Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File:                     uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier:          iPhWaV2C1eWL/dskAdiScCzpIBPpiTCW9Awk+o0Fok0=
Subject key identifier:   2D:D4:3F:9F:DA:B7:35:84:6C:71:19:44:EC:AB:AE:21:E7:EC:57:FC
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       0402
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number:          03E4
Signing time:             Mon 02 Mar 2026 01:40:00 +0000
Manifest this update:     Mon 02 Mar 2026 01:39:57 +0000
Manifest next update:     Mon 09 Mar 2026 01:39:57 +0000
Files and hashes:         1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: LX78Dt8INZCuiX9TmgHknJxv5NhH/mw/8nByVkK6R3M=)
                          2: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
                          3: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
                          4: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Mar  2 01:39:57 2026 GMT
            Not After : Mar  9 01:39:57 2026 GMT
        Subject: CN=69a4ea70-b6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:1d:a5:20:c0:18:9f:8a:86:3f:f1:46:49:
                    9f:a1:5e:3a:06:e4:fb:d6:da:6c:b4:c3:3c:b3:ee:
                    2c:ed:51:a1:c5:16:a7:7c:78:07:d2:a2:12:d3:c7:
                    82:a8:f0:d2:70:24:73:d9:7f:ae:9b:aa:c5:98:c0:
                    1e:73:3f:6f:9a:35:23:c9:b8:e7:c8:d0:dd:da:9c:
                    a8:d9:f7:f8:a4:13:80:a0:0c:3c:33:d8:dc:e5:8e:
                    0e:ef:1e:fd:90:e5:82:19:5c:dd:19:10:47:bc:54:
                    d5:19:05:ed:cd:dc:32:52:55:a4:bb:12:e3:90:7d:
                    f4:ac:00:f2:a0:bc:b1:9d:05:65:67:81:96:4e:5b:
                    3d:0e:71:3c:64:6f:37:e2:64:30:b3:77:df:5d:ca:
                    29:9c:30:70:f1:f3:fe:a4:fd:8b:af:bb:ea:50:c2:
                    71:e9:16:66:0c:f6:79:c8:25:f0:0c:d8:c8:ea:18:
                    61:4b:2f:e1:f7:f7:ae:22:9b:89:36:5f:74:80:d3:
                    38:4a:3a:ac:98:cd:1b:dd:c0:a2:66:14:94:91:3f:
                    d1:27:e7:1d:e0:ce:9e:8b:1c:51:fa:31:83:71:27:
                    24:82:75:6a:71:13:77:c4:3b:bc:79:ce:ca:2c:4e:
                    bf:4b:53:39:6b:2c:a5:e9:4d:8e:b8:6c:19:46:34:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D4:3F:9F:DA:B7:35:84:6C:71:19:44:EC:AB:AE:21:E7:EC:57:FC
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:17:78:03:f5:cf:8b:07:8d:23:f5:36:c3:23:1b:f2:f7:
         e2:75:ec:81:42:42:c0:81:61:a0:9a:3a:ad:3c:67:b3:d7:3a:
         de:57:51:2a:66:9d:d4:98:13:f0:ca:28:36:f1:99:54:12:d6:
         66:6d:e7:ea:8c:69:95:82:3c:93:d0:a9:ef:c5:bd:97:e9:81:
         af:1c:cc:e6:29:fa:a5:7b:2b:d9:d6:bf:a9:93:c5:e9:c4:c1:
         26:cb:eb:b9:5d:28:77:11:53:1c:ba:ed:93:75:bd:c2:67:1d:
         6f:a9:f2:50:f8:49:dd:ac:de:f2:53:cc:9a:fa:de:dd:3b:fe:
         84:45:15:1c:15:44:7b:84:d1:de:76:69:8f:82:e0:18:90:35:
         0e:b4:ba:98:9a:e1:7d:fc:d5:a5:8f:bd:3c:e1:b2:7d:12:c0:
         b3:7f:7d:56:11:23:63:b7:b7:47:19:9f:28:ea:c8:5e:d6:b8:
         bb:c7:24:5d:b8:d8:a4:c3:5d:3d:95:f7:a8:bc:31:4a:2c:32:
         4a:1a:2c:d9:73:68:c1:a7:a9:45:95:d5:15:fd:0b:7b:7c:db:
         ab:e9:43:a7:b2:34:d7:d2:fa:35:f1:33:92:72:7c:30:87:02:
         53:59:a9:29:10:5f:85:14:1a:43:34:5d:df:ce:d8:39:27:d2:
         47:1d:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:09 2026 by rpki-client