Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          PxIGUej4fYqAuR0DvDWcHwTo//oolFYElHGRq1A+r8A=
Subject key identifier:   AA:7E:22:41:D8:B5:66:84:09:48:4E:94:D9:EA:BB:DC:79:0F:F6:10
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       219A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          2175
Signing time:             Fri 16 Oct 2026 15:58:01 +0000
Manifest this update:     Fri 16 Oct 2026 15:58:01 +0000
Manifest next update:     Fri 23 Oct 2026 15:58:01 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: iNROGGQRCon4mUN9HJLNebYwL+Mm/tfma7+UUJbCzus=)
                          2: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: H6TSFHjxceqzGmdQryqjxQpaN4ogGNNs1wmONNfXYC4=)
                          3: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: o/MzyN7ge/ypeEuVIYd4HleoRWxXy+d/s8ghiWxojiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 15:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8602 (0x219a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Oct 16 15:58:01 2026 GMT
            Not After : Oct 23 15:58:01 2026 GMT
        Subject: CN=6ad24989-12e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:d1:d2:cc:81:94:14:fc:a6:a9:37:e8:84:
                    56:d3:2f:3d:a0:83:07:22:60:19:9b:83:e7:31:2c:
                    47:fa:69:c9:66:59:20:09:3f:8d:d0:5c:f4:00:43:
                    22:b4:c6:64:04:11:68:b7:3b:68:f2:eb:80:f5:03:
                    05:cf:9e:aa:49:4c:44:78:57:33:14:c6:28:57:eb:
                    48:3f:d2:f2:ec:61:02:09:e7:60:fe:14:81:6d:36:
                    36:b8:03:22:a0:75:8e:49:ed:5c:f2:e3:2b:24:22:
                    9f:70:b1:48:6f:15:ec:f9:5d:a6:90:bf:36:e1:87:
                    2a:72:8c:8f:fe:9f:83:2d:46:be:df:74:04:56:a3:
                    7f:17:c3:5e:c9:49:f7:a1:d1:f5:fe:c5:8c:80:1f:
                    4a:9a:ef:48:99:18:77:53:6e:8e:78:e6:2d:07:94:
                    3f:a7:6f:29:79:70:d0:cd:84:2b:d4:e7:05:30:af:
                    b0:61:10:c3:d7:b5:5a:64:18:5f:c3:aa:80:5d:76:
                    fe:5c:ed:4b:a2:86:23:27:88:8d:df:df:9f:5d:f5:
                    ed:ca:a1:55:0f:c6:70:6f:89:56:45:df:6f:37:19:
                    76:07:f6:49:c6:f2:1b:89:53:9c:3b:a0:43:73:68:
                    3c:2b:45:b7:64:f6:7a:7a:31:0e:df:e0:1e:31:44:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:22:41:D8:B5:66:84:09:48:4E:94:D9:EA:BB:DC:79:0F:F6:10
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:e4:04:fa:43:6d:54:9c:c5:32:05:42:5e:7f:b2:63:09:
         26:3c:aa:fd:16:36:76:23:3e:77:e1:3b:50:ed:a5:96:c2:79:
         00:53:75:c5:87:42:5f:cd:0b:87:09:c2:b7:42:37:1d:77:da:
         c7:71:48:ac:47:ef:40:20:f5:a9:a1:23:b3:e8:41:77:2b:b5:
         ac:df:b0:27:07:52:22:da:de:8b:dd:3e:12:dc:4f:a5:67:2c:
         a3:04:51:2f:4c:16:a2:cc:ce:8b:b8:25:94:1d:7d:b1:af:03:
         72:de:45:cf:a0:9c:df:0b:97:77:e0:fa:ab:ba:47:41:4c:25:
         d0:4b:ef:af:71:fe:21:68:ef:a2:bb:fa:ed:4d:da:12:a6:5e:
         43:aa:5f:bd:6e:99:b6:d5:a5:12:a1:b1:f4:35:b8:52:4b:d7:
         2f:0f:9d:76:8d:d3:cf:9b:66:9a:98:1f:b3:ff:84:61:18:b4:
         d5:0f:fb:44:d5:28:11:e0:f8:7f:85:b9:47:e0:78:bd:f3:be:
         f7:92:2f:4d:d2:70:2f:99:a1:08:f4:18:43:93:29:ba:cb:2a:
         76:ca:05:23:84:c8:40:38:d9:c0:31:b3:be:62:0f:e3:02:99:
         f3:7c:ae:19:94:a7:7c:00:f0:b3:ef:e9:78:df:34:a4:2f:91:
         97:dc:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:59:59 2026 by rpki-client