Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          FnzVkyPATXcEOfP11l9GtAgFWNr7P5A09ZJ/H+ObkSA=
Subject key identifier:   A2:14:88:6C:B9:49:4C:13:FE:60:C3:82:A4:E5:2B:E2:33:4B:5E:A6
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          0128
Signing time:             Sun 01 Mar 2026 06:44:30 +0000
Manifest this update:     Sun 01 Mar 2026 06:44:30 +0000
Manifest next update:     Sun 08 Mar 2026 06:44:30 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: +3rYJCgWjVDvSjc+CJjqxpCXRACKkRNCkwP/1dNVmxE=)
                          2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: SNFqVWFy/zXpL+IO4VqM1BTZFXQSMMWQWnpzgvn2Vas=)
                          3: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: DWobNNjYUDF40GA20B1X0QtXEeNHdShUWUjKiS6DHGw=)
                          4: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: ZhBtT8PPZLIx6KpVofQIdCfnHMsDO/G3FnbenkGUmNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Mar  1 06:44:30 2026 GMT
            Not After : Mar  8 06:44:30 2026 GMT
        Subject: CN=69a3e04e-29dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:3e:4c:f9:f7:c7:0f:49:0f:40:e3:b7:32:
                    eb:fe:6d:f1:e2:44:42:f0:b7:ac:09:d9:3d:d7:97:
                    fb:f8:19:dd:42:c8:82:a5:82:44:14:5b:4e:f3:5e:
                    44:39:d9:f1:50:45:79:e7:63:ca:3f:56:62:cd:19:
                    17:b8:52:41:ea:53:ff:2e:c0:4c:a4:21:40:69:1b:
                    92:91:93:ea:17:87:4b:91:c3:5d:14:c2:d9:20:f7:
                    8b:28:9e:3c:1f:3e:4e:e9:64:5d:c0:53:65:91:6e:
                    2f:fd:a0:4e:09:26:36:2b:a1:2a:d9:94:cc:98:83:
                    34:3c:86:68:81:b6:89:b4:87:d4:f2:08:97:ef:36:
                    76:f6:f3:a5:02:27:fa:6f:45:9f:da:c0:2d:99:df:
                    c7:ca:1c:de:6b:e8:4a:25:0f:db:69:c9:f4:f6:95:
                    0d:58:2b:00:9b:e8:27:38:e7:ed:43:4f:ed:c6:28:
                    82:4c:a0:ac:91:e7:48:f5:48:39:cf:0e:4e:0e:57:
                    35:7d:87:d2:9e:dc:2e:bd:c0:3a:0c:27:26:41:56:
                    57:d4:a5:a0:58:6f:09:37:10:27:f4:bb:74:bc:57:
                    5d:f1:63:6e:db:32:df:a1:f9:f5:46:c7:7f:2b:43:
                    34:ce:01:55:b0:41:0d:48:1b:48:6c:17:f3:50:b0:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:14:88:6C:B9:49:4C:13:FE:60:C3:82:A4:E5:2B:E2:33:4B:5E:A6
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:3d:19:b2:82:6a:8f:0e:14:47:dd:c3:90:26:58:17:95:
         06:56:c4:ed:1b:d3:50:e5:98:5c:fc:90:42:fa:33:d6:b2:7e:
         cd:7a:be:e0:94:70:4c:8b:1d:51:9b:e2:bd:9b:5d:31:6f:43:
         0b:07:ee:1a:14:f4:67:83:b2:86:b4:5e:87:c4:b0:18:39:01:
         15:4f:8e:3d:e6:32:f3:79:48:39:89:14:d3:c7:07:45:b8:e5:
         44:16:f0:8a:64:93:81:cb:60:40:ad:9d:4a:e4:ae:11:88:3b:
         3d:fc:93:70:74:98:9c:12:d8:cc:a3:ba:2c:c3:5a:35:7b:98:
         ae:34:87:49:98:8f:af:09:b1:00:2d:07:e7:37:a4:3d:1d:bd:
         90:33:a3:2f:4e:81:47:48:df:a2:92:2d:92:88:c1:f9:d3:c1:
         fe:1c:b3:c6:69:36:04:fa:36:5b:20:3e:64:b6:73:e3:b7:6b:
         a8:65:9d:0a:d4:2f:7f:72:54:4b:04:7e:43:41:aa:9a:a3:e6:
         e3:11:b8:b1:01:57:f0:9e:44:e1:1f:cf:d9:4e:81:7e:22:7a:
         a9:d1:8f:ee:df:4f:b3:d2:38:0c:9d:0e:57:99:bb:6f:36:8c:
         28:6f:e2:1c:65:23:c3:ae:67:37:c8:18:43:a2:bd:f6:c4:20:
         25:a0:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:17 2026 by rpki-client