Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          UArWXYhkmB7rFjviIy9eiiFgCv3lKgrsXl7MDBnCHHY=
Subject key identifier:   6C:72:D8:98:FB:9B:78:7A:F1:06:3E:97:89:86:49:85:44:CF:73:39
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          86
Signing time:             Mon 02 Mar 2026 13:56:36 +0000
Manifest this update:     Mon 02 Mar 2026 13:56:36 +0000
Manifest next update:     Mon 09 Mar 2026 13:56:36 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: EolEkZVC9D9JZPfR5Vq88Zvy1yDQS7UKDZbrjBFabFs=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: UHvDQg4EoApzyLpFSzC8aB9dr9pOB/LRHrT90NsCO5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Mar  2 13:56:36 2026 GMT
            Not After : Mar  9 13:56:36 2026 GMT
        Subject: CN=69a59714-6145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:40:21:63:71:f1:83:a3:a6:70:36:27:9e:
                    12:28:e1:b6:15:c1:a0:91:0a:bb:5f:e8:11:7e:16:
                    cb:62:69:f4:ab:9b:b5:22:dc:67:f6:13:c1:89:59:
                    6c:e3:d2:9e:92:46:36:cd:92:fe:ce:1d:36:87:36:
                    81:48:ae:6b:09:2b:18:4c:e2:3c:68:fd:3f:f6:41:
                    10:6e:8d:fb:c7:bf:29:1b:02:ea:14:94:9a:02:9a:
                    eb:2a:3d:2e:b0:2c:9d:36:af:0f:53:ea:87:19:67:
                    53:f2:46:3c:2c:1b:1a:a0:89:87:9b:09:51:4b:1f:
                    86:c7:ea:65:07:41:5f:fe:2f:68:1c:77:de:17:d0:
                    0b:19:4c:df:54:2d:e0:42:18:af:68:c7:23:a6:82:
                    b1:ad:e7:88:37:19:98:1b:fa:51:17:9f:58:32:00:
                    ef:c4:9c:c9:c5:a8:f0:d8:33:e4:9d:02:03:25:05:
                    ba:2f:6e:a1:11:00:36:71:b1:7a:e0:28:16:24:98:
                    15:28:5a:c3:9f:f8:24:15:65:1e:e0:57:0d:d6:94:
                    81:c0:af:e2:3b:0a:89:e8:53:4d:71:ed:0c:57:bc:
                    cb:f4:0f:39:eb:6c:10:04:2d:57:72:53:34:bd:0c:
                    ba:ff:70:e2:f6:8a:03:ea:d6:f1:bc:55:23:27:f1:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:72:D8:98:FB:9B:78:7A:F1:06:3E:97:89:86:49:85:44:CF:73:39
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:77:c6:67:7f:57:b7:8d:8d:fe:10:e3:14:7b:00:72:c1:
         ee:ff:e0:e7:a9:65:64:4a:aa:c7:42:b4:84:7d:8d:05:d1:a0:
         64:b0:41:e5:6e:79:05:a2:8c:ea:6a:ec:a5:29:30:e5:de:55:
         34:6f:23:1f:2c:16:08:97:0b:ce:5e:e7:e4:6b:5d:20:8c:bc:
         5e:9f:d7:56:5f:cd:7d:c3:b4:b4:09:d0:5f:2f:bf:06:ec:6c:
         cb:da:e7:26:8d:aa:e4:25:8a:cb:b1:b1:1a:d3:fe:f8:b7:12:
         90:2b:b9:2a:c1:ae:8d:33:8d:5d:3e:23:b8:5f:7b:48:27:38:
         a1:9c:f2:69:85:78:e4:23:62:69:6a:fa:64:2c:66:fc:de:7d:
         f6:ae:03:30:44:c7:06:9d:a6:94:69:09:f9:1c:45:f0:ca:57:
         f8:1c:21:81:69:ad:82:80:3e:30:d0:40:22:5b:e0:2c:d5:c3:
         2b:9c:a8:b0:aa:3a:1e:45:a3:42:1f:0a:b9:be:98:25:ef:08:
         41:9c:ea:5c:c8:5a:5b:4c:93:c3:f0:01:90:94:78:00:ac:22:
         a7:d5:da:75:6a:4a:94:ac:97:52:3b:cc:15:f3:63:03:be:57:
         1c:58:82:59:74:58:d6:05:42:f4:cd:77:c9:fc:78:c0:03:0f:
         e6:b1:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:45 2026 by rpki-client