Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
File:                     UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json)
Hash identifier:          UNlRt66I57+vUSQVYoSF9tNEkcXa3LilhLgTifIX25c=
Subject key identifier:   F8:DE:1B:52:14:92:38:47:5E:D2:93:D3:7C:B8:8D:0D:4A:BE:A3:40
Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
Certificate issuer:       /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
Manifest number:          0858
Signing time:             Fri 18 Sep 2026 20:55:32 +0000
Manifest this update:     Fri 18 Sep 2026 20:55:31 +0000
Manifest next update:     Fri 25 Sep 2026 20:55:31 +0000
Files and hashes:         1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: TUVv6oIWq6GOTuYUG4m9BMBYaplqFQGk4fPOIm3RA1Y=)
                          2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: Fs+wJCtSlXLyDLA5Jgh5KCmg3uh+8nfqlZjrLNA7VBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl
                          rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
        Validity
            Not Before: Sep 18 20:55:31 2026 GMT
            Not After : Sep 25 20:55:31 2026 GMT
        Subject: CN=6aada543-59ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:80:eb:cb:aa:02:24:2c:8f:5b:43:ce:04:
                    39:6e:05:53:2d:f7:0c:2d:91:37:d8:3f:cb:3a:15:
                    90:c9:f9:6e:87:32:37:37:44:ad:69:9e:15:3b:8b:
                    3a:8f:ac:f5:fd:d7:50:dd:a8:3d:76:8c:68:96:25:
                    b6:5a:c8:8f:7a:7b:e0:1d:e5:b9:4a:29:2e:56:0b:
                    64:e5:87:2d:86:bf:5e:87:85:b6:68:b5:b6:2e:b0:
                    28:90:af:9c:54:e2:0a:33:6d:d9:0d:b2:6c:7d:ef:
                    fc:2a:c8:99:99:ae:f2:47:ab:0b:56:1e:cf:27:6d:
                    d4:df:ab:26:00:81:ed:06:d3:d8:31:7d:68:9f:d8:
                    8d:6c:b8:0a:32:e5:7c:3e:1b:ed:49:85:3f:75:5f:
                    f4:2f:f1:90:86:dc:d0:7e:2b:c5:76:68:4d:c4:69:
                    eb:42:db:47:37:45:48:b5:95:f0:40:9a:5d:14:88:
                    5a:d5:36:ca:15:5e:d5:6e:2e:f6:a3:05:03:ed:7e:
                    0e:34:9b:d8:da:a4:ab:99:65:f5:46:70:20:9b:89:
                    ce:be:48:59:81:23:c4:73:fe:0c:d3:3d:af:a6:1b:
                    63:5e:d5:5f:53:d1:71:99:1d:99:d5:c2:de:e9:d9:
                    cf:81:1e:fd:1a:ea:fe:e4:29:61:e6:cc:c6:de:1b:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:1B:52:14:92:38:47:5E:D2:93:D3:7C:B8:8D:0D:4A:BE:A3:40
            X509v3 Authority Key Identifier:
                keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:ea:4c:2f:db:0f:f6:e1:b3:e6:b5:14:0d:76:81:91:3a:
         59:30:44:02:bf:d5:f0:30:64:a3:0f:32:5d:f8:3b:08:95:24:
         9d:7b:8c:be:1f:b2:35:9f:88:2d:30:b9:b7:8e:72:ae:22:e6:
         0f:cb:02:74:cc:58:c3:92:90:56:72:1d:cf:af:db:0e:bf:1a:
         ad:17:66:b3:a6:5d:dd:cf:71:07:61:a4:eb:30:06:66:e8:f5:
         ab:72:32:ae:f0:74:0e:eb:21:db:ec:53:28:1a:89:63:f8:de:
         79:6a:0b:30:44:05:54:ee:3f:bc:cb:10:5b:71:6d:f8:7f:37:
         6a:a0:14:06:aa:0f:4e:5a:81:d3:2d:4c:02:5e:a2:79:fb:cc:
         1d:71:3c:d2:93:bd:d8:af:3e:0b:d7:4a:f5:b1:29:08:c2:6c:
         c1:56:29:68:77:46:d7:e1:9a:fd:38:43:de:83:b2:6f:0d:e2:
         8c:94:ed:42:05:cf:ee:81:07:50:70:4b:0c:28:6e:e9:eb:18:
         55:09:d1:ae:83:d0:fa:22:de:1a:fc:7a:7d:5d:15:f3:47:46:
         d4:a5:c6:a7:95:f8:9f:3e:68:78:ed:3e:8b:35:bf:91:7c:56:
         8f:0f:5d:4c:e6:37:c5:f2:55:cc:e9:25:28:f4:71:2d:5f:f8:
         cc:41:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:27:22 2026 by rpki-client