Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
File:                     uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json)
Hash identifier:          z6k9T+WAns5GRlhwo2xsNF2klh4I0R7vIo2En4sS/iA=
Subject key identifier:   22:04:8A:17:DE:30:62:F3:67:F0:89:C3:22:83:BA:31:8B:94:C5:25
Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
Certificate issuer:       /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Certificate serial:       274C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
Manifest number:          272A
Signing time:             Mon 02 Mar 2026 00:06:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:06:52 +0000
Manifest next update:     Mon 09 Mar 2026 00:06:52 +0000
Files and hashes:         1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: 5Ym4rg2rFX57z/rLBuW5C0x/JHFYM424f4Th0NUbLx4=)
                          2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: PNtKCmkc0ae9t2OX47XtGc6SBA7Wvx4xMNhiw/SXXkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10060 (0x274c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
        Validity
            Not Before: Mar  2 00:06:52 2026 GMT
            Not After : Mar  9 00:06:52 2026 GMT
        Subject: CN=69a4d49e-4e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:e7:eb:dc:cf:95:07:a0:05:c5:72:5b:92:
                    f9:44:2f:c7:99:fb:38:92:3a:28:10:d3:ef:af:d5:
                    f3:5e:7b:f5:60:01:30:7d:93:26:00:f3:de:e8:ea:
                    f1:e5:13:c8:0c:a9:9e:3e:59:73:b1:37:f4:4f:24:
                    3d:98:a0:ef:3e:54:8d:87:e8:2b:77:21:97:d1:16:
                    42:e3:52:b3:22:f9:63:bb:b0:81:bf:a0:3d:3e:95:
                    17:5c:b7:3f:ff:8b:32:e9:8f:68:5e:c8:44:1f:fe:
                    79:4e:9c:7f:08:1a:07:53:33:d6:52:ec:50:e7:4c:
                    c6:75:ac:62:7e:a7:cc:9f:d8:23:20:46:8c:90:4f:
                    88:41:58:4f:b7:d9:98:40:48:cb:97:c4:85:bc:4f:
                    8c:90:ed:f0:fe:81:fb:dc:21:da:38:41:85:09:49:
                    c0:d0:ce:d5:3a:ca:6a:a8:b2:c9:b2:0e:12:a4:9c:
                    3f:57:17:4c:02:e6:4b:6d:14:63:02:7e:e8:7f:cb:
                    7e:32:88:7a:c9:b1:58:50:db:6a:59:e1:38:7d:ba:
                    31:ab:44:87:13:d3:f4:9d:2b:d2:c9:49:2d:0d:a8:
                    5c:13:fc:b4:0a:68:76:53:15:e6:ce:c6:ee:6e:01:
                    d9:70:a1:fd:e9:30:e6:36:86:1b:4b:30:5e:7d:d7:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:8A:17:DE:30:62:F3:67:F0:89:C3:22:83:BA:31:8B:94:C5:25
            X509v3 Authority Key Identifier:
                keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:60:9e:a8:fa:de:b7:78:64:75:b2:5f:d5:d3:45:8f:9d:fc:
         7c:7c:ad:c9:be:e3:c1:90:fa:5b:75:6f:2b:c9:73:ac:92:bf:
         e4:3d:15:17:4b:92:14:7e:ab:7f:5c:b4:67:66:94:91:11:99:
         40:68:a3:e9:a5:65:53:29:50:23:8f:7d:fa:ca:70:a9:11:26:
         30:20:8e:e0:29:02:82:a4:bb:bc:52:56:7a:5d:e5:26:91:9c:
         3d:3d:fa:ba:76:25:67:94:18:db:95:a6:37:a1:a8:fa:9b:b6:
         1d:34:3e:eb:3c:06:c1:34:83:12:1c:2b:8a:db:7a:ee:94:83:
         f6:4c:8e:80:03:3a:b5:bf:34:01:12:75:de:37:e5:0f:61:b5:
         4c:e5:1b:a8:11:8d:be:c7:00:a7:72:c7:67:9f:ac:ca:a1:1c:
         fd:91:d4:4f:a8:66:b0:df:9e:03:bc:c9:a6:e6:10:77:86:cb:
         2a:67:ab:9f:d3:99:1b:25:7d:99:18:a3:1b:9c:0b:83:45:8e:
         0c:4a:33:f8:b5:b1:dd:5d:c1:28:b7:b6:c3:b3:2c:f4:e8:e9:
         65:d7:54:a1:44:12:eb:82:6e:fe:bc:a9:35:3f:4d:d4:ff:6a:
         43:ba:71:89:42:b6:19:30:03:ad:4e:5f:92:41:f4:ab:74:74:
         84:db:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:56:59 2026 by rpki-client