Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
File:                     UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json)
Hash identifier:          PtjJkE7VDuaYl0pJWfOizSe68c4vQjxP7bwVSBY3lY4=
Subject key identifier:   BD:3B:9B:42:77:EA:67:B4:5D:08:EB:16:6D:2B:80:F3:90:A2:8C:FD
Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Certificate issuer:       /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
Manifest number:          9A
Signing time:             Thu 19 Mar 2026 06:28:37 +0000
Manifest this update:     Thu 19 Mar 2026 06:28:37 +0000
Manifest next update:     Thu 26 Mar 2026 06:28:37 +0000
Files and hashes:         1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: Dj9JH3SjlvJaPan3u7jpJMq7QTBuqQ1FhPO81dLtt4k=)
                          2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: p+/O/N2cnrVHm7O6YEqosl6vnHVBYYkRwfwZCmypB2U=)
                          3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: C4Pv7/ZcXpfnIfO2ZraIiYNBzqr9mEhRQSdvTyPYip4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
                          rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 06:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
        Validity
            Not Before: Mar 19 06:28:37 2026 GMT
            Not After : Mar 26 06:28:37 2026 GMT
        Subject: CN=69bb9795-632f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:f1:68:a1:31:06:6c:7a:ab:8b:1d:45:b8:
                    c7:b2:60:b7:bb:17:16:01:5a:79:21:0e:a0:0f:a7:
                    09:91:df:46:c2:11:3a:f8:58:f7:1f:3d:b6:c5:c3:
                    2e:a0:bb:1c:11:3f:dc:de:c7:6a:20:35:6a:be:1c:
                    cb:86:97:88:1b:bb:6b:89:92:67:0f:03:99:89:2e:
                    df:22:60:3e:d9:11:ba:4a:ac:dd:b5:47:fc:86:6e:
                    6b:39:b5:fa:f8:61:d6:d2:aa:80:81:8a:aa:69:d9:
                    53:63:4b:82:5f:39:68:22:fb:28:1b:53:d0:f2:5f:
                    eb:35:aa:c6:07:80:dd:82:fa:5a:26:0e:14:26:aa:
                    14:c3:9d:42:bb:c5:18:38:14:e2:7f:a8:e4:eb:52:
                    a0:78:12:07:62:ad:a3:57:4e:8e:2b:c6:0c:2c:8d:
                    b7:17:f5:9a:fa:e9:ea:aa:13:92:6c:b7:2e:61:fa:
                    a8:56:75:aa:1b:e9:c5:ee:99:28:1c:12:06:80:c2:
                    63:7e:47:03:ab:16:9e:d7:e2:04:f4:6d:e0:0a:9a:
                    7d:95:15:43:87:5d:16:bc:e3:45:64:82:5e:53:07:
                    9c:ee:5e:a1:90:ba:07:b8:27:ea:7d:fc:85:a9:5e:
                    c7:e7:bd:4d:e6:0b:8f:34:b6:44:34:8e:34:72:24:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:9B:42:77:EA:67:B4:5D:08:EB:16:6D:2B:80:F3:90:A2:8C:FD
            X509v3 Authority Key Identifier:
                keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:4e:cc:0e:ec:ce:4d:e9:96:93:48:9c:99:51:a8:74:3e:
         57:c7:a4:a9:f1:6c:01:e7:b9:1a:dc:77:3b:3d:cf:37:07:35:
         14:18:e8:8e:9d:c8:7c:12:6b:d1:6d:64:49:ff:12:e3:61:fc:
         bf:60:1e:af:4b:7a:fa:c6:82:92:1b:cb:65:e2:73:b6:4d:a8:
         5d:10:3e:da:03:73:03:90:b8:7e:02:1f:2d:4d:1b:e4:29:3a:
         fc:31:26:76:ba:37:d0:56:a8:36:38:cd:fb:c6:f5:2d:46:41:
         f1:93:de:07:0d:e2:e7:9f:54:40:27:a1:f6:6c:96:26:67:94:
         14:06:dc:c6:be:4a:92:f4:f7:ee:db:24:22:f1:2a:60:90:22:
         9f:a6:0c:8a:3b:29:c3:6d:5c:ab:59:94:32:33:79:d1:a5:1a:
         25:c2:f2:20:f4:df:d4:10:92:31:82:0d:6d:e8:ce:7b:39:7c:
         a4:63:78:46:05:d4:b2:d6:49:4e:6f:32:48:88:a7:10:d2:85:
         68:f1:39:b5:54:64:78:67:90:4e:9d:82:b7:2f:36:4e:8e:c1:
         4c:66:9e:8b:23:da:93:62:cd:0c:06:db:8e:75:13:dc:bc:58:
         f6:f6:7c:df:0b:df:fe:76:bc:bd:8e:bc:30:78:45:77:51:42:
         af:a9:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:49:57 2026 by rpki-client