Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File:                     uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier:          SSLwEQ/Qw93DnwekpJKWKMEM0q+tMl++Oqg5NlXstvo=
Subject key identifier:   2D:A8:B0:6C:EA:45:A8:30:72:B7:6F:52:99:F1:11:5F:2C:35:FC:80
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer:       /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number:          03F6
Signing time:             Sun 01 Mar 2026 23:49:52 +0000
Manifest this update:     Sun 01 Mar 2026 23:49:50 +0000
Manifest next update:     Sun 08 Mar 2026 23:49:50 +0000
Files and hashes:         1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: 2Ty2YFlk+ziiUzMQQ9VkQ9ay52kseG+QJJtLp3ob5+o=)
                          2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: Le3omTq6AVf81/vxDrqQySp0WQ9psZvV5ImOZQ8qwfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
        Validity
            Not Before: Mar  1 23:49:50 2026 GMT
            Not After : Mar  8 23:49:50 2026 GMT
        Subject: CN=69a4d0a0-be3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:33:d7:94:92:e4:06:64:0a:98:c6:29:d0:
                    3a:7e:af:e7:33:bd:69:57:b1:27:79:ae:67:cf:8f:
                    95:3d:b8:92:8e:58:c3:02:fd:78:e5:12:d1:cb:f2:
                    4d:89:46:fb:b6:12:6d:dc:ab:49:45:12:b8:34:a6:
                    47:14:4c:f6:d8:d1:12:58:2f:83:b3:29:b3:1b:66:
                    57:5b:7f:d8:0b:20:18:05:b9:e1:a3:97:da:6e:18:
                    cc:d7:c0:c2:21:29:f3:e7:17:ab:c2:ca:89:69:31:
                    88:16:0b:23:34:c7:ca:5d:b4:5a:e3:a4:49:40:72:
                    0f:70:22:5f:39:02:4e:01:8b:44:25:43:bd:83:4c:
                    de:0c:3a:db:54:f0:a9:bd:ee:33:17:7e:4d:75:d8:
                    fe:28:89:e1:3f:2a:d6:1c:57:cc:a8:26:2c:a1:24:
                    74:e1:c2:21:52:e8:7f:75:b0:75:a6:b7:8f:1d:72:
                    50:5c:f6:bc:56:ea:67:dc:df:56:21:f4:6d:c5:cb:
                    1e:53:4d:79:f1:86:7c:dc:66:3e:df:93:60:53:6a:
                    c0:ab:4a:f2:04:38:1e:93:57:4a:df:bb:d2:1d:54:
                    ab:a4:ea:14:4d:32:87:56:d1:9b:4d:5b:96:a1:9a:
                    35:20:a8:11:41:e6:44:99:14:1c:f0:45:f2:25:3a:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:B0:6C:EA:45:A8:30:72:B7:6F:52:99:F1:11:5F:2C:35:FC:80
            X509v3 Authority Key Identifier:
                keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:f0:68:a4:c9:b9:1e:43:e3:26:bb:b0:c5:36:e0:99:00:
         1f:64:99:50:95:ce:18:71:d7:e7:63:dd:50:8d:b2:60:51:96:
         fc:b6:0c:d0:6a:c8:a7:e9:d2:c7:21:ca:51:3b:77:c9:63:17:
         37:b1:fd:49:da:83:4e:ac:0a:30:2b:3b:75:19:02:8b:80:85:
         bf:03:35:36:4f:54:70:9f:c0:7e:4f:01:f8:16:b6:60:ce:e1:
         a9:32:ee:cd:cc:68:5f:a0:4c:ea:19:a0:30:41:50:a1:2d:93:
         2f:9b:ce:12:fc:94:0f:c3:c7:22:57:2c:41:e0:f8:dc:63:ef:
         bc:e0:d3:e9:7c:34:ad:5b:c9:a0:f8:1c:af:f6:ba:50:da:c2:
         8b:8a:2d:45:0a:ce:e0:8f:28:ce:65:5c:ef:31:61:f7:80:43:
         2b:f1:53:d4:5a:69:a7:b6:2a:5e:7f:08:07:8f:c8:67:9d:75:
         9a:d0:9c:66:31:ea:c8:9e:29:d1:8c:42:93:44:10:7f:dd:c9:
         c1:08:53:1d:66:ef:90:3f:f3:cc:ca:48:39:67:7b:9d:97:6d:
         02:63:2c:06:c6:96:ed:0a:f4:b7:62:95:d9:fc:cb:c8:8d:a2:
         c3:f3:63:19:1f:55:bd:5a:b4:33:ec:12:49:78:74:c1:c4:f6:
         03:fd:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:25 2026 by rpki-client