Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          1AnD+pzXhkVc8+EsvhUamvyTcIUyarljSwBqB7m7cdw=
Subject key identifier:   DE:8F:79:E9:8D:B4:32:4F:C6:16:39:03:2D:19:FC:F7:C3:05:1B:33
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0C8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0C76
Signing time:             Mon 02 Mar 2026 00:49:02 +0000
Manifest this update:     Mon 02 Mar 2026 00:49:00 +0000
Manifest next update:     Mon 09 Mar 2026 00:49:00 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: WVHJr6uvZXCQr9HFEHYm+4Nn0TIl0ns8eAiwwofFMUo=)
                          2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3214 (0xc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Mar  2 00:49:00 2026 GMT
            Not After : Mar  9 00:49:00 2026 GMT
        Subject: CN=69a4de7e-e792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:b5:7d:d5:21:e6:35:51:dd:06:f7:4c:f6:
                    15:de:95:e4:aa:03:4d:ca:bf:3b:de:f6:82:50:e4:
                    b0:d1:4a:b6:e3:54:56:b4:e9:1b:69:56:de:39:e0:
                    2a:88:32:24:f5:21:52:61:a9:a3:3c:21:3e:43:1c:
                    42:51:85:79:a2:90:14:67:85:d4:69:58:4d:00:8f:
                    50:9d:b4:7b:1a:5b:15:9c:f0:eb:ee:7a:76:b1:54:
                    78:29:4f:a6:5c:30:ec:3b:7e:74:c9:5f:38:14:24:
                    b6:f0:36:96:d5:2d:d5:d5:12:61:0b:b0:66:7b:f2:
                    dd:37:ec:52:a9:db:ce:bc:22:08:c9:39:e8:8b:14:
                    8d:75:09:2f:f9:fd:b0:63:d8:86:ba:4c:ce:73:ce:
                    ad:11:57:c0:5d:6c:27:a3:36:86:5f:15:95:47:b5:
                    13:03:03:bb:66:54:c1:7b:fd:61:4e:81:7e:9d:f3:
                    15:84:fe:c9:6e:ec:1d:60:5a:93:30:5f:bc:aa:37:
                    a2:54:50:6f:ce:b2:dc:b0:e7:cc:ce:c0:b0:d2:57:
                    b1:8f:f1:06:25:d5:5a:90:98:c9:1c:c6:51:5c:9a:
                    65:22:a7:f0:7a:f1:29:bf:3e:e9:3e:58:39:3d:50:
                    d7:4f:4d:32:58:fd:df:44:9b:bc:b3:4e:54:e4:a7:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:79:E9:8D:B4:32:4F:C6:16:39:03:2D:19:FC:F7:C3:05:1B:33
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1c:bf:94:17:5c:fa:cb:d6:f1:ee:44:bf:fc:80:c2:d8:83:
         0a:4a:d0:bb:d8:ad:58:ff:e3:ef:d8:4e:de:1b:9a:af:4c:93:
         06:b4:de:0f:65:4f:f3:8c:3d:30:8c:b3:8e:e6:ca:43:93:b9:
         47:7e:8f:20:fb:32:a6:73:9d:9a:cf:94:56:ec:e4:65:7d:7e:
         81:d1:ea:af:f3:a4:c3:87:b7:27:05:12:ba:91:01:4b:32:4f:
         ed:a9:3a:7c:99:78:50:e0:40:52:6c:36:ea:b5:e7:eb:e4:8d:
         f4:a7:8f:f4:66:f7:ae:c1:b0:11:31:33:d1:c6:57:4d:63:39:
         ba:e8:79:e6:f7:ca:a8:80:ef:76:d7:cb:cf:59:c4:cc:30:b4:
         0b:fa:4d:b3:82:ec:fd:56:59:ed:2c:17:86:e4:eb:6a:12:99:
         46:ed:6f:30:5e:95:1c:a1:53:63:8e:36:3a:f5:8b:a6:f0:a5:
         3d:9b:96:b6:8c:39:2d:35:77:8b:3d:8b:49:3f:19:2c:48:5a:
         9e:54:4d:0f:5d:b5:60:78:55:81:29:2b:cf:19:fd:d0:fc:d9:
         e7:93:c9:0a:a7:a2:5c:01:c6:48:37:9f:62:c4:c7:b1:2e:fa:
         a0:f0:ae:c0:cf:0f:56:79:33:ca:5e:c2:8b:3e:b0:cf:bb:33:
         a3:c6:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:35 2026 by rpki-client