Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
File:                     UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json)
Hash identifier:          dDO7e0y2w3p+VP6ntPAW7pWmzSbsXprMV1TicTVJkro=
Subject key identifier:   39:40:8A:15:6F:4C:19:1C:A4:39:95:87:AF:19:EC:06:EC:BD:10:F6
Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1
Certificate issuer:       /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
Certificate serial:       0CF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
Manifest number:          0CED
Signing time:             Wed 14 Oct 2026 18:36:12 +0000
Manifest this update:     Wed 14 Oct 2026 18:36:12 +0000
Manifest next update:     Wed 21 Oct 2026 18:36:12 +0000
Files and hashes:         1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: TM1xBnSsqhjq2jguwWaz70AftwBQtZJpr8FmUmSvqdU=)
                          2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: xp5zsEzN7zQEFnga7J3pKyc5OlYecxV9fEuTdBE9xxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl
                          rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 18:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3320 (0xcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
        Validity
            Not Before: Oct 14 18:36:12 2026 GMT
            Not After : Oct 21 18:36:12 2026 GMT
        Subject: CN=6acfcb9c-5c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:82:3d:8b:6c:5c:d5:00:fb:63:08:6f:10:
                    26:fd:39:9c:ab:f8:20:aa:33:38:70:6f:17:9a:e2:
                    35:67:8f:25:4c:34:bd:b3:d2:e2:65:61:52:6e:75:
                    90:fe:d8:c7:d5:36:99:01:40:24:bb:d2:47:d5:e7:
                    7d:81:57:e5:f0:38:7a:23:3b:01:f4:5c:32:b1:70:
                    2d:86:5b:89:be:22:5c:16:df:18:6d:b8:3d:0f:1b:
                    f3:30:9e:68:da:0f:68:06:9c:ab:6a:d4:a7:b5:b0:
                    c2:a8:27:38:76:7d:fd:93:e2:c2:d6:3d:db:4a:2e:
                    27:60:d2:60:1a:83:73:a3:14:cd:c1:e8:b6:a6:8f:
                    58:5e:83:57:e8:dc:46:15:e6:6c:2d:e8:bd:c3:67:
                    49:1d:12:a0:d2:b3:06:90:49:1b:1f:e9:0d:bc:32:
                    ce:15:43:b8:c8:f2:35:90:0a:4a:dc:5b:a2:bf:4e:
                    67:e2:a4:f8:9f:a4:b7:a1:50:e7:e3:8b:4c:f4:1b:
                    3f:33:7c:a1:d9:f0:94:20:79:bd:fe:88:de:7c:24:
                    01:3d:6c:d8:37:5e:54:6f:7b:48:36:8c:3f:fd:fd:
                    3b:55:69:05:5c:96:07:9e:3e:4b:bd:6a:ed:be:98:
                    81:5b:88:8f:c0:2e:43:8a:57:aa:3d:5d:aa:33:eb:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:8A:15:6F:4C:19:1C:A4:39:95:87:AF:19:EC:06:EC:BD:10:F6
            X509v3 Authority Key Identifier:
                keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:32:ec:55:96:d0:93:c1:f2:a6:02:99:79:21:a0:3b:16:24:
         5d:9f:07:2b:19:53:a8:be:df:17:9a:19:3b:cd:01:23:fd:c7:
         b8:b2:1b:21:9d:ba:ac:3d:a1:cb:28:20:55:df:99:69:e5:83:
         88:95:53:30:24:98:10:f3:2e:7d:f3:24:25:db:f4:73:69:dc:
         44:a4:c8:ed:6a:33:f9:d3:84:ef:6e:d3:f0:35:45:7d:95:41:
         2f:50:10:ab:1a:c6:37:4c:2a:4e:57:83:42:4b:05:a1:a8:77:
         d7:9f:39:4e:cf:bb:fa:9b:22:5f:32:f7:6f:8a:61:6a:46:98:
         56:f8:a3:f4:b6:46:0e:e9:1b:c3:03:1a:f7:81:f7:ae:e8:4d:
         dc:82:48:58:65:e8:24:de:fd:27:b4:bc:1c:20:90:4a:fd:3a:
         65:94:86:13:6e:af:58:b0:ea:14:64:31:fa:5f:de:9d:87:62:
         7a:0d:75:6c:5f:a7:c0:8b:82:3f:9f:b6:e6:e5:5d:0c:bf:89:
         18:58:ae:fa:8b:78:69:2a:9e:b8:ab:ec:3e:bb:07:cd:26:30:
         e4:f3:d5:d0:d9:31:3b:6f:c4:70:cc:fd:2d:c5:36:a6:7e:5e:
         c0:30:f4:43:93:6c:25:3a:5a:0d:63:a6:d2:ab:be:97:df:b3:
         96:cd:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:20:44 2026 by rpki-client