37:b6:f5:61:8c:62:
                    9b:95:3d:4d:53:f4:33:8d:56:9e:2b:da:9e:b4:a4:
                    f0:d6:a2:85:88:3c:fd:ca:0a:4d:6e:65:4f:fe:9d:
                    2b:7a:b4:e1:1e:5e:e6:5f:ba:28:7e:4d:d8:6e:09:
                    d9:29:4e:9e:2c:ad:fc:f2:bd:4d:47:6e:63:47:f4:
                    bd:3a:c3:63:a4:b7:0a:f9:1f:6c:7f:04:23:b3:c4:
                    bd:08:ab:d0:3d:ac:37:b4:7e:62:80:6c:03:f9:9c:
                    a5:79:d2:cf:2e:c8:fc:31:ca:80:d8:50:e8:32:a1:
                    f4:e2:9b:d4:7a:a0:44:39:b7:1b:0c:2d:07:14:00:
                    9c:4e:34:c4:49:a0:ae:37:bf:93:3d:8c:1e:c7:e3:
                    6c:2e:42:56:06:17:93:7c:92:99:29:27:0b:44:19:
                    b4:ce:b1:07:64:a5:30:9f:15:a9:d2:b6:9a:7b:01:
                    be:05:a1:d7:15:0f:72:1d:ae:2a:9d:95:e0:77:50:
                    04:ff:9c:93:b9:ca:c7:49:79:35:be:94:46:f3:66:
                    4c:f2:fe:a4:95:dc:d7:b9:90:30:8b:b2:42:4e:d2:
                    12:85:fe:d8:af:e3:dc:cf:77:da:d5:b7:1f:35:13:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:30:8C:31:5D:6E:90:17:10:0F:89:3D:3F:FE:42:80:7E:FE:74
            X509v3 Authority Key Identifier:
                keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:00:4d:0f:b7:98:06:2b:a6:21:5b:62:09:b2:fe:c1:69:e1:
         1c:53:24:62:97:70:de:62:a5:db:82:5e:bc:98:8c:88:28:92:
         2f:59:a3:0d:3a:00:b8:14:95:b5:2b:45:45:3c:61:46:64:2a:
         75:3a:70:e8:06:23:a8:4b:d9:41:8a:c0:05:b6:47:5f:75:83:
         83:88:57:f7:60:00:d7:d3:ab:17:78:f9:52:f8:be:b6:a8:27:
         00:1a:d5:9d:14:af:82:4e:08:2b:15:e9:6a:04:08:fd:52:d6:
         59:c1:96:1e:7b:82:03:49:3c:40:0a:3c:53:38:a0:ad:2a:e8:
         d6:84:75:38:31:b8:c5:69:36:83:0c:f3:14:f1:bd:3e:3a:30:
         15:6b:cb:3c:86:7e:05:a3:5a:1f:ad:f7:e1:39:35:7c:fe:b6:
         52:5a:56:0b:6d:3f:9f:8d:e2:56:37:5d:4f:c6:d5:b0:cd:b2:
         cd:65:e2:19:48:0a:0f:48:c7:47:59:47:5a:7e:14:da:0b:63:
         df:7b:17:1a:fb:fc:18:49:c7:12:fb:a6:db:b0:cb:cd:a4:92:
         24:88:31:c1:bb:45:08:f6:70:ac:a1:72:3f:2c:0c:0f:5b:fd:
         8e:99:4e:6d:2e:c4:f4:30:d3:b5:cb:dd:62:d1:c6:a3:59:3e:
         aa:e1:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:50 2026 by rpki-client