Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
File:                     cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft (raw, json)
Hash identifier:          Vripy4llCyMQrFw7FqsQ5B44myZZjfNvBo7i84myMkM=
Subject key identifier:   2A:00:32:14:64:F6:E2:01:88:A2:5C:B3:76:0D:47:AA:08:7C:9D:5D
Authority key identifier: 71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0
Certificate issuer:       /CN=A91238D6/serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
Certificate serial:       236E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
Manifest number:          233A
Signing time:             Mon 12 Oct 2026 15:51:17 +0000
Manifest this update:     Mon 12 Oct 2026 15:51:17 +0000
Manifest next update:     Mon 19 Oct 2026 15:51:17 +0000
Files and hashes:         1: cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl (hash: yG8rzgwt0vVSIkwaowNOAzwQfm6j9q/fV+X/IlJqd8Q=)
                          2: BB62FBD82AEC11EA972CB627C4F9AE02.roa (hash: vG/5CBup8bwvo9IJijCwtmm7X5EaDb/8G9msczvTawM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl
                          rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 15:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9070 (0x236e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91238D6, serialNumber=714BA28DD835A7D419701FAD372A34B7C66CFAA0
        Validity
            Not Before: Oct 12 15:51:17 2026 GMT
            Not After : Oct 19 15:51:17 2026 GMT
        Subject: CN=6acd01f5-a218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:92:50:db:98:ae:e3:4a:8e:be:59:bb:29:
                    39:bb:ff:d7:e0:1f:28:b0:c3:8d:75:2f:83:4f:8c:
                    8c:e1:a6:50:29:af:c4:24:32:96:44:88:f6:a4:21:
                    9b:cd:1d:35:95:c3:fa:31:d0:ea:c8:9d:43:17:31:
                    54:fd:71:35:85:c3:f5:4c:9b:00:b0:79:ab:95:c1:
                    dd:2b:92:01:dc:42:0b:e3:7a:05:20:61:2f:8e:89:
                    10:ac:b2:30:eb:15:25:ff:c9:e0:77:65:5d:5a:c1:
                    07:96:85:46:75:6e:4e:32:e7:58:3e:ac:14:80:bc:
                    89:40:13:de:99:ed:13:82:40:a1:ca:7f:c7:8e:57:
                    25:cf:b8:c2:69:a3:ce:9b:f0:6c:87:7a:26:b5:74:
                    fa:de:bd:c3:d7:2c:fe:a4:a7:51:31:f3:77:b1:f9:
                    33:8c:a7:7c:8c:e8:85:ff:6b:84:ad:66:2d:da:a8:
                    78:82:53:7f:1f:73:a9:36:5d:60:72:7f:22:fa:2d:
                    42:95:72:1a:ba:f3:25:f7:c6:86:ca:18:63:d5:72:
                    a6:4c:a3:e6:8b:f0:a7:b4:3a:73:73:be:79:47:99:
                    5f:de:88:82:49:64:16:40:2e:d7:d8:84:42:38:9c:
                    03:16:e5:84:90:2e:6c:01:e5:7d:85:56:d6:1e:6d:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:00:32:14:64:F6:E2:01:88:A2:5C:B3:76:0D:47:AA:08:7C:9D:5D
            X509v3 Authority Key Identifier:
