Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File:                     uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier:          Um7ygVji/pnmm5rFwBIcDPQuTBR5vryWE/7HnnHqo0o=
Subject key identifier:   A1:B8:0D:F5:C6:BA:AF:2B:D1:F4:F4:84:C0:7F:6D:35:40:68:0C:2D
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number:          A9
Signing time:             Sun 01 Mar 2026 08:29:21 +0000
Manifest this update:     Sun 01 Mar 2026 08:29:20 +0000
Manifest next update:     Sun 08 Mar 2026 08:29:20 +0000
Files and hashes:         1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: qTrX7V+cKLvbyAzzkwMrDzHV9HNyYMgrD9Adj5SpbW4=)
                          2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: prE9EyvOyNfHIglYsxqj47xctVFyrjvR30YVs38FCp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Mar  1 08:29:20 2026 GMT
            Not After : Mar  8 08:29:20 2026 GMT
        Subject: CN=69a3f8e1-eb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:64:1a:29:24:7e:a3:26:33:7c:74:f7:fb:
                    96:99:ab:01:e8:5a:55:3c:c5:78:25:93:4c:01:be:
                    cd:61:dc:13:9b:fd:f4:ab:b5:5f:8d:c9:5e:0f:e1:
                    7b:40:84:c0:c7:c4:0e:d1:c3:3e:68:ba:44:4d:06:
                    da:7b:3c:85:a1:23:c5:aa:74:64:42:b3:8b:bc:fd:
                    9b:07:9c:71:e7:94:c9:1c:c4:48:02:bf:e5:34:bd:
                    96:f2:fe:af:09:3d:c2:1f:61:22:89:e8:2c:f4:53:
                    04:13:c9:b3:48:ba:5e:04:cd:8c:c3:2d:64:4c:3c:
                    7b:00:94:f2:12:ba:96:fd:8e:2b:12:6b:f2:86:ef:
                    42:0d:30:e6:e8:82:0d:62:00:de:9c:08:c6:6e:51:
                    75:08:65:87:bb:6f:e9:31:ae:fe:2f:96:ec:e5:f5:
                    50:03:90:c8:f4:93:1d:ee:64:f7:aa:ea:1c:81:6c:
                    d5:83:41:cd:8c:8d:33:29:82:24:9b:7b:b2:92:ad:
                    7d:76:51:b3:d6:7d:bc:cf:5b:5f:62:10:de:31:77:
                    a8:17:f5:f7:f9:a7:c6:cc:cc:19:a9:ff:a6:9f:44:
                    32:ee:a5:74:0b:05:85:70:6f:da:f3:46:11:ca:87:
                    2b:36:5b:0d:04:41:a7:86:c8:2f:9b:6a:66:0b:f8:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B8:0D:F5:C6:BA:AF:2B:D1:F4:F4:84:C0:7F:6D:35:40:68:0C:2D
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:15:36:68:1c:93:32:76:b4:24:4a:97:81:a6:24:19:9e:46:
         f8:37:59:dc:5b:ef:09:ae:36:87:a9:69:26:f5:33:2e:6c:f1:
         c5:4f:a9:d8:f4:15:e1:01:21:8e:d4:63:5c:2f:30:28:15:6b:
         78:64:d8:c6:98:05:d9:e8:3c:c0:d8:4d:c6:f1:9c:52:2b:a2:
         a3:d4:95:64:85:83:3d:b9:61:4e:64:7f:ef:5c:b3:16:52:24:
         84:e0:da:ce:6e:b1:a3:95:77:8b:6f:7a:d8:68:ac:59:49:5b:
         7f:2f:91:54:bb:76:37:0b:98:10:c3:f4:ff:c0:c0:d6:7a:f4:
         79:da:36:69:10:54:80:50:99:9a:82:bb:b7:80:48:6d:99:82:
         80:18:8d:92:3a:c7:ed:cd:52:bc:7d:6d:42:28:63:55:7a:f6:
         bc:9d:68:5c:ed:b0:6a:39:01:aa:62:29:ea:52:5f:d2:be:ce:
         aa:97:49:d9:34:ab:cf:c1:df:f9:23:17:a6:09:bb:a1:2c:7e:
         8a:b3:c0:88:86:31:aa:96:56:e5:7d:30:bc:67:16:90:8b:6e:
         dc:0b:b7:52:e8:fd:e0:9a:43:b7:c5:b3:b6:c0:c9:55:9f:0e:
         2e:70:ed:1d:c4:fe:bf:8c:f0:c2:9c:04:32:16:d8:a0:96:64:
         c6:33:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:20 2026 by rpki-client