Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File:                     uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier:          pHlQxe0dLBSIO7Bqev8SpE6AsjvCn5EmBRk9R2vHxUM=
Subject key identifier:   2A:35:B7:F4:9E:F1:FE:2C:3F:22:C4:68:A5:54:56:95:65:F4:08:6F
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer:       /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number:          0373
Signing time:             Sun 01 Mar 2026 01:42:25 +0000
Manifest this update:     Sun 01 Mar 2026 01:42:24 +0000
Manifest next update:     Sun 08 Mar 2026 01:42:24 +0000
Files and hashes:         1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: d+Z3rjZW7NoN3xFojUU4l0i42F1u7ABdf8agZ5L9xbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
                          rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
        Validity
            Not Before: Mar  1 01:42:24 2026 GMT
            Not After : Mar  8 01:42:24 2026 GMT
        Subject: CN=69a39980-fd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:ba:eb:af:9d:82:d8:54:f0:7f:0a:a7:05:
                    36:e9:04:6e:74:93:21:2a:ba:58:33:1a:b2:a3:99:
                    d2:d7:a4:23:32:f5:da:1a:a0:d6:2c:8b:fa:d8:05:
                    04:9a:c5:4e:3b:31:f4:1b:19:11:31:24:b8:5c:70:
                    23:0a:de:55:9c:fb:91:d0:e7:8a:9b:0d:ba:f3:36:
                    dd:75:c5:74:c4:cb:9b:30:f8:69:cd:6d:69:1b:4d:
                    7c:0d:95:2c:23:b4:87:2c:b8:17:0a:d0:53:3a:a5:
                    4c:1e:9b:f6:70:ad:9f:81:df:61:0b:56:da:d9:1a:
                    2f:22:eb:0d:df:d8:f8:ae:43:60:eb:b4:bd:5c:e9:
                    38:88:76:7d:e4:5f:04:d7:3c:02:d6:e0:73:2d:28:
                    a5:2c:1b:d5:81:18:5b:ef:72:79:cf:ed:fd:7c:17:
                    d8:0e:90:e3:1e:5c:2d:3f:8d:8b:e2:5f:7a:c5:dd:
                    e4:f9:6b:c3:b0:c1:58:7c:93:84:bd:5d:25:7b:66:
                    8a:9b:b9:46:01:94:16:80:73:c1:de:af:cd:7b:51:
                    4b:f6:8e:9a:f3:e1:63:00:c1:d1:0f:79:14:75:94:
                    f7:c5:1f:37:d1:a9:89:8a:39:53:8f:d0:9c:e2:f9:
                    4d:18:a9:a3:f2:15:aa:26:e5:25:30:65:3d:fc:ea:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:B7:F4:9E:F1:FE:2C:3F:22:C4:68:A5:54:56:95:65:F4:08:6F
            X509v3 Authority Key Identifier:
                keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:97:da:fe:3a:c6:39:1a:36:f1:07:3b:db:32:96:62:58:49:
         45:e0:00:30:78:a9:7c:1c:a5:91:63:0f:f7:85:13:32:9d:45:
         42:ae:ca:7a:25:6a:de:e7:b3:86:bb:32:31:24:c7:3a:67:b8:
         f2:8e:34:d5:74:b7:b5:74:74:d2:b9:0e:d7:c5:eb:58:1c:06:
         aa:93:f3:8f:b2:6d:f9:f3:51:00:14:f9:16:27:65:a9:91:c5:
         2f:6f:22:c7:7f:5c:0a:ec:4c:f4:e1:1f:83:58:19:1f:72:37:
         7e:b5:99:c3:66:22:37:09:10:94:9e:9e:0c:9c:a3:89:55:28:
         22:d8:c6:d2:88:b7:46:68:c9:d5:42:7c:bb:37:33:1a:3e:93:
         09:85:a8:44:52:1e:6f:02:f1:15:f3:23:72:a7:c8:04:1c:8c:
         fd:fc:e1:29:9a:33:6c:a5:a0:24:f8:ce:33:30:e2:b8:ff:32:
         fe:38:3d:4e:fb:f5:b7:39:50:62:4f:3a:b4:20:32:04:a6:70:
         92:1d:de:53:0d:9d:e8:4b:90:1e:26:be:ee:04:ec:7c:64:f9:
         e6:cf:a3:12:59:32:e3:5b:cf:52:37:e6:d9:64:50:cb:a7:76:
         98:eb:32:5e:e9:2c:0c:fa:3d:b7:d6:0b:98:a2:b9:3f:2a:f5:
         1a:21:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:37 2026 by rpki-client