Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B99/A33E31B0790C11F1BC1B6C7065A30FBC/uzLKChca8IQCWfubVrttOnQAdww.mft
File:                     uzLKChca8IQCWfubVrttOnQAdww.mft (raw, json)
Hash identifier:          qQ6moPdbi/1m5Ax99uj7HIDzkfJeOJDVyYtdXUEHRuI=
Subject key identifier:   A9:76:19:D9:2D:98:E4:D0:8D:53:6D:FC:86:13:75:C0:8C:32:DA:48
Authority key identifier: BB:32:CA:0A:17:1A:F0:84:02:59:FB:9B:56:BB:6D:3A:74:00:77:0C
Certificate issuer:       /CN=A9172B99/serialNumber=BB32CA0A171AF0840259FB9B56BB6D3A7400770C
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzLKChca8IQCWfubVrttOnQAdww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B99/A33E31B0790C11F1BC1B6C7065A30FBC/uzLKChca8IQCWfubVrttOnQAdww.mft
Manifest number:          2A
Signing time:             Mon 21 Sep 2026 08:43:40 +0000
Manifest this update:     Mon 21 Sep 2026 08:43:39 +0000
Manifest next update:     Mon 28 Sep 2026 08:43:39 +0000
Files and hashes:         1: uzLKChca8IQCWfubVrttOnQAdww.crl (hash: RikGIWeoMtbUVLXx/LcGuNoojnh9cLVC9tFBhe8ZirM=)
                          2: F1B3D2727A9311F181953C2F5BA30FBC.roa (hash: GWXmFiLtK/xnesWghb15ZnihHKUahdVyRavPiQjhJao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B99/A33E31B0790C11F1BC1B6C7065A30FBC/uzLKChca8IQCWfubVrttOnQAdww.crl
                          rsync://rpki.apnic.net/member_repository/A9172B99/A33E31B0790C11F1BC1B6C7065A30FBC/uzLKChca8IQCWfubVrttOnQAdww.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzLKChca8IQCWfubVrttOnQAdww.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B99, serialNumber=BB32CA0A171AF0840259FB9B56BB6D3A7400770C
        Validity
            Not Before: Sep 21 08:43:39 2026 GMT
            Not After : Sep 28 08:43:39 2026 GMT
        Subject: CN=6ab0ee3b-0f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:34:41:b5:a7:90:17:0a:db:39:56:65:fa:
                    f1:64:6d:24:12:b1:a3:55:32:c5:d8:f7:d2:9b:0f:
                    e2:3f:59:26:6f:de:4a:f4:7d:db:c2:03:09:f7:8b:
                    bf:0a:18:df:cc:42:ac:24:c1:98:61:aa:0c:b2:2d:
                    b4:b7:3a:f2:53:4c:99:b5:c0:45:8c:94:0d:61:c8:
                    a1:8a:92:35:d8:fb:70:9d:09:37:50:8f:3b:66:42:
                    89:32:63:bc:23:0e:f4:a9:64:f0:7a:7c:6f:ae:3e:
                    1d:3f:fe:f4:79:e0:cf:12:8f:03:37:f0:9d:00:5d:
                    bc:9a:a1:51:06:87:47:4b:1c:86:79:f4:3f:1e:d6:
                    4f:8b:76:4d:c6:8e:db:9d:26:e4:cd:db:0c:47:3e:
                    bd:16:01:86:cd:f7:c7:24:42:2a:ee:cf:49:bd:cf:
                    c3:d7:42:6b:3f:8c:0d:27:c8:30:14:57:e6:e6:5a:
                    0e:5a:c8:12:16:83:b1:f1:66:25:30:d6:67:c8:da:
                    b1:42:95:bf:a7:70:ad:a2:13:f2:cf:e4:82:38:c1:
                    cf:08:b3:d7:63:75:3f:6c:e6:16:c5:d1:fe:e0:c9:
                    c1:ac:6c:3e:68:23:26:9a:2a:ae:67:b1:90:89:7f:
                    f7:86:35:3c:72:66:fe:ef:fc:13:e6:8d:62:99:a4:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:76:19:D9:2D:98:E4:D0:8D:53:6D:FC:86:13:75:C0:8C:32:DA:48
            X509v3 Authority Key Identifier:
                keyid:BB:32:CA:0A:17:1A:F0:84:02:59:FB:9B:56:BB:6D:3A:74:00:77:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B99/A33E31B0790C11F1BC1B6C7065A30FBC/uzLKChca8IQCWfubVrttOnQAdww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzLKChca8IQCWfubVrttOnQAdww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B99/A33E31B0790C11F1BC1B6C7065A30FBC/uzLKChca8IQCWfubVrttOnQAdww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:15:13:47:c2:df:f6:31:63:2b:05:f0:d8:f0:31:b6:89:
         44:b4:53:3b:51:8e:96:50:94:9d:c6:8f:bf:54:1f:40:e0:13:
         7d:8f:db:40:da:96:b3:f8:4e:80:0c:a0:5c:76:9e:8f:03:6d:
         3e:38:69:a1:f8:16:df:38:19:3d:6d:2c:3b:b6:98:78:06:4f:
         a9:ff:4a:dc:77:ab:cf:d8:82:4e:e5:16:5b:92:55:58:93:d3:
         d8:42:e7:4f:36:d0:72:a3:29:d2:10:77:a4:a2:cb:d1:96:c3:
         51:df:01:c2:1d:8a:05:30:7f:88:6c:e0:bc:70:bc:cd:ae:72:
         e6:5f:2f:5f:98:5c:95:15:5d:e7:9f:f3:5f:0b:1f:83:a8:1e:
         68:8f:36:72:6a:39:50:1f:e2:36:d6:a5:68:3f:7f:e0:5b:56:
         71:ed:ae:b2:6f:db:4e:13:5f:85:b3:df:b1:8a:3e:95:2a:a7:
         15:86:e5:98:72:b7:d8:2b:e2:0a:3b:f0:f8:ae:12:39:6b:3c:
         06:62:62:c6:70:af:91:d6:62:d7:14:3a:8e:04:61:0e:1c:39:
         ec:8d:02:db:7d:b7:21:55:d8:21:c6:c6:b4:b1:f3:c0:38:b7:
         3e:60:87:9c:00:bc:d9:8c:4d:61:71:6a:c3:e3:13:8c:bf:46:
         58:4f:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:47:48 2026 by rpki-client