Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File:                     c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier:          A46m6dBumm+ojeByVbsTYYD7smB3HyPZa+yDVrghzuQ=
Subject key identifier:   B5:A0:5E:B6:A3:8F:C4:DC:40:89:8A:66:1E:97:84:77:01:70:C0:F9
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer:       /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number:          0113
Signing time:             Sun 01 Mar 2026 06:56:09 +0000
Manifest this update:     Sun 01 Mar 2026 06:56:08 +0000
Manifest next update:     Sun 08 Mar 2026 06:56:08 +0000
Files and hashes:         1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: JM+acyOX7Qt3KgIkfuao4Snq92zmvNZstWsfg180iak=)
                          2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: tWu30mK1rtW914jLoVkC7fN3rjLvGIdCamq6YbBhF8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
                          rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
        Validity
            Not Before: Mar  1 06:56:08 2026 GMT
            Not After : Mar  8 06:56:08 2026 GMT
        Subject: CN=69a3e309-65ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:86:c8:ac:76:dc:cb:0e:79:05:db:90:94:
                    49:eb:b4:0e:8c:58:e2:d4:41:03:2e:28:c9:14:ad:
                    a5:5f:ee:48:cd:04:f2:f6:7c:23:5a:04:f2:dd:a1:
                    74:b9:ed:d3:71:20:bd:49:49:7c:af:37:7c:90:fd:
                    a2:a4:65:a1:a2:0a:7d:0c:5e:83:67:c7:6f:31:e5:
                    65:ba:74:d8:59:41:33:9e:3c:3d:01:ff:33:08:f9:
                    ab:7e:b7:6f:ca:1b:88:a7:60:1d:d0:99:56:4b:88:
                    2a:0a:74:9e:94:d4:8e:9f:6a:f9:ad:d6:cd:2d:4e:
                    ae:ae:d8:a9:bf:48:f8:7c:db:e7:0f:02:a8:29:b6:
                    e8:4d:e0:3b:52:64:8c:12:20:4f:0d:b0:3f:c7:f3:
                    fe:e9:cc:4a:0b:55:ff:ba:21:1e:d3:67:02:80:30:
                    c5:65:56:34:f3:46:45:91:40:71:da:ea:ef:dd:0f:
                    c0:5c:43:81:e1:97:35:3f:a8:c4:38:b3:33:0b:17:
                    19:7e:94:34:9d:b0:df:e0:1d:70:49:04:e3:2e:5f:
                    57:a1:67:b4:a0:87:b2:2f:20:b9:f4:ef:4d:09:ff:
                    9c:5c:8a:a9:dd:b3:b6:01:d9:ed:6b:02:e6:11:43:
                    bd:21:86:28:44:53:a6:7c:86:a6:1f:3a:52:04:ef:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:5E:B6:A3:8F:C4:DC:40:89:8A:66:1E:97:84:77:01:70:C0:F9
            X509v3 Authority Key Identifier:
                keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:ab:09:bf:b5:f2:4f:e5:fb:06:74:b1:92:57:ee:b0:07:
         b9:83:1a:92:8d:82:7e:87:b6:fc:3f:bc:9b:46:dd:7b:e4:5b:
         72:d4:66:3b:1c:e3:bc:53:01:0f:88:5b:71:52:bb:30:09:97:
         6c:ad:bc:40:52:0c:36:bd:0d:4e:9c:61:b5:f1:8f:5e:ce:bc:
         16:fb:dd:04:63:a1:0a:72:22:ad:6f:38:f6:ef:14:7a:65:c0:
         23:e3:dc:10:ae:ea:97:92:ba:2e:c9:e9:f6:3c:a0:9e:50:e5:
         b3:6f:2f:e3:28:05:7c:ab:73:71:af:0f:ac:fd:c4:22:b1:b7:
         6a:b3:26:10:3b:cb:ed:91:13:13:c9:37:85:88:6a:4b:57:39:
         1d:b9:98:21:d0:67:38:ab:27:7f:25:5d:e9:1e:41:27:80:0f:
         0d:00:66:bc:68:34:50:8a:b2:9a:ff:c8:0d:e8:f3:a5:c9:74:
         9e:3f:0a:24:ea:08:52:0e:0b:dd:1e:e8:0b:59:b9:a8:9d:99:
         27:48:0e:1a:0c:3e:c1:55:f3:b7:3f:1e:4a:41:a4:d3:40:19:
         ed:11:99:df:98:53:97:34:ef:6f:04:81:91:fb:0c:a7:d7:2a:
         24:93:5e:8b:39:ec:9f:b1:77:f4:fb:b1:ae:cd:fd:ed:60:8b:
         85:5e:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:54 2026 by rpki-client