Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          QrgQdey6vjqXw0/O6xufaIYPWMNTCCTesRyZqLcujm0=
Subject key identifier:   70:8A:92:32:50:23:4C:8E:6B:E7:3E:91:36:A4:CD:63:17:3C:07:B7
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       2121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          20FE
Signing time:             Sun 01 Mar 2026 23:36:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:36:32 +0000
Manifest next update:     Sun 08 Mar 2026 23:36:32 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: PBU2UrV+a5Nr24gDubUzYOcTD6JnxmTEpZYh6azg154=)
                          2: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: IX69yIubs1cdWLw+u1/cJ2ESvxKouHlRxob5F2MvTs0=)
                          3: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ybHfR/5xx3UHYBd525TGkptsJesZi6Lna1QGzoVxLoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8481 (0x2121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Mar  1 23:36:32 2026 GMT
            Not After : Mar  8 23:36:32 2026 GMT
        Subject: CN=69a4cd81-48a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:39:59:cb:dd:70:53:bc:68:56:d0:a5:3e:
                    c9:89:aa:28:d4:c9:24:cb:c1:b2:c9:b5:24:98:dc:
                    e2:90:93:e1:47:71:d2:3d:93:70:99:59:d3:16:12:
                    ae:d1:87:29:8d:48:dd:1f:2a:09:f1:03:74:09:bf:
                    54:a5:ed:62:aa:bc:bb:bf:f6:8c:22:0e:0d:ae:77:
                    49:9d:18:c4:22:12:fb:47:ee:dc:82:ca:56:4e:ae:
                    13:d7:43:84:28:a7:14:48:f1:a0:84:0f:8c:63:98:
                    10:54:e0:3a:62:94:52:90:b1:f5:c3:94:66:34:39:
                    53:8f:06:13:aa:f2:65:af:c9:52:bf:4f:65:82:d4:
                    e8:d1:c9:5c:99:25:4d:f5:4d:20:70:79:62:3a:b8:
                    e6:a4:d4:c7:10:b7:8b:04:a8:fe:78:77:b1:f0:17:
                    ad:39:30:66:37:fc:b0:7f:e7:7d:51:fb:7a:36:ba:
                    40:7e:30:b1:ef:6a:72:65:d6:25:40:39:41:d9:75:
                    2d:2e:48:2f:88:94:bf:41:0b:28:c3:29:86:7d:69:
                    bf:18:2b:97:c6:0f:d7:cd:6e:be:56:65:62:d1:7a:
                    39:bd:0a:ad:3d:28:71:d4:1a:12:46:5a:1b:b5:07:
                    84:85:10:65:6c:7c:ba:e3:ae:2e:b7:87:66:e0:f4:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:92:32:50:23:4C:8E:6B:E7:3E:91:36:A4:CD:63:17:3C:07:B7
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:26:7f:2c:be:57:b6:48:74:a3:c0:5c:45:51:61:51:e3:06:
         2a:e5:ba:88:2e:da:e2:fb:28:dc:b8:4d:8f:11:43:e2:15:fe:
         85:e0:ea:31:1c:34:e3:76:84:27:da:2e:78:b1:88:eb:49:0f:
         b1:57:32:ab:60:b7:8a:1b:ce:b1:03:20:af:ef:17:6f:e8:87:
         e9:03:ca:22:b1:2a:bf:13:8c:71:db:e3:46:c1:f3:64:6c:fa:
         b4:11:c9:ca:e4:a1:8d:2b:8b:5d:ee:7f:37:9b:14:fa:9f:29:
         80:81:3d:79:8c:d9:9c:ae:3f:ec:ac:38:6e:e4:b1:b0:24:e0:
         8d:60:3d:8a:50:54:88:de:82:b8:45:82:8a:91:2b:10:a0:13:
         d3:13:bb:a5:de:a9:5b:7c:f7:ca:7b:8d:18:3a:b3:29:d6:68:
         d1:a0:8b:be:dd:91:e3:ce:bd:52:c0:30:4e:61:68:b5:1e:17:
         d4:fa:87:07:00:98:35:2b:49:27:87:74:42:eb:e0:9c:ff:1b:
         da:97:1d:f3:33:74:b1:60:ad:a5:d7:42:c6:0e:8b:b5:7c:ca:
         74:a6:11:35:a3:ba:ff:2e:07:ec:5f:af:fc:23:c1:9b:96:1d:
         c7:cc:f9:28:dd:c0:14:4b:b9:1c:28:35:42:42:38:19:fb:fd:
         e4:8b:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:24 2026 by rpki-client