Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          dj7lkMgsU6ZcC9N+7JfWhgTeBC6fNG8b3IFSqsP9Y3I=
Subject key identifier:   B0:2A:07:D0:F3:D0:60:F5:B4:BE:BF:CB:8E:BE:4B:03:F6:F5:7E:93
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       08F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          08E1
Signing time:             Fri 16 Oct 2026 20:38:02 +0000
Manifest this update:     Fri 16 Oct 2026 20:38:01 +0000
Manifest next update:     Fri 23 Oct 2026 20:38:01 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: DmT0mD0f382LP9xxESsQEeAUDxQF42H9ZYUT24sfvj8=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: oiU8LI8c/Ld3yZKdhxSFNBGXv5MJ38E+at2Id1ZLBts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 20:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Oct 16 20:38:01 2026 GMT
            Not After : Oct 23 20:38:01 2026 GMT
        Subject: CN=6ad28b2a-0950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:77:3f:42:8e:59:a4:5c:af:98:1f:c6:dc:
                    12:bb:a0:0e:2a:a1:53:c8:62:1f:7b:4c:d6:e6:70:
                    e6:6d:57:0c:90:25:7b:ae:d0:a1:2e:70:f7:25:44:
                    97:bd:bd:e9:7a:98:52:38:38:be:8b:4a:78:c5:47:
                    11:00:30:22:78:28:7a:ee:94:26:fc:1c:93:3f:f8:
                    f1:56:a9:ee:af:f0:1a:31:a5:32:61:6b:8e:a0:69:
                    fd:83:5f:f7:5e:b0:5b:06:66:5d:c3:e0:a4:bc:98:
                    19:e1:2d:0a:af:80:bd:2f:46:06:85:3b:37:59:a2:
                    bb:78:ba:3b:d5:f5:a3:62:3d:3a:7c:3b:38:85:19:
                    8b:eb:88:77:c2:32:07:31:25:27:8b:4b:43:a4:37:
                    41:97:cc:a6:92:40:96:61:08:1c:06:0d:90:53:2c:
                    10:64:51:48:00:e4:6e:ca:f9:fc:01:e4:13:e3:9f:
                    97:e9:b5:b0:50:b4:84:82:df:a2:e8:0c:73:18:52:
                    b7:7f:69:95:c2:3e:bd:2a:97:94:4f:4c:cb:a1:77:
                    97:14:a3:58:bc:60:02:aa:b3:68:eb:a1:64:17:08:
                    af:14:16:9a:63:cd:69:d4:98:6e:bf:82:0a:bb:0d:
                    d5:ed:d3:d2:35:1b:7d:6e:9f:2f:52:9b:d6:70:a3:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:07:D0:F3:D0:60:F5:B4:BE:BF:CB:8E:BE:4B:03:F6:F5:7E:93
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:53:95:ea:98:b1:6d:a9:7c:16:34:e5:d4:81:b0:51:76:
         01:f2:80:f4:3a:ce:bd:87:ab:70:a1:51:ba:2f:ef:9c:47:13:
         d3:33:06:d4:86:e8:20:9a:99:48:d5:56:88:b8:4d:6d:bc:9a:
         13:cc:d7:f6:e9:43:72:92:3f:95:77:6e:17:c1:fc:43:60:d2:
         a6:f5:1d:92:4c:5c:86:38:5f:f4:b9:cb:0e:a8:5b:6d:97:37:
         3f:a6:e0:c2:6a:bc:72:86:5f:80:19:ca:ba:98:17:67:9b:3c:
         67:d8:b1:28:16:0f:4b:9b:22:c5:18:0e:7f:74:23:f1:9a:0e:
         3d:00:78:bb:be:ae:86:06:4b:f6:6b:6c:a5:cb:f9:52:b7:88:
         79:91:4f:96:ee:26:20:7f:c1:c1:79:26:ef:43:65:f6:c9:3a:
         ce:0e:f5:f3:0c:57:51:49:99:b1:2a:1d:60:67:5c:f3:ae:81:
         33:72:44:f9:44:4e:d8:f7:f4:36:7a:b2:5a:9c:1e:ca:d4:bc:
         88:28:89:31:24:f9:33:52:5e:c3:1f:5c:6a:b1:e0:19:b0:bc:
         0c:2b:33:37:3b:52:4c:b3:7b:9c:0a:04:a5:db:c3:9a:b4:fa:
         71:d8:de:6c:67:c6:6b:8b:e6:84:df:4b:3a:75:31:86:bf:74:
         c5:18:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:53:59 2026 by rpki-client