                keyid:71:4B:A2:8D:D8:35:A7:D4:19:70:1F:AD:37:2A:34:B7:C6:6C:FA:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUuijdg1p9QZcB-tNyo0t8Zs-qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238D6/28990530BE5411E58DCC4357C4F9AE02/cUuijdg1p9QZcB-tNyo0t8Zs-qA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:4d:1e:28:f9:79:ca:f0:1e:04:27:d3:4c:08:53:15:48:
         62:26:bb:48:fe:4c:5a:e3:e7:21:fc:5b:e8:4e:ef:76:98:42:
         f7:5b:32:5f:56:4a:41:95:18:8c:63:8b:90:7c:90:3d:57:61:
         59:ce:15:e1:c3:00:42:5e:25:d2:b0:7d:c9:c7:7c:e3:9e:bd:
         45:f5:92:5f:9b:92:0d:93:0b:f6:6a:09:ce:a8:36:5b:6e:4c:
         0a:23:04:72:9e:e4:06:8d:2c:58:18:f6:95:ec:80:f6:5a:c1:
         a0:d5:da:bb:1c:8f:eb:47:ce:77:63:77:32:ff:a1:d0:0d:4d:
         af:3b:c9:b9:02:e5:e5:dd:eb:bd:b4:c8:8f:32:ab:5e:5f:5b:
         89:38:1d:d5:7e:4f:8d:f5:81:8b:12:b4:99:f7:7a:6a:5b:54:
         5f:01:26:49:a5:21:e8:7f:fa:4f:8d:0c:22:7c:50:f9:5c:29:
         2a:83:20:47:ae:33:7e:48:cc:c2:14:78:d3:60:a7:bd:66:a7:
         f1:9d:38:3c:92:bf:0f:d6:28:15:b6:e7:60:cd:10:7f:bc:c6:
         14:32:60:ec:4f:82:d9:04:81:db:2e:7a:7a:54:b5:f8:f4:5f:
         1c:4c:4f:22:6e:28:aa:7b:ad:a4:b1:79:c6:31:31:41:bf:62:
         69:f3:16:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4RDYxMTAvBgNVBAUTKDcxNEJBMjhERDgzNUE3RDQxOTcwMUZBRDM3MkEzNEI3
QzY2Q0ZBQTAwHhcNMjYxMDEyMTU1MTE3WhcNMjYxMDE5MTU1MTE3WjAYMRYwFAYD
VQQDEw02YWNkMDFmNS1hMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApPySUNuYruNKjr5Zuyk5u//X4B8osMONdS+DT4yM4aZQKa/EJDKWRIj2pCGb
zR01lcP6MdDqyJ1DFzFU/XE1hcP1TJsAsHmrlcHdK5IB3EIL43oFIGEvjokQrLIw
6xUl/8ngd2VdWsEHloVGdW5OMudYPqwUgLyJQBPeme0TgkChyn/Hjlclz7jCaaPO
m/Bsh3omtXT63r3D1yz+pKdRMfN3sfkzjKd8jOiF/2uErWYt2qh4glN/H3OpNl1g
cn8i+i1ClXIauvMl98aGyhhj1XKmTKPmi/CntDpzc755R5lf3oiCSWQWQC7X2IRC
OJwDFuWEkC5sAeV9hVbWHm2ZSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoAMhRk
9uIBiKJcs3YNR6oIfJ1dMB8GA1UdIwQYMBaAFHFLoo3YNafUGXAfrTcqNLfGbPqg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhENi8yODk5MDUzMEJF
NTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5UVpjQi10TnlvMHQ4WnMt
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NVdWlqZGcxcDlRWmNCLXROeW8wdDhacy1xQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzhENi8yODk5MDUzMEJFNTQxMUU1OERDQzQzNTdDNEY5QUUwMi9jVXVpamRnMXA5
UVpjQi10TnlvMHQ4WnMtcUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgeJNHij5ecrwHgQn00wIUxVIYia7SP5MWuPnIfxb6E7vdphC91syX1ZKQZUY
jGOLkHyQPVdhWc4V4cMAQl4l0rB9ycd84569RfWSX5uSDZML9moJzqg2W25MCiME
cp7kBo0sWBj2leyA9lrBoNXauxyP60fOd2N3Mv+h0A1NrzvJuQLl5d3rvbTIjzKr
Xl9biTgd1X5PjfWBixK0mfd6altUXwEmSaUh6H/6T40MInxQ+VwpKoMgR64zfkjM
whR402CnvWan8Z04PJK/D9YoFbbnYM0Qf7zGFDJg7E+C2QSB2y56elS1+PRfHExP
Im4oqnutpLF5xjExQb9iafMW2Q==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:32:14 2026 by rpki-client