Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File:                     UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier:          eewW9xQglVo7I/R+6MCWVej5N2JeEER9K7oT96xYW4w=
Subject key identifier:   38:6F:12:BE:92:7E:9B:EE:12:ED:2C:9C:E6:42:99:DB:53:FC:09:31
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       312A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number:          3110
Signing time:             Sat 04 Apr 2026 15:23:47 +0000
Manifest this update:     Sat 04 Apr 2026 15:23:47 +0000
Manifest next update:     Sat 11 Apr 2026 15:23:47 +0000
Files and hashes:         1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: 7y4WNLj6LFmjTmY8CX1wYqnjYxS7JxqslWeZTfI9DU8=)
                          2: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=)
                          3: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ukvq4q+WUo9M3bWh6pJLSaPBet3ApLWl9pgkS4gI7ag=)
                          4: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: q4IKP4eGJJ0oDgbAG4b8WsxXK5K7aSMyKfuwqjPJmm4=)
                          5: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: 6OqlVcYAqCDhteCgFv3UWoxb9hgSROAufjQ6ZVdl01Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12586 (0x312a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Apr  4 15:23:47 2026 GMT
            Not After : Apr 11 15:23:47 2026 GMT
        Subject: CN=69d12d03-7913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:f5:3a:37:81:41:75:a4:80:af:6d:7c:8f:
                    2b:05:d5:d0:59:de:2b:5f:e6:37:58:fc:48:fc:f7:
                    de:85:51:3e:af:79:1c:43:d6:c9:4c:cb:bb:18:cc:
                    0c:9f:91:2d:50:f3:b0:40:a6:db:c1:1e:d9:cb:ad:
                    6e:a6:2d:69:b4:08:99:18:27:10:4d:3a:a6:12:7e:
                    91:86:51:cf:d5:6d:71:40:cd:c1:b9:e9:fc:b1:d0:
                    72:79:36:46:50:2b:39:85:ce:d2:97:3e:d1:9c:70:
                    f9:da:3a:0a:99:7e:20:3f:fe:15:c4:89:fe:4b:ab:
                    b7:7c:a0:a0:6c:9f:2e:d1:03:4f:69:99:f7:a2:9e:
                    e7:bd:e3:ba:b2:c7:13:d6:0b:5a:9f:63:c2:52:23:
                    9c:92:7c:49:6f:c1:1b:f2:93:22:a9:ac:c2:84:3c:
                    58:f8:14:43:5c:be:82:de:03:19:a4:9d:66:b4:03:
                    8a:53:35:26:8d:79:cf:80:83:f0:97:5b:c8:66:98:
                    95:13:19:c9:19:38:18:2d:ba:20:62:5e:75:cf:bd:
                    ef:54:bf:9d:4a:f2:9f:d4:a2:eb:83:41:0c:10:62:
                    b5:b3:d6:6f:74:a3:bf:a8:ea:95:e3:dc:fc:68:3e:
                    86:55:87:c9:c1:f9:2b:2a:24:e7:44:53:64:ee:79:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6F:12:BE:92:7E:9B:EE:12:ED:2C:9C:E6:42:99:DB:53:FC:09:31
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:74:fe:be:f1:f0:81:4d:48:55:25:7c:bb:c3:f2:0c:d3:
         f6:f6:c5:43:c1:e7:0c:21:67:f8:1b:21:52:6a:9a:bc:42:88:
         56:7b:10:98:b9:b5:08:cf:2f:3a:3c:fb:f1:47:97:5c:c6:7d:
         30:a4:49:8c:f1:33:b0:0c:a7:6e:37:2f:60:0a:ec:c8:67:a9:
         cf:ce:94:3b:2f:73:d8:57:d1:d6:d3:58:16:ce:25:9c:0c:f4:
         43:a6:4e:8a:78:f3:fc:9e:a3:98:e7:87:7c:0a:ab:78:01:91:
         5c:fe:ed:73:9a:b2:07:dc:08:56:a9:8b:42:f4:6b:c0:dd:df:
         bc:54:93:0c:66:c0:1b:1d:44:8c:da:18:80:d3:45:37:25:4d:
         d7:b6:b7:77:1e:0b:13:46:1e:e1:ba:8d:09:c5:f6:38:2d:d6:
         b3:97:f9:75:db:6a:9e:98:12:cc:7c:95:db:be:c7:ac:71:eb:
         32:c5:fb:8f:3f:53:87:73:ae:59:04:a6:d5:65:3a:e6:e0:98:
         d5:f4:6f:f2:eb:7f:ae:65:b2:44:61:92:50:03:da:57:45:96:
         38:a0:de:1b:e2:f0:61:9e:22:c7:2e:1b:90:a1:1c:e4:9d:8e:
         12:b4:94:f6:32:06:ba:4c:1f:26:6e:1a:90:82:8e:e9:fc:a7:
         d3:30:e4:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1
QjMxMkMwNkYwHhcNMjYwNDA0MTUyMzQ3WhcNMjYwNDExMTUyMzQ3WjAYMRYwFAYD
VQQDEw02OWQxMmQwMy03OTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshr1OjeBQXWkgK9tfI8rBdXQWd4rX+Y3WPxI/PfehVE+r3kcQ9bJTMu7GMwM
n5EtUPOwQKbbwR7Zy61upi1ptAiZGCcQTTqmEn6RhlHP1W1xQM3Buen8sdByeTZG
UCs5hc7Slz7RnHD52joKmX4gP/4VxIn+S6u3fKCgbJ8u0QNPaZn3op7nveO6sscT
1gtan2PCUiOcknxJb8Eb8pMiqazChDxY+BRDXL6C3gMZpJ1mtAOKUzUmjXnPgIPw
l1vIZpiVExnJGTgYLbogYl51z73vVL+dSvKf1KLrg0EMEGK1s9ZvdKO/qOqV49z8
aD6GVYfJwfkrKiTnRFNk7nkYlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhvEr6S
fpvuEu0snOZCmdtT/AkxMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE
MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF
dG9vUndpMm44NlpiTVN3RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA7h0/r7x8IFNSFUlfLvD8gzT9vbFQ8HnDCFn+BshUmqavEKIVnsQmLm1CM8v
Ojz78UeXXMZ9MKRJjPEzsAynbjcvYArsyGepz86UOy9z2FfR1tNYFs4lnAz0Q6ZO
injz/J6jmOeHfAqreAGRXP7tc5qyB9wIVqmLQvRrwN3fvFSTDGbAGx1EjNoYgNNF
NyVN17a3dx4LE0Ye4bqNCcX2OC3Ws5f5ddtqnpgSzHyV277HrHHrMsX7jz9Th3Ou
WQSm1WU65uCY1fRv8ut/rmWyRGGSUAPaV0WWOKDeG+LwYZ4ixy4bkKEc5J2OErSU
9jIGukwfJm4akIKO6fyn0zDkJw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:46 2026 by rpki-client