Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          8IhmBjbm/hO4EUrOdNBvoxmMHYYm0+DAllWiboQu1Fw=
Subject key identifier:   81:E5:F5:7A:3A:12:58:5C:C1:B6:EE:45:75:19:14:23:F9:F3:A8:99
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0BBD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0BB2
Signing time:             Fri 06 Mar 2026 18:42:42 +0000
Manifest this update:     Fri 06 Mar 2026 18:42:42 +0000
Manifest next update:     Fri 13 Mar 2026 18:42:42 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: w+lVzZZP9YWshVwrFKyzEd6lfAvaifsRVSdQwk3jdNY=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: cA+0IoAyCHHDkjIL9MPmk5AdVUHzu0n7NznpD3I+o6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 18:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: Mar  6 18:42:42 2026 GMT
            Not After : Mar 13 18:42:42 2026 GMT
        Subject: CN=69ab2022-a1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:fa:f9:fd:31:3d:f3:45:9b:37:9f:7f:8e:
                    34:ec:fd:8d:3d:d9:33:fe:5d:01:8e:2d:cf:58:af:
                    be:e4:57:12:cf:c5:bd:34:f3:f3:3c:23:54:50:c5:
                    f8:21:7d:d3:59:62:7c:f1:5d:25:7b:9b:08:e2:31:
                    fa:f8:e3:6b:c5:3f:61:3e:e3:76:0f:5c:7c:21:95:
                    fd:02:67:32:e9:47:e0:03:e3:d4:34:f2:72:b8:db:
                    18:36:9b:4f:de:b6:77:a9:4d:f5:df:ee:a3:8d:d9:
                    38:8f:f3:5e:ba:f8:7b:c4:58:06:c9:3e:4e:72:1a:
                    63:87:bd:b1:fc:ac:fd:a6:40:cd:ee:87:7e:22:ca:
                    95:f3:45:78:fe:d5:15:c5:a2:04:1d:92:80:43:8d:
                    2f:43:97:c8:1d:ef:c7:a6:87:c8:3b:b2:2a:97:5c:
                    12:20:55:f1:1a:1b:34:16:d4:4d:24:ae:80:81:f7:
                    6a:a6:b9:d5:67:dc:56:09:01:95:f0:f2:25:17:62:
                    f3:9b:34:bc:ac:db:2c:4f:39:91:78:53:a1:87:d8:
                    2d:80:e1:e6:3e:5f:80:31:f5:62:89:ec:08:56:5a:
                    0f:88:61:55:b1:ff:d3:ce:d9:4b:d8:40:ca:fd:61:
                    d3:fd:c6:d3:58:a4:53:3b:c8:dc:59:e2:26:a4:63:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E5:F5:7A:3A:12:58:5C:C1:B6:EE:45:75:19:14:23:F9:F3:A8:99
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:65:b1:8b:7e:55:2e:bb:78:48:6d:22:a4:1a:89:44:f2:00:
         f1:3d:31:5c:78:bf:cc:42:a3:15:34:c5:8a:be:53:33:8f:33:
         77:9e:78:b6:c7:3a:73:ce:38:68:aa:52:9b:a7:ed:40:44:fd:
         ce:56:5c:c1:ad:6f:d9:60:53:22:e0:71:37:c0:73:85:4f:71:
         af:b3:27:a5:db:e1:54:8c:2d:19:dd:fc:31:ce:fd:d8:b4:a7:
         86:af:73:73:20:bf:87:58:27:fb:10:d3:9d:27:24:40:a9:16:
         41:5e:3b:e6:c5:3e:85:de:2b:a5:27:66:64:ab:9b:1c:d3:b4:
         ad:83:5e:10:15:44:2f:04:dc:d8:88:74:c1:a7:0a:04:d5:53:
         e7:8f:65:ea:e6:65:45:f0:d2:0a:f1:9f:3d:92:6c:b5:ab:0a:
         53:c2:57:41:1a:64:d0:26:b7:01:4a:cf:80:28:d2:eb:8d:c2:
         24:11:9a:bd:76:49:4c:70:ad:23:5c:ec:c7:b4:ab:9a:7b:ab:
         17:1d:e2:6c:bc:d5:bd:0a:d5:a0:9d:02:7f:52:a1:97:b4:4d:
         83:5d:69:c2:a7:f4:56:0b:ed:a5:b0:9f:83:32:2b:3b:c7:3f:
         a1:88:70:e6:97:74:73:a6:e6:88:68:b6:ce:14:ca:19:5e:ef:
         ab:aa:ab:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:35:57 2026 by rpki-client