Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File:                     uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier:          6J3zFL7O/M/V53KrM0IQTUzI55JgXcO2PCJD7zbtfcE=
Subject key identifier:   9D:38:59:10:FE:58:4A:02:FC:61:DF:66:EA:DA:DE:EB:DA:BB:E8:26
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer:       /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial:       0916
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number:          1C2F
Signing time:             Sat 10 Oct 2026 17:01:24 +0000
Manifest this update:     Sat 10 Oct 2026 17:01:24 +0000
Manifest next update:     Sat 17 Oct 2026 17:01:24 +0000
Files and hashes:         1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: UseMS0NUWh8AyZhjJTY+iyTuxFAMZMPVzKzhArUpzhI=)
                          2: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: 0mD1tYN+qJ4ZEmTYDfuYD71fkBVWrijcZkPWh5aSwVo=)
                          3: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: Wf4be6FwFqPP3iUc0pkYIe0CNb2Zqj9u4gl1FivZpRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
                          rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 17:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663, serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
        Validity
            Not Before: Oct 10 17:01:24 2026 GMT
            Not After : Oct 17 17:01:24 2026 GMT
        Subject: CN=6aca6f64-461d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:0c:7a:36:69:27:87:e2:54:fa:82:01:2f:
                    3b:e8:51:67:63:59:76:2d:db:c8:f8:36:d4:72:2a:
                    b6:08:e2:78:63:9b:2c:53:ca:c3:f5:9e:f6:d7:ea:
                    40:ab:2f:f9:05:03:88:4f:2d:63:bb:8a:fb:86:f1:
                    1c:ca:e5:2e:7b:2c:58:4b:e4:dd:86:f3:19:5f:b4:
                    23:b3:0f:51:03:51:c4:b6:45:b4:c5:69:e0:48:e4:
                    9f:ca:09:f1:c2:ba:4c:b0:66:a1:69:91:14:50:18:
                    95:b0:33:e5:7f:21:93:06:76:44:2c:2c:c6:0c:c4:
                    30:8e:d8:08:5a:63:dd:bf:74:e4:93:28:24:67:21:
                    64:33:f4:5f:bb:76:e8:e0:b8:32:ca:3a:82:43:a8:
                    06:e8:07:a4:1b:e8:27:af:34:a8:af:7e:7a:ad:17:
                    d7:69:82:7c:35:c4:a9:5e:f9:01:49:5d:35:4b:a1:
                    bf:0a:f6:a9:92:38:4b:64:d7:e6:8d:3a:50:f0:77:
                    c3:72:6e:90:a5:28:cb:80:d0:9d:b1:2d:98:9c:f7:
                    21:53:44:55:eb:89:2b:fc:68:67:ea:75:22:4a:b1:
                    11:6f:3c:5f:82:9a:20:6e:0f:15:5d:69:4e:69:35:
                    2c:17:ca:38:32:47:31:52:c5:29:79:4b:d7:63:14:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:59:10:FE:58:4A:02:FC:61:DF:66:EA:DA:DE:EB:DA:BB:E8:26
            X509v3 Authority Key Identifier:
                keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:25:33:cc:88:e7:78:72:4a:f1:d7:ef:bf:0e:03:bb:6e:38:
         81:39:5a:4f:84:4d:6f:22:63:9c:71:3f:5e:0f:a1:24:97:da:
         49:52:37:b0:94:4d:ae:b5:2c:15:c3:4a:36:75:8c:e9:ac:06:
         74:c9:dd:12:ad:f5:51:0c:75:d3:de:56:6b:fa:07:f0:c7:fd:
         34:a1:e0:b7:dd:e7:c2:a1:89:62:58:ba:26:bb:87:6b:f3:e5:
         c2:df:da:c6:b5:aa:13:96:56:f5:cf:51:b4:07:66:9b:80:a7:
         52:fc:86:42:93:f4:59:62:65:d9:71:d0:ef:75:00:22:42:b2:
         04:98:24:48:18:d0:40:11:07:38:62:f2:2e:ba:eb:dd:f9:5f:
         25:9e:de:a6:95:42:a2:80:d0:05:f2:a3:42:40:bf:4a:d9:45:
         50:55:1b:58:96:4a:8f:fe:3e:74:8c:f8:50:e9:a7:8e:0b:86:
         d5:09:45:04:db:c0:01:d0:fc:95:11:40:aa:4d:4a:26:9d:78:
         14:5b:03:bb:f5:aa:b2:7b:a8:f8:05:aa:f8:fd:06:9a:bd:89:
         9d:e2:92:5d:6c:c7:b3:31:90:ad:01:f7:fa:00:e9:0b:3c:02:
         42:69:1e:e9:09:3b:29:5c:05:07:25:6c:ff:cf:16:e9:e9:50:
         a8:86:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:55:18 2026 by rpki-client