Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
File:                     uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft (raw, json)
Hash identifier:          3NjXJhpCtX+FQBm3L4utH/R7bgHc9pexHfkkoAupQAQ=
Subject key identifier:   90:2B:02:07:31:85:8C:C5:5F:57:DA:E2:0B:28:F6:CB:18:B8:46:79
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Certificate issuer:       /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
Manifest number:          86
Signing time:             Mon 02 Mar 2026 00:03:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:03:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:03:48 +0000
Files and hashes:         1: uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl (hash: E8wNOl7g5svPy8kX2TCfNxhVXLxUD8v7WUHZ4hQR0Gw=)
                          2: 7CC500A86DEC11F0BD1BF429C4F9AE02.roa (hash: ZaIebFS4/8vVvAF/zkH7WP2QeQVx2pb6rObiWL8nH0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
        Validity
            Not Before: Mar  2 00:03:48 2026 GMT
            Not After : Mar  9 00:03:48 2026 GMT
        Subject: CN=69a4d3e5-907a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:c9:42:58:cc:85:b5:e4:4e:76:4a:2b:d7:
                    6b:71:40:a2:c1:8b:9d:f9:ae:75:41:17:8d:d5:42:
                    47:4f:00:34:58:87:1e:0d:9e:0a:bc:bc:f1:06:59:
                    ba:55:b8:9e:8d:a7:0a:42:5d:80:88:cb:6e:4f:58:
                    f8:5b:34:00:d7:b1:ce:fc:ab:06:eb:12:c3:0f:f9:
                    19:58:e3:2c:96:b1:ea:ec:fa:09:ea:67:85:8a:0f:
                    7e:fe:2e:58:cd:c2:ad:0d:09:e8:67:c9:ac:59:61:
                    45:78:02:ea:15:5d:04:cd:10:01:51:a9:29:e2:54:
                    66:c3:9b:72:a8:4e:67:48:d8:43:9a:a6:bb:db:c3:
                    33:b0:e1:35:b4:93:d9:84:5b:f7:20:ed:3f:de:3b:
                    42:09:70:63:d5:5e:46:c9:74:d6:ce:93:d2:89:ff:
                    d2:46:e9:79:72:c7:10:66:1c:30:74:3f:43:f4:ad:
                    e3:33:a4:85:8a:09:35:70:3b:e5:94:e2:07:c0:1e:
                    6c:da:75:2e:52:d9:2d:d6:7f:b5:2d:d8:08:d5:a4:
                    46:b8:c4:8d:de:00:c1:7a:3e:be:30:bf:a9:67:2b:
                    8a:e3:30:9e:4d:e0:db:2a:48:dc:4f:50:af:27:ec:
                    b3:2a:be:c7:3c:1e:ef:89:6a:07:ad:4f:a7:d5:7c:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2B:02:07:31:85:8C:C5:5F:57:DA:E2:0B:28:F6:CB:18:B8:46:79
            X509v3 Authority Key Identifier:
                keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:18:2c:7a:43:16:a5:fa:a3:2c:1a:c6:20:de:1b:3f:b0:ea:
         cd:8d:9f:08:cf:8d:0a:5a:ba:42:58:53:76:8d:bd:9a:9b:a9:
         2f:11:fa:1d:97:43:da:0a:dc:99:d3:26:96:8b:ff:1b:a1:9c:
         c0:53:4b:b1:77:ac:3e:28:53:82:be:e4:59:08:fd:91:dc:4a:
         5d:b9:65:a4:fb:a3:8b:dc:4d:12:74:62:ba:e5:7a:54:70:bf:
         6f:bc:c6:3c:34:3c:07:22:e2:4b:fd:b3:71:a2:f1:77:ed:80:
         29:d4:85:99:d5:ff:30:16:4c:00:f8:71:49:89:cc:81:d3:4a:
         6e:57:2a:e1:23:e3:d0:bc:95:08:27:21:ba:54:19:d3:94:62:
         cc:bb:26:4f:8f:dd:ae:92:58:b8:c5:f0:80:4a:22:42:57:2e:
         15:d3:72:a4:c9:50:b4:bd:19:9b:b8:d0:22:c8:9e:f1:dd:19:
         ad:a4:90:e6:ba:cf:1b:1f:2e:9f:ea:79:5d:01:a0:c2:9d:1a:
         5a:95:6c:ff:30:be:9e:26:1b:d2:d3:8d:f5:36:3e:ec:bb:49:
         c0:c9:3f:c4:4a:43:c3:4a:32:b8:17:04:c8:26:b6:10:3e:54:
         ef:44:d7:26:be:71:4a:f5:2e:1b:47:80:09:aa:f7:21:b4:84:
         df:98:94:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxREYxMTAvBgNVBAUTKEJBRjM1NUYwM0EyRUQ4ODRBNjE3QTQ3NDI3QzI1Q0ZD
Q0NFMzEyNzYwHhcNMjYwMzAyMDAwMzQ4WhcNMjYwMzA5MDAwMzQ4WjAYMRYwFAYD
VQQDEw02OWE0ZDNlNS05MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAnJQljMhbXkTnZKK9drcUCiwYud+a51QReN1UJHTwA0WIceDZ4KvLzxBlm6
VbiejacKQl2AiMtuT1j4WzQA17HO/KsG6xLDD/kZWOMslrHq7PoJ6meFig9+/i5Y
zcKtDQnoZ8msWWFFeALqFV0EzRABUakp4lRmw5tyqE5nSNhDmqa728MzsOE1tJPZ
hFv3IO0/3jtCCXBj1V5GyXTWzpPSif/SRul5cscQZhwwdD9D9K3jM6SFigk1cDvl
lOIHwB5s2nUuUtkt1n+1LdgI1aRGuMSN3gDBej6+ML+pZyuK4zCeTeDbKkjcT1Cv
J+yzKr7HPB7viWoHrU+n1XyDpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJArAgcx
hYzFX1fa4gso9ssYuEZ5MB8GA1UdIwQYMBaAFLrzVfA6LtiEphekdCfCXPzM4xJ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi9CNDkxNTFDQTRE
OUExMUYwQkM3QjVFNkJDNEY5QUUwMi91dk5WOERvdTJJU21GNlIwSjhKY19NempF
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3V2TlY4RG91MklTbUY2UjBKOEpjX016akVuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjFERi9CNDkxNTFDQTREOUExMUYwQkM3QjVFNkJDNEY5QUUwMi91dk5WOERvdTJJ
U21GNlIwSjhKY19NempFblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAhgsekMWpfqjLBrGIN4bP7DqzY2fCM+NClq6QlhTdo29mpupLxH6HZdD2grc
mdMmlov/G6GcwFNLsXesPihTgr7kWQj9kdxKXbllpPuji9xNEnRiuuV6VHC/b7zG
PDQ8ByLiS/2zcaLxd+2AKdSFmdX/MBZMAPhxSYnMgdNKblcq4SPj0LyVCCchulQZ
05RizLsmT4/drpJYuMXwgEoiQlcuFdNypMlQtL0Zm7jQIsie8d0ZraSQ5rrPGx8u
n+p5XQGgwp0aWpVs/zC+niYb0tON9TY+7LtJwMk/xEpDw0oyuBcEyCa2ED5U70TX
Jr5xSvUuG0eACar3IbSE35iU+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:35 2026 by rpki-client