Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          4MhlYxEFMp/qTcRKkpXmGdeokbvAOPWnBwVHqCV/4Ak=
Subject key identifier:   0B:A0:CE:98:2A:F1:98:C3:C5:B3:FE:CA:CD:79:00:79:3D:8B:96:62
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          0119
Signing time:             Sun 05 Apr 2026 05:19:45 +0000
Manifest this update:     Sun 05 Apr 2026 05:19:45 +0000
Manifest next update:     Sun 12 Apr 2026 05:19:45 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: H777Jg9CvF0kzCDvz3sa1JeFqx2CD2SDzmWph3L2AKM=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: CHWaj2FyJMKWSBZ+2E7O8yNYSlqC+2eBltmle+urUy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Apr  5 05:19:45 2026 GMT
            Not After : Apr 12 05:19:45 2026 GMT
        Subject: CN=69d1f0f1-e093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:bf:d5:2c:1e:85:0c:50:2d:d6:75:cd:ff:
                    83:31:de:1a:99:1e:65:c0:44:4c:1f:d5:b8:7a:32:
                    98:3e:ef:d9:5f:d5:fd:18:28:92:52:0d:9a:39:ef:
                    d2:31:ae:9c:15:d1:3c:1f:d3:71:72:49:e9:cf:de:
                    e3:19:5a:53:2d:74:d9:b4:73:79:79:98:0c:f0:33:
                    a9:32:9b:0f:39:41:4d:ad:75:58:17:e7:5b:31:88:
                    14:fa:42:25:47:10:40:49:79:82:2b:e6:de:30:f2:
                    95:5c:f3:d3:f8:e3:5b:91:f5:50:fb:6b:c4:1d:83:
                    e1:ea:55:00:3d:df:7f:62:0d:b1:0e:84:dc:ce:da:
                    37:4a:89:12:c9:03:48:11:f9:1f:9c:cc:66:54:8d:
                    a3:a6:2d:db:d5:01:ba:62:94:41:b4:f3:76:52:41:
                    42:06:50:93:c4:51:d4:cc:56:8f:42:84:2c:a8:dc:
                    b9:47:a6:50:db:e9:54:17:1e:3e:f1:13:ef:79:7e:
                    a7:cb:2c:8a:e4:d2:cf:5f:b8:95:e1:44:67:b9:bc:
                    0d:8b:c5:7f:9f:f0:11:a5:60:d3:5c:46:90:47:10:
                    8d:d1:f4:df:60:3c:c8:f7:28:0b:4e:7e:4d:04:2d:
                    10:57:52:9d:9c:92:51:c0:03:b3:c3:bb:85:83:31:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:CE:98:2A:F1:98:C3:C5:B3:FE:CA:CD:79:00:79:3D:8B:96:62
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:33:fa:46:43:83:5a:c8:31:95:86:8f:32:8e:5e:ab:4b:36:
         26:d2:e9:18:08:6a:50:ad:55:ed:0e:c8:22:1c:ac:93:82:36:
         5c:cf:c2:3b:34:ed:4b:b2:7a:02:bf:8e:97:b0:1c:f6:63:5f:
         63:ab:8e:28:b0:dd:53:ff:dc:8f:da:cd:b4:e3:e1:bd:1c:54:
         17:f7:aa:24:d5:88:89:0b:b0:5f:ec:da:ad:a3:7c:57:b9:a9:
         c4:20:d6:e5:b6:9d:d5:b3:8c:ad:ff:44:a3:67:01:91:82:e7:
         11:be:b9:29:bf:b5:55:71:6c:f9:82:9d:9b:91:26:76:b4:10:
         b4:16:29:a6:6b:33:b6:1f:77:1c:81:c4:84:cd:7d:b8:58:7a:
         60:a5:9c:c0:b8:0d:6a:4e:7d:8d:0d:da:b6:49:26:91:dc:ba:
         80:7e:52:0e:7d:d1:10:a0:f4:ea:e7:78:93:f2:b1:89:b5:6b:
         44:c1:65:ec:86:2c:6d:ff:a6:fc:03:a5:7e:3f:ca:0c:7a:35:
         43:bd:d0:73:1e:77:92:0c:af:8c:cf:56:df:25:51:c0:11:9d:
         86:d9:f8:1e:60:bd:e6:b7:34:d6:f4:60:c5:8d:95:90:31:72:
         01:fe:82:be:90:1c:e9:97:50:71:bb:2b:12:dc:1b:a2:53:f6:
         90:fd:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:04 2026 by rpki-client