Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File:                     UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier:          nOeZ16Y8KkPcpzFxFjc0GuBmzkcMR+dQECleEmipqxA=
Subject key identifier:   16:E0:76:27:28:07:54:FB:40:1F:2C:25:26:27:E5:A2:66:86:0E:22
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer:       /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number:          7D
Signing time:             Mon 21 Sep 2026 07:49:29 +0000
Manifest this update:     Mon 21 Sep 2026 07:49:29 +0000
Manifest next update:     Mon 28 Sep 2026 07:49:29 +0000
Files and hashes:         1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: Xqy3XirrS3Ed7WIYvla6ldC8kJcrezKSwRyDzpwg7eI=)
                          2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
        Validity
            Not Before: Sep 21 07:49:29 2026 GMT
            Not After : Sep 28 07:49:29 2026 GMT
        Subject: CN=6ab0e189-3347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:2a:aa:2a:7e:ef:f1:5c:18:72:63:10:8c:
                    ae:cd:2b:5f:b4:d0:40:6f:db:bd:4b:e3:3b:4b:5f:
                    33:c2:c6:5b:dc:a7:97:34:ff:22:f0:52:03:86:64:
                    75:59:6a:9a:a4:fa:ee:cb:9a:e0:14:b0:04:8b:f6:
                    ef:a6:3e:48:d4:06:e9:ad:5a:ac:2a:90:36:01:65:
                    a9:7b:2f:91:4a:16:d2:68:68:84:70:7e:8a:83:08:
                    08:29:f7:7d:3a:54:af:97:e3:8c:c9:63:fc:22:b4:
                    5a:c9:7f:3d:ba:5b:41:74:9e:77:0a:cd:61:92:e7:
                    f0:ee:f8:59:91:b2:ef:e3:0f:d7:00:f8:9b:cb:5d:
                    22:32:b6:35:39:f4:5e:5c:24:b4:7b:6e:f8:67:d0:
                    b9:84:7c:f1:a2:28:d2:aa:12:98:9c:23:61:3d:0d:
                    6c:c5:0f:ab:bf:e6:61:90:e4:be:ee:25:e6:4d:e8:
                    8a:88:ef:21:8b:16:d7:77:d6:fa:0f:21:bb:9d:a6:
                    f6:c5:e7:f7:12:cc:09:d4:19:9f:84:c6:27:53:6f:
                    38:5d:f4:ea:22:a6:a0:38:17:47:57:49:a0:9d:14:
                    8f:d9:d3:8b:82:0a:ed:3b:2e:a5:dc:ad:61:e5:0e:
                    1d:98:10:2d:a1:85:2c:2f:4a:66:40:fe:0c:fd:60:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:76:27:28:07:54:FB:40:1F:2C:25:26:27:E5:A2:66:86:0E:22
            X509v3 Authority Key Identifier:
                keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:bd:c5:61:f8:9e:bc:4f:25:ad:34:93:c8:a4:8a:98:a8:
         85:6a:16:2a:69:25:11:4e:60:ab:a2:23:af:06:fc:66:ab:96:
         fa:f4:23:28:9a:6a:dc:15:b3:cb:ff:fe:59:98:f1:b6:8a:73:
         b0:db:9c:af:22:4c:61:55:36:84:86:db:f3:ce:ee:84:08:e8:
         1e:ce:76:47:b4:95:27:a6:90:53:7e:c7:04:45:15:1b:29:77:
         c1:68:8f:cd:0b:30:ca:90:6d:e9:51:af:c7:47:8d:00:33:9d:
         0a:92:66:c9:47:47:7e:9d:9f:b5:a2:58:23:26:8d:2a:39:eb:
         8d:30:f3:7c:ee:ef:88:11:d9:ae:b8:1b:09:d7:f0:f5:7a:f9:
         bc:aa:f5:c9:5e:68:79:7c:6a:8c:cc:60:0b:c2:ea:11:b5:8d:
         10:d5:cc:26:9a:59:ed:81:3c:0a:d8:9f:1b:e7:ff:18:8a:0e:
         88:94:49:80:cb:d2:79:25:15:b4:ce:fe:ce:08:3d:78:27:71:
         5a:fb:6a:3b:84:aa:27:a2:6b:28:27:eb:14:f7:39:9c:f8:8b:
         bc:d3:bc:8e:37:dd:56:1b:7a:d4:ca:a2:82:2b:0e:18:87:fb:
         22:d4:c4:ad:b0:8e:53:f6:65:d7:45:4f:08:a9:0a:78:28:8f:
         58:fe:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:18:20 2026 by rpki-client