Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File:                     UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier:          L1y6+Pdv+a7O1P062mND2+eMSyrPjeOn+3M1hjz0seM=
Subject key identifier:   2D:0B:5C:08:87:05:D0:C6:82:AB:CF:F5:D0:01:01:D3:8C:93:FC:7D
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer:       /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial:       0B51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number:          0B47
Signing time:             Mon 28 Sep 2026 19:21:55 +0000
Manifest this update:     Mon 28 Sep 2026 19:21:54 +0000
Manifest next update:     Mon 05 Oct 2026 19:21:54 +0000
Files and hashes:         1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: NB/3ZoJjsZz1dagMe5V6fBAY7rZcfR3lzErJlwZ/ang=)
                          2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
                          rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
        Validity
            Not Before: Sep 28 19:21:54 2026 GMT
            Not After : Oct  5 19:21:54 2026 GMT
        Subject: CN=6ababe52-2e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:54:1a:15:3e:75:d6:c5:f4:72:62:67:d5:
                    dc:1c:90:0e:f8:f9:d1:90:c2:df:05:be:16:c7:b6:
                    6c:bb:66:26:b2:c6:e0:76:61:94:37:ce:c8:8d:71:
                    ff:9d:52:e4:f6:de:4c:af:ba:72:55:17:a2:a1:fa:
                    3c:46:b6:fc:a8:df:c7:ec:5e:2f:02:31:d1:4e:45:
                    cc:3b:e2:b1:a9:88:9e:fa:1c:ae:d9:92:ac:8d:c8:
                    b2:f0:07:1d:c0:14:14:bc:12:bb:ac:b8:f8:8a:ad:
                    b3:39:43:c6:74:6e:16:66:1d:aa:0b:06:a5:33:fd:
                    71:f2:63:b2:f2:05:c7:47:01:6f:2e:4f:6a:57:84:
                    c1:26:21:fa:1e:9e:c7:0a:14:d4:36:e5:cf:1e:04:
                    29:24:ee:58:3f:23:15:5b:5b:12:3a:ec:e6:e0:81:
                    58:c2:85:ac:bd:d2:f3:7a:fe:83:35:9e:d6:39:c8:
                    c9:5c:a7:9d:25:ad:a0:b4:db:6e:67:e4:f1:01:9b:
                    06:9d:fa:37:93:52:8c:a6:1a:13:18:9d:a3:84:2d:
                    57:23:52:7c:ff:9a:02:ec:09:f7:de:ff:4b:25:ad:
                    7a:f5:56:66:b8:68:4a:67:74:12:84:63:33:56:6d:
                    66:3d:51:40:04:89:db:23:52:fe:e5:4a:b1:e4:e3:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:5C:08:87:05:D0:C6:82:AB:CF:F5:D0:01:01:D3:8C:93:FC:7D
            X509v3 Authority Key Identifier:
                keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:99:17:6a:10:64:6f:e2:1b:e3:b6:9d:26:e6:32:f4:c8:
         ff:2f:2b:f0:60:49:5a:66:7c:4c:34:f7:b3:af:c3:47:42:1b:
         a0:f1:da:6f:30:bd:32:6b:2f:92:e2:2a:d7:7e:19:f7:50:f7:
         41:95:3e:ab:45:5e:d1:77:20:72:97:d1:b3:57:ee:02:a6:a3:
         37:a8:e3:fc:23:50:c8:a8:48:6a:82:0a:46:76:d6:67:f6:54:
         46:21:cc:7b:b4:5e:df:dd:74:15:a7:05:37:04:09:90:00:3e:
         65:2b:7f:6d:6f:fa:a5:c6:8d:9c:ba:77:ab:6e:51:dd:50:ae:
         d8:ab:6b:02:08:9a:56:25:dd:b2:6d:d3:19:bc:1f:9b:db:dd:
         5b:08:bc:80:50:f8:5c:52:9a:67:37:b0:39:ad:52:60:32:6b:
         f3:e0:10:52:89:9b:eb:7b:1f:d6:00:72:52:78:75:22:0e:4d:
         31:75:0b:90:8e:c9:d8:22:45:cc:30:8f:05:60:6a:6a:2a:c3:
         44:3a:19:ea:97:09:07:00:99:55:3d:50:13:80:89:30:89:87:
         c4:91:3b:a5:e3:cc:3d:e5:d5:2d:8f:4e:44:a4:6f:07:5b:48:
         65:bd:bb:fa:6f:14:10:df:ed:22:8e:a4:17:a1:79:f5:3e:cb:
         67:02:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:11:06 2026 by rpki-client