Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          mu4u983KYFxWCbITSl09CVL0tvOciZfRkhhrJrqItnU=
Subject key identifier:   F7:E7:52:6A:D4:74:C1:58:D7:5F:10:B2:4A:B2:AB:AA:E3:43:FE:8D
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          19F2
Signing time:             Thu 12 Mar 2026 16:17:57 +0000
Manifest this update:     Thu 12 Mar 2026 16:17:56 +0000
Manifest next update:     Thu 19 Mar 2026 16:17:56 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: rY/Ai+yU9zdYm4O+SnfIeD5EyTDdhZ8ZNl8702QsTPA=)
                          2: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: w5KK0dpPJkSroJtQqR7K+fP2tpqQLY4TbQ+zuXDn5l4=)
                          3: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: MxNMu33nSxH3nkySgYna6TFMgCrTGm9llS5odYJxI1c=)
                          4: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: hFWF9lfVPT/OyTzdVJzJyrHvTWCjIwiA+KMrKU4YqSU=)
                          5: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: xTvz/yps8vEycKM//nqlnS4ox9bS9MQ57m0G0j3M6AE=)
                          6: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: lGTRILhEhDPLWRonyW8b0jYuBpwifzJ2fmgZ5UrgD3U=)
                          7: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: WkOGv0z8Ach2j5QKTGVdZSS4odRu7QjJXvA4xXQ5j6o=)
                          8: 3003BB4EB3A411F0B8845739C4F9AE02.roa (hash: 8kZjJfE5pI5U07OBtYa4V/xyWj0ZIzuRisNkfVOEOCo=)
                          9: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: 2IX9G4OV8Ryb3IfNLa83GKbrkZZU9ZFrDQ7HXBTkjwY=)
                          10: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (hash: kiTijfwuDJBjSDruEwl19WUyZNT5RsPyE5yzdyDzuKY=)
                          11: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: JEcn/9B8Awu/7FN0JbgiVmV0IQuJy4AWOfY9DwppJBc=)
                          12: 21730760B3A411F0B1142735C4F9AE02.roa (hash: wGPJw8ZliwkIBnCBo8VYgVbtlsaUb9p9JmAcRlsLNUI=)
                          13: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: sbI32dMx96QI+Wi62W/45tSZM80fUbaJGeJFssGV9fY=)
                          14: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: bJsvmUyY4RkQ9FdjlARrJUmiaMImRmXsWePN2NAKgqM=)
                          15: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: NtX2eRx6m9cXHVNSq5ktUCiNpQ4Z5Y/tKPABtSLiW/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6837 (0x1ab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Mar 12 16:17:56 2026 GMT
            Not After : Mar 19 16:17:56 2026 GMT
        Subject: CN=69b2e734-f17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:cc:63:bc:54:02:8a:4d:cc:79:cd:51:0d:
                    31:27:e2:b6:ec:13:a7:f8:0a:32:a3:bb:74:9d:f9:
                    ce:dc:31:eb:95:5a:d0:3e:7b:66:a1:e2:3f:1c:13:
                    8e:8f:c1:e2:26:17:df:bc:b4:b1:d2:11:5b:91:ac:
                    16:07:50:2d:68:2c:41:2b:48:0e:79:19:25:89:84:
                    f5:c0:30:37:82:82:6e:c0:13:a8:eb:92:c1:7b:20:
                    95:49:d7:3a:fa:0d:16:e9:39:88:36:88:e4:8b:65:
                    88:35:4d:1c:a0:49:9a:a1:6c:20:1a:a6:b2:4f:18:
                    9c:7e:4b:d3:46:21:5d:94:95:ac:cd:a2:92:eb:98:
                    bd:4d:a2:f5:d9:74:64:72:09:3f:e9:52:ca:c8:a3:
                    c1:97:12:b2:6b:49:9d:93:0e:8d:91:19:50:31:dc:
                    41:9a:74:7a:d4:bb:fa:c9:5e:49:24:ed:49:e8:38:
                    bd:26:19:25:8a:ca:d2:0a:98:7e:55:a1:bd:54:b7:
                    81:b9:fb:77:1d:9d:36:a5:3d:2c:f2:02:0b:ab:0f:
                    76:de:86:06:af:5d:3b:7b:83:f8:1a:9d:83:7c:32:
                    ce:d9:40:da:d5:4f:25:ce:f3:3c:21:db:ab:5a:45:
                    d1:64:79:85:46:5c:cb:84:91:7a:b0:dc:d1:1a:a1:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E7:52:6A:D4:74:C1:58:D7:5F:10:B2:4A:B2:AB:AA:E3:43:FE:8D
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:57:ec:13:5f:62:e4:16:2b:10:b6:80:e3:c0:a1:9e:f0:a7:
         11:4d:c7:7a:ac:8a:58:fc:a8:7f:b4:f2:67:85:e3:7d:7b:41:
         8e:44:d0:f5:01:65:aa:b8:d6:2f:90:b9:1e:49:e4:3f:40:0e:
         0f:17:8d:59:10:27:28:cd:f6:29:f6:93:8e:b0:99:70:95:c0:
         2e:2b:42:8b:e2:48:ac:40:b0:cb:3a:fa:2c:69:5d:b3:46:43:
         4c:c5:6c:33:7a:1c:52:20:3d:5c:a4:f7:ed:e3:c7:f7:58:73:
         8f:23:e9:5a:3f:d5:27:58:37:72:9f:30:84:9e:f8:39:8b:a8:
         76:2f:4d:86:dc:9d:fd:fa:e3:0d:e0:65:e7:69:4a:48:72:9d:
         2c:ad:5f:e2:82:5f:ed:a0:1e:e7:df:4d:a6:cf:77:1b:7b:91:
         22:de:71:8f:d3:74:94:fa:a2:55:b0:45:98:d1:82:d7:46:4e:
         33:db:e5:96:00:1c:03:1f:7c:43:6c:52:bd:f4:c7:32:f3:d6:
         11:fc:75:bf:3f:25:f4:c7:73:5d:54:56:c6:5c:2b:81:4e:2f:
         fb:70:8c:89:53:fe:0b:55:eb:91:6a:26:2f:b9:2b:db:27:2b:
         64:f5:4d:f8:ea:e1:10:84:dc:f3:09:00:cc:f6:26:7d:3e:40:
         e4:e8:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:11 2026 by rpki-client