Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier:          5rz0EVHZxmQ5OVY8EXzq6BDDMlQSYw5gw2aQKKQFUFo=
Subject key identifier:   70:51:7A:28:22:F5:2D:A2:67:D1:FE:FF:9A:35:AC:36:C5:13:7A:65
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer:       /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number:          0239
Signing time:             Sun 01 Mar 2026 03:16:07 +0000
Manifest this update:     Sun 01 Mar 2026 03:16:07 +0000
Manifest next update:     Sun 08 Mar 2026 03:16:07 +0000
Files and hashes:         1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: FWnYwmaq863BV0x+DGQpYciB2RBjiLucM4c5NXpuEyQ=)
                          2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Validity
            Not Before: Mar  1 03:16:07 2026 GMT
            Not After : Mar  8 03:16:07 2026 GMT
        Subject: CN=69a3af77-e7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:d8:a6:f7:d2:fc:1d:84:75:f1:60:cf:ca:
                    0c:bc:6e:3d:f3:d2:9e:81:21:aa:01:c4:22:4d:7b:
                    ca:c2:b8:13:d1:96:d2:14:ea:b9:da:93:33:94:45:
                    8b:e4:e2:86:b4:99:6a:2e:eb:12:5a:91:0f:15:bc:
                    e5:d8:74:b0:b5:d0:f7:21:29:e5:f7:87:0a:3b:80:
                    c3:52:75:49:5b:f3:ad:b7:b9:55:4f:aa:6e:43:2b:
                    f4:bf:50:66:62:67:12:07:a0:0a:0e:2e:e7:ce:b1:
                    c1:82:89:fc:0d:28:30:53:7b:e1:0a:37:88:2a:a9:
                    1d:79:a7:84:93:d4:51:b7:dc:36:f1:b6:27:e1:ad:
                    10:82:11:6a:7a:a7:8a:e5:6c:1c:50:7e:3d:c9:f1:
                    ab:04:25:a4:6c:7a:7e:4f:3f:e4:e3:7d:e0:88:80:
                    4b:c4:9a:5f:55:f0:f4:d1:c7:d5:6a:3b:69:16:cb:
                    3e:20:d6:63:1f:36:64:4d:63:90:74:8c:2b:31:6e:
                    b0:2a:ed:53:ef:c5:b5:29:26:12:14:bb:fc:01:ee:
                    02:b1:6c:83:09:dc:e0:cf:e0:90:84:14:39:e6:38:
                    ff:56:0b:11:c0:75:4c:8d:6c:d2:43:05:87:bb:58:
                    54:74:e1:64:1b:de:94:29:3e:ef:3e:ef:84:fc:88:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:7A:28:22:F5:2D:A2:67:D1:FE:FF:9A:35:AC:36:C5:13:7A:65
            X509v3 Authority Key Identifier:
                keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:b0:8d:bb:d5:27:78:8a:34:e6:7c:fb:e5:95:09:06:73:
         48:9c:54:d2:74:6d:f6:71:57:e3:78:ec:1a:16:e2:83:e0:09:
         c6:ec:f9:38:d5:2f:50:9f:0e:7f:ba:c4:ef:7c:ae:65:8c:a3:
         58:fd:32:5b:c7:ed:b8:90:dc:fb:87:c5:0f:ea:a7:4b:57:12:
         76:f2:7e:a6:29:27:dd:18:cf:12:88:1d:26:47:16:04:42:a0:
         da:ee:05:a8:d0:71:d2:3c:1c:3f:3e:df:8b:09:37:96:ac:2b:
         42:26:1d:d7:81:7a:9a:10:06:f5:70:6d:ab:1f:90:89:eb:d8:
         c6:dc:7f:e2:87:e9:c2:87:02:22:51:a0:7c:11:74:7b:95:39:
         9b:f3:7e:eb:95:52:fb:fd:b2:38:17:7b:d2:24:54:8e:fa:a0:
         a3:b0:c4:69:df:fb:73:5e:c7:a8:53:fc:a0:19:28:36:e4:4c:
         a8:5d:d5:85:b5:af:22:76:92:66:81:89:99:ca:42:18:3b:e7:
         32:32:91:64:84:a1:4c:b9:65:4a:79:d7:68:61:97:02:85:fe:
         5c:71:8d:da:1c:33:b0:85:e2:5b:f4:9f:ec:17:89:22:ee:70:
         5e:48:bb:9f:14:c5:ef:d5:93:31:c3:41:08:3e:72:41:fd:4d:
         75:be:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:40 2026 by rpki-client