Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File:                     UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier:          2VGVm4fkySkS6739ehPkXEe5hpKcMI2Hh4sIN8WARWI=
Subject key identifier:   BA:1C:CD:6E:00:53:92:4E:83:16:86:16:AC:95:35:19:2A:8B:6C:7A
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer:       /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial:       0C79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number:          0C58
Signing time:             Sun 01 Mar 2026 23:40:52 +0000
Manifest this update:     Sun 01 Mar 2026 23:40:51 +0000
Manifest next update:     Sun 08 Mar 2026 23:40:51 +0000
Files and hashes:         1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: 9YCAQPlacgtT3kgclRefskGiszDyK1iEmW1Ms34hKwA=)
                          2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 0bSOB/53Q4CnsHiRHRQjTaSyhF0NlPUf+gIb0uja9MY=)
                          3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: fr4dysk/P3zUmlCOKjsEU0eRwe8F4JdrkBJKvGf87s0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
                          rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3193 (0xc79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
        Validity
            Not Before: Mar  1 23:40:51 2026 GMT
            Not After : Mar  8 23:40:51 2026 GMT
        Subject: CN=69a4ce84-b77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:e0:f4:d9:b4:82:95:b8:08:69:81:bb:b5:
                    88:0e:ca:e7:ac:7d:dd:c6:36:71:bb:99:db:26:e3:
                    4c:bf:87:ca:00:d2:71:46:e3:6b:4d:12:49:aa:a8:
                    33:73:49:fd:9e:81:e4:53:3b:39:ef:86:b9:76:bf:
                    b3:66:d2:88:64:77:16:a1:76:5f:63:23:34:f5:64:
                    9a:91:66:0e:35:3c:13:d2:22:4c:bf:dd:78:dd:c6:
                    32:ce:53:1c:c5:86:0b:9c:c6:93:80:e1:42:b2:e3:
                    01:c6:b4:9b:d1:89:90:72:3a:b2:82:cb:5f:c4:4c:
                    88:90:c2:53:3b:6b:3d:f7:62:16:2d:c1:02:5c:4a:
                    27:26:0c:df:46:c8:f7:1a:ba:93:81:de:2b:57:98:
                    54:01:a5:34:b8:93:af:ab:f2:89:1d:66:59:ab:de:
                    5c:0a:ae:66:08:8d:e1:e7:45:29:1f:17:26:45:02:
                    c5:c9:94:15:91:2f:85:21:c3:7a:c9:6a:2f:da:88:
                    8b:d5:99:c7:f4:91:f4:fc:b0:53:ce:01:39:3b:5a:
                    5d:ae:cc:1c:84:f0:61:ce:16:b4:2b:fa:3f:25:cd:
                    2a:56:0e:e5:f5:33:d1:74:87:00:ec:ad:28:a3:13:
                    4b:26:8c:98:c2:16:0f:13:5c:d0:a5:5a:cf:9d:8f:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:CD:6E:00:53:92:4E:83:16:86:16:AC:95:35:19:2A:8B:6C:7A
            X509v3 Authority Key Identifier:
                keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:91:67:df:ec:a7:b8:09:8d:4d:98:17:50:94:66:2d:b3:
         8e:d5:16:15:cd:79:5a:99:c8:64:20:f2:8c:77:96:82:81:ef:
         b6:94:c4:6e:26:bf:db:4e:ab:bf:33:94:25:6c:47:e2:81:51:
         f5:8e:82:08:ad:7b:7b:db:50:d8:5d:1e:e4:cf:fc:18:d5:c5:
         15:f8:56:30:9b:f2:7d:45:8f:35:95:17:99:b6:29:29:63:2a:
         15:d0:e1:0c:04:83:ce:c6:95:64:43:ac:69:79:84:54:70:71:
         ed:d8:4e:0d:8f:c4:28:db:13:fa:56:46:0a:31:60:4d:7e:e9:
         10:91:1a:e9:14:51:09:cc:d7:54:61:89:c8:66:97:66:1e:6f:
         38:42:35:6e:d2:4e:2e:12:f8:e5:7c:8f:e2:ed:e0:0c:ef:db:
         4b:0a:6f:26:88:ad:72:1e:3c:d7:0c:ad:2a:ea:1d:b4:1f:2e:
         e3:b3:33:fb:4c:75:37:78:89:67:f5:a7:c9:ee:cf:2c:f1:4d:
         fb:5d:d4:c7:04:7e:90:e3:62:6f:c8:6f:13:2b:16:25:a0:4a:
         ef:9d:4e:1a:88:1d:70:2d:5f:6e:eb:ac:a3:31:e6:c2:5c:39:
         73:b7:9a:5b:2f:91:54:b6:eb:18:4b:ca:b0:00:fb:82:52:db:
         ec:3d:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:01 2026 by rpki-client