Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File:                     UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier:          C8NAiDp6x8gIy2MTyxLRVU5GTBLwBEdCfJmACeRTdG4=
Subject key identifier:   94:2A:00:34:B2:50:16:FB:60:84:2E:9C:AF:50:DA:76:16:7A:0B:6A
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer:       /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number:          49
Signing time:             Sun 01 Mar 2026 09:47:48 +0000
Manifest this update:     Sun 01 Mar 2026 09:47:47 +0000
Manifest next update:     Sun 08 Mar 2026 09:47:47 +0000
Files and hashes:         1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: DXiYhM7BwJIrMMhkzBk/FGCtEGZKHFa+v1StRir5Bu0=)
                          2: 93006FB6057B11F1B03D8E1E363D8C67.roa (hash: Ok/X0E1tTCXS1TdEoBhiZ8gZv8rHKU5B+uV52W/kI2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
        Validity
            Not Before: Mar  1 09:47:47 2026 GMT
            Not After : Mar  8 09:47:47 2026 GMT
        Subject: CN=69a40b43-c9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1c:0d:30:2f:3b:13:2d:ce:5a:c5:2c:e3:8b:
                    b4:7e:58:80:43:e4:17:a1:05:22:ac:1a:03:42:39:
                    aa:d3:b3:97:03:9d:25:39:a1:d4:ed:e3:9f:a3:55:
                    94:6d:5a:93:5c:aa:4d:53:c5:7a:d0:ad:85:ea:d8:
                    91:38:d5:3b:b0:a5:ed:ea:ef:56:57:56:9c:cf:04:
                    ae:eb:92:1c:22:58:bf:36:27:18:c8:2d:93:8d:64:
                    b6:df:99:d1:65:df:42:0a:e0:04:98:ff:d8:21:5b:
                    8f:c7:74:71:8b:22:da:ed:98:4a:d0:c8:4f:ab:a5:
                    70:cf:b9:e3:65:90:6f:7e:9f:da:53:ee:42:72:02:
                    a2:96:06:9f:8b:c0:48:f2:f9:62:a4:a1:77:ff:b6:
                    92:af:df:ce:50:e0:d3:8d:40:ed:c3:cb:db:d3:b4:
                    90:46:be:16:e4:76:14:eb:62:3b:92:d5:01:62:b5:
                    b4:17:af:c6:34:0f:a5:d3:8a:63:28:4e:ec:41:d7:
                    bb:b9:60:9c:67:75:10:2d:f7:45:49:ad:d5:a0:d8:
                    f9:ce:f6:c4:0f:14:12:0f:77:89:bf:c0:78:dd:5a:
                    f2:00:68:da:cf:a2:68:bd:d8:7a:e1:78:be:cf:12:
                    21:f7:1b:d1:30:5e:83:e9:34:e1:da:5d:a0:d8:a4:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2A:00:34:B2:50:16:FB:60:84:2E:9C:AF:50:DA:76:16:7A:0B:6A
            X509v3 Authority Key Identifier:
                keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:e0:fc:67:59:98:02:cf:18:4e:36:aa:97:39:f8:8b:4d:
         e0:1f:ef:37:d3:73:54:f7:73:2f:7f:b1:c6:e4:82:da:06:67:
         4c:18:88:78:87:df:0f:21:26:ef:ea:e4:a9:8a:58:35:58:0e:
         0e:c0:18:78:34:18:5e:ae:86:3f:e8:89:18:e9:7d:d3:dd:e2:
         43:b6:cf:d6:6c:23:e6:58:10:f7:3a:60:13:1c:c5:68:83:da:
         b3:54:17:56:c7:df:75:fc:17:5d:2f:ed:1e:ba:92:47:cb:9d:
         bd:ba:d4:2a:39:9c:06:74:d9:3c:78:d0:7d:92:df:49:3e:06:
         2d:f0:25:ba:6f:cc:4a:ed:bb:9f:bb:54:6b:2f:48:7a:91:a8:
         5b:b8:e2:02:2a:37:ef:0a:16:a4:9f:9f:f5:dc:47:b6:d6:4d:
         71:a2:99:fc:1e:92:da:1c:a4:df:7a:8a:08:aa:d4:d8:79:d3:
         eb:eb:1c:43:2a:41:70:80:a0:c6:31:36:14:fd:a0:0f:a3:d2:
         43:16:4b:bf:a4:6f:6b:63:04:a2:d8:3d:59:2e:ab:5f:1d:b1:
         ba:77:29:73:18:4b:f0:4e:b5:95:7e:f3:8e:86:c8:e9:2d:89:
         f0:a8:2b:6d:e7:d4:af:00:d6:85:d8:86:85:f1:57:e8:76:32:
         61:ff:eb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:40 2026 by rpki-client