Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft
File:                     uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json)
Hash identifier:          duSgROi1yJJ+0fQe0sK6VcTlFLBGslZVSCv+Z/ez6eg=
Subject key identifier:   5A:78:C7:47:2A:95:23:6F:95:EE:C7:A9:23:73:13:AE:5E:97:14:FD
Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5
Certificate issuer:       /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft
Manifest number:          06DE
Signing time:             Sat 28 Mar 2026 22:05:48 +0000
Manifest this update:     Sat 28 Mar 2026 22:05:48 +0000
Manifest next update:     Sat 04 Apr 2026 22:05:48 +0000
Files and hashes:         1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: x2Op5RcvN9zdaE4TM7fT0OFXmObpGLv4Dm8eOS79xRQ=)
                          2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: 8+ccZFLbNw6d0jzqjMV4lchK7CWsvFlivDXtgGmeX84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl
                          rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 22:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5
        Validity
            Not Before: Mar 28 22:05:48 2026 GMT
            Not After : Apr  4 22:05:48 2026 GMT
        Subject: CN=69c850bc-c163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:d2:21:06:14:2a:3e:a1:78:00:b3:5e:5f:
                    8b:3e:78:5a:d6:b1:21:66:fb:f2:c9:5c:d1:e8:18:
                    b6:71:ab:2e:f5:8f:0b:fd:a2:f2:7d:b8:cd:dc:37:
                    20:97:ab:17:43:9c:ee:ef:e5:50:04:0a:dd:27:40:
                    82:b9:8d:03:db:d3:7a:9d:ce:86:ed:0f:ad:b4:bd:
                    0e:d6:ba:34:06:8f:0e:d6:1a:7a:e0:5e:9f:df:ab:
                    6b:0d:67:00:96:a2:7b:5e:f9:4d:a1:14:75:3a:05:
                    83:d4:85:a1:71:cc:8a:82:13:57:e4:2e:33:d6:69:
                    a4:82:c6:0c:e3:0e:0e:e3:12:8f:8a:f9:23:2a:1d:
                    21:01:96:9a:d3:fa:9d:2f:84:9d:ae:b0:70:a6:b1:
                    d5:62:c5:a0:1d:26:73:d7:d2:48:33:7e:86:f6:ca:
                    23:b7:4b:87:fb:4c:63:c6:f3:a2:f4:8a:ab:69:4c:
                    e6:a6:28:d4:e8:77:43:1a:61:a4:15:36:99:3b:1e:
                    45:22:32:9f:b1:a6:52:bb:ba:7a:86:31:96:c4:aa:
                    b6:4d:f2:7b:b8:fa:d3:89:2c:83:2d:98:c3:dd:65:
                    01:c0:55:52:d5:de:c8:36:f4:02:89:d8:c5:8b:b2:
                    d0:1f:81:00:8d:21:55:c5:65:62:4e:7a:70:0e:0d:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:78:C7:47:2A:95:23:6F:95:EE:C7:A9:23:73:13:AE:5E:97:14:FD
            X509v3 Authority Key Identifier:
                keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:05:17:08:48:94:09:82:1d:7a:47:9c:b3:db:ef:71:2c:5c:
         27:68:7c:e2:f1:d2:ed:77:bd:9d:27:8c:48:80:18:83:35:6f:
         89:61:62:35:76:65:d2:ce:c3:72:68:b1:26:c5:64:17:6b:d8:
         7c:2b:0e:1f:ef:57:e9:c4:a9:e3:04:b4:e7:99:7c:5f:cd:4c:
         ce:05:94:b7:fd:68:dc:7e:f3:d8:06:e7:45:3a:18:95:61:56:
         9a:9a:95:5b:a0:d7:75:a8:20:c6:42:b2:d8:de:15:54:82:5a:
         96:62:9d:94:2d:37:ea:f7:36:32:38:20:c1:89:fe:83:3f:be:
         92:88:8f:4d:fd:01:39:e3:ce:d8:c6:0b:5b:2f:a7:d4:54:56:
         05:2e:86:a8:e6:12:ba:2a:78:cd:8c:38:b4:bf:f7:0f:cd:79:
         15:22:18:a7:3a:13:27:a0:ae:4c:08:ee:75:6d:38:ef:7d:c7:
         03:aa:f9:ea:73:2f:b4:57:c7:be:7b:f4:b3:2d:a3:18:4f:de:
         46:49:a9:6e:10:fe:20:13:ce:78:ba:0a:a9:5e:24:d0:6a:fe:
         d7:ae:69:cb:39:65:43:3c:18:bf:4c:98:d0:52:4b:a0:ca:ec:
         f0:3d:d1:6e:6d:e8:fe:02:7f:9a:1a:1d:e4:3b:c0:49:ed:dc:
         61:95:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 18:32:29 2026 by rpki-client