Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File:                     UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier:          JMESBLzuPzHLfd5zO6nbTrHvaiuE0kfvKzVRhnMHeWU=
Subject key identifier:   58:67:E2:2E:4B:EF:C9:D9:F0:01:58:58:E8:33:0B:21:AE:EE:9E:01
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer:       /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number:          011D
Signing time:             Sun 01 Mar 2026 06:50:47 +0000
Manifest this update:     Sun 01 Mar 2026 06:50:47 +0000
Manifest next update:     Sun 08 Mar 2026 06:50:47 +0000
Files and hashes:         1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: ZRGz3jySMtWWHh7ecMQC6TmvUSFF/QyC15itD/rwKg8=)
                          2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: nCdw/pdOq9y5TEkGVX9N7sYIIziw8hJRZc9PdeGmDU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
        Validity
            Not Before: Mar  1 06:50:47 2026 GMT
            Not After : Mar  8 06:50:47 2026 GMT
        Subject: CN=69a3e1c7-4dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:66:e2:4e:a6:df:ad:e4:57:76:02:25:b6:
                    a2:13:5d:a0:c9:64:ed:c7:92:2b:2d:9c:db:67:5b:
                    ae:12:c9:a6:f0:b6:50:03:45:ec:f6:94:19:e2:d5:
                    cd:32:1c:50:8e:11:c6:37:b7:f0:61:f5:36:cc:bf:
                    16:0a:9f:7f:43:eb:73:11:e0:b4:9c:5f:a6:71:b3:
                    4a:9b:f2:82:89:72:cf:c2:64:ac:ba:2c:ad:63:0a:
                    24:fe:d3:75:b5:78:6c:a2:8e:03:21:33:aa:3d:cc:
                    55:39:b3:a3:34:25:a5:62:cb:53:34:c5:eb:f4:34:
                    7f:41:a4:92:d9:88:c7:91:fa:98:f8:3d:a4:af:b4:
                    28:5f:c9:0a:8e:2d:a5:98:cb:6e:e9:72:f3:b9:07:
                    30:ab:cb:a9:60:3f:7d:85:d5:62:cf:83:16:cf:19:
                    b4:79:28:62:df:c1:09:01:ba:4f:2c:45:61:87:18:
                    11:ce:ba:4b:47:8b:4d:7c:a2:3b:f7:3f:5c:c6:8d:
                    7a:d5:45:23:d7:b6:6a:bd:69:97:c0:83:cd:9c:ab:
                    3d:54:17:19:81:34:cc:45:aa:7d:0d:f9:f1:ad:f2:
                    d0:64:8d:b6:77:20:c8:a7:87:6e:3d:0a:66:21:74:
                    1a:f2:0b:77:ba:da:2a:f2:34:c9:fc:26:e6:a1:6d:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:E2:2E:4B:EF:C9:D9:F0:01:58:58:E8:33:0B:21:AE:EE:9E:01
            X509v3 Authority Key Identifier:
                keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a3:7b:4b:37:02:d1:8e:c4:36:ea:e4:b4:fd:44:40:2a:8a:
         7c:fa:08:71:b3:9c:66:3f:91:ec:fd:a0:b4:cc:19:4e:64:93:
         e9:64:11:53:37:83:65:70:1e:ed:cf:a3:4d:50:80:74:39:a9:
         66:b4:b2:17:80:2b:31:ee:7a:00:08:20:3f:09:2b:e3:d7:1a:
         9f:b5:00:fe:61:cc:28:38:6e:ff:4d:14:97:bb:a3:c4:49:b3:
         6c:a8:68:94:69:d0:3d:2c:d7:a1:3a:ec:b1:b5:21:ab:9f:54:
         ee:45:59:7b:86:7a:ac:0b:70:d3:4e:e8:de:4d:ef:c4:dd:83:
         9b:0f:4a:f9:78:33:c0:45:35:e7:c6:2a:61:aa:71:14:75:3d:
         20:b1:64:1e:8b:6b:80:51:13:f5:c0:4f:55:72:c6:17:7f:73:
         1f:eb:ac:f3:73:6b:b1:be:82:f4:1a:2b:39:57:57:0e:3c:80:
         6a:b4:07:13:d7:84:b0:5a:3a:21:9b:26:12:4d:c2:29:75:80:
         68:37:fc:00:bb:9b:0f:a9:29:a7:34:71:a8:de:86:4e:f3:cc:
         b8:49:31:90:d0:c6:7a:f0:88:59:35:00:26:32:9b:f6:f9:d4:
         85:9d:91:7c:30:56:24:1d:7b:1a:e0:20:02:ee:08:90:f9:6f:
         8e:d6:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:03 2026 by rpki-client