Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          VEAl1E+tV/DXHZQ+q2eX8Xmvith88O9GZ7fdXUEyuDI=
Subject key identifier:   0B:A0:FD:3C:4C:9D:A6:6A:CF:DD:70:02:E9:A4:93:30:39:1B:5A:09
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       06D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          06B8
Signing time:             Sat 28 Feb 2026 22:57:02 +0000
Manifest this update:     Sat 28 Feb 2026 22:57:01 +0000
Manifest next update:     Sat 07 Mar 2026 22:57:01 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: ZThmCHtBOPDC1OmjDtQKxnusQlMtbTtNDgf5NBfpIAc=)
                          2: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: t68ri8+sG+PCgnACutRhiIQMtoo2iXpsz04+S32xy6c=)
                          3: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: gznbpzQsXm6xdg/ldBzHxBtH3yLXVXqXYnLIiSuqeug=)
                          4: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: 5xwHH4/f23qWAT+TboZC+tRvenA32AbWJXTfPPug25w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Feb 28 22:57:01 2026 GMT
            Not After : Mar  7 22:57:01 2026 GMT
        Subject: CN=69a372be-7b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:f5:6d:98:c9:9b:28:e9:54:8a:75:50:76:
                    97:40:59:08:3e:db:e9:29:ea:46:7d:96:9e:44:da:
                    dc:66:f6:5b:3a:4d:87:73:b5:d2:b7:d2:9f:62:16:
                    89:2d:1c:a5:73:17:23:75:8e:f3:a1:ff:81:8e:67:
                    6c:ad:7e:7b:8c:00:a0:41:72:08:94:35:d4:02:87:
                    aa:ba:5b:16:16:7c:4e:e4:b9:be:ba:c4:0e:2d:98:
                    8d:af:47:7c:01:b4:cc:a4:40:1f:cf:b6:bf:aa:dc:
                    b1:69:52:9e:2b:75:e7:14:56:58:1a:6c:b8:fc:31:
                    8b:de:b5:0b:21:76:46:dc:b8:73:37:52:6b:5b:9a:
                    33:1d:25:cc:9f:21:7f:e3:7c:99:59:d0:e4:4e:c4:
                    94:54:75:9e:82:e9:04:5c:cf:11:5c:39:92:a3:f4:
                    1b:52:bd:1b:65:17:d7:d9:b2:45:0f:4c:93:8e:3c:
                    90:6d:0c:d2:5d:30:ae:62:24:02:68:22:25:fb:07:
                    ed:fd:10:3b:b1:58:e5:7a:2d:f1:cd:c3:44:8b:89:
                    22:1b:31:08:d3:52:4e:95:2f:7e:bc:ca:06:23:64:
                    bc:d7:a7:2d:51:52:9a:0e:17:15:55:0c:fd:1c:c3:
                    a0:47:86:b2:f7:92:0f:50:e8:5b:a4:a2:ed:fa:12:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:FD:3C:4C:9D:A6:6A:CF:DD:70:02:E9:A4:93:30:39:1B:5A:09
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:a3:93:bf:bd:31:8e:18:fd:76:c5:8e:28:31:71:09:f9:
         9a:42:6c:8b:4d:26:d5:26:d9:bf:4d:42:72:44:17:5f:60:87:
         59:f0:8f:63:1b:b3:f3:03:0a:59:8b:f8:e5:64:16:11:d3:6c:
         5d:08:7d:fc:78:9e:b0:c0:02:cd:11:2b:8f:cf:76:36:88:b7:
         4d:4d:17:6a:bc:b0:bb:2d:91:21:ca:8d:14:fc:69:ba:41:f4:
         a5:08:c1:d2:f7:77:1c:53:65:45:b9:e2:61:6e:49:d0:cd:f7:
         37:7c:d5:d1:6f:54:c6:71:68:53:41:0d:bc:94:fa:34:ed:7f:
         e0:6c:87:4c:69:8d:1f:ef:b3:28:5a:05:b5:22:b3:0e:fd:7a:
         9c:ce:fe:59:57:6c:05:7e:2d:5c:d6:c7:f0:8a:47:e9:ba:42:
         a2:a9:a6:ad:16:ee:5a:76:d1:1a:e7:4a:cb:73:32:47:68:62:
         92:f1:f4:62:4d:68:5f:62:10:9f:86:87:6c:2f:3a:8b:64:fd:
         9f:dc:5e:13:82:52:a9:fa:b8:70:fd:0e:1a:06:da:88:7f:77:
         03:b2:2e:b9:aa:16:b5:50:b9:d0:f2:3e:cc:f6:43:7f:ea:79:
         e7:d5:76:9d:f8:5d:11:0d:5e:0d:08:0b:a6:5f:b5:00:85:cb:
         a6:e3:2d:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwMjI4MjI1NzAxWhcNMjYwMzA3MjI1NzAxWjAYMRYwFAYD
VQQDDA02OWEzNzJiZS03YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUP1bZjJmyjpVIp1UHaXQFkIPtvpKepGfZaeRNrcZvZbOk2Hc7XSt9KfYhaJ
LRylcxcjdY7zof+BjmdsrX57jACgQXIIlDXUAoequlsWFnxO5Lm+usQOLZiNr0d8
AbTMpEAfz7a/qtyxaVKeK3XnFFZYGmy4/DGL3rULIXZG3LhzN1JrW5ozHSXMnyF/
43yZWdDkTsSUVHWegukEXM8RXDmSo/QbUr0bZRfX2bJFD0yTjjyQbQzSXTCuYiQC
aCIl+wft/RA7sVjlei3xzcNEi4kiGzEI01JOlS9+vMoGI2S816ctUVKaDhcVVQz9
HMOgR4ay95IPUOhbpKLt+hLlJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAug/TxM
naZqz91wAumkkzA5G1oJMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHc2jk7+9MY4Y/XbFjigxcQn5mkJsi00m1SbZv01CckQXX2CHWfCPYxuz8wMK
WYv45WQWEdNsXQh9/HiesMACzRErj892Noi3TU0Xarywuy2RIcqNFPxpukH0pQjB
0vd3HFNlRbniYW5J0M33N3zV0W9UxnFoU0ENvJT6NO1/4GyHTGmNH++zKFoFtSKz
Dv16nM7+WVdsBX4tXNbH8IpH6bpCoqmmrRbuWnbRGudKy3MyR2hikvH0Yk1oX2IQ
n4aHbC86i2T9n9xeE4JSqfq4cP0OGgbaiH93A7IuuaoWtVC50PI+zPZDf+p559V2
nfhdEQ1eDQgLpl+1AIXLpuMtGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:42 2026 by rpki-client