Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
File:                     uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json)
Hash identifier:          Xj6cYta88gDE4AIQbKIy1n94pPGd7Uqc9yDDlO+9Wv0=
Subject key identifier:   A8:4D:EE:46:15:AE:9B:48:4D:C3:54:8F:F1:0A:13:69:1D:C7:56:F2
Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
Certificate issuer:       /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
Manifest number:          017A
Signing time:             Tue 13 Oct 2026 05:19:49 +0000
Manifest this update:     Tue 13 Oct 2026 05:19:49 +0000
Manifest next update:     Tue 20 Oct 2026 05:19:49 +0000
Files and hashes:         1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: 0niNqVXa7RjQU/AIWXPSrcgDtIqeq/z/Zg/MDGHqekI=)
                          2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: NaEScBIeGfqeqtY23FBVtMrm6wm6IYSTw8AJnU7Al0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl
                          rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 05:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
        Validity
            Not Before: Oct 13 05:19:49 2026 GMT
            Not After : Oct 20 05:19:49 2026 GMT
        Subject: CN=6acdbf75-c72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:b1:41:06:c7:bb:d8:3e:bc:75:88:71:92:
                    8f:13:c9:9c:87:94:6c:f3:2d:b9:f1:cf:ce:9a:97:
                    f1:cb:51:4c:c2:ae:b3:a0:14:98:c6:e5:ea:4d:69:
                    6c:b7:eb:52:c5:f8:f7:6a:79:e2:90:98:46:b1:e7:
                    26:b4:0b:2e:01:6f:6c:0c:f2:e9:25:25:9f:bf:04:
                    f2:29:62:14:12:28:aa:19:a7:30:9a:52:23:7f:0b:
                    b6:3b:25:2a:ec:4b:d5:74:0a:6f:9a:c7:f0:f4:a9:
                    73:91:e6:d8:71:3b:3b:94:a3:95:d2:36:3d:35:ca:
                    42:70:69:2b:39:6f:00:f0:4e:b4:7b:14:52:85:44:
                    6d:01:4c:81:26:2d:f4:1e:53:ff:4c:17:d3:64:e6:
                    51:68:4a:5d:f3:80:08:f7:89:a7:99:4f:37:82:4d:
                    29:90:46:74:ad:e3:55:bd:c0:06:20:f2:8f:9c:81:
                    41:7a:70:0f:b9:45:3c:0e:2e:63:b5:3f:f0:6b:12:
                    48:51:e3:7e:f7:b9:b1:76:db:34:85:3e:65:3f:d4:
                    b3:4c:68:0f:82:89:96:6b:ef:ce:5d:a7:e7:e8:1d:
                    bf:4d:1c:d9:bb:5b:45:99:bd:33:d1:76:0e:3a:d3:
                    d8:45:26:33:63:db:ad:48:06:3d:5c:97:b2:32:a2:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:EE:46:15:AE:9B:48:4D:C3:54:8F:F1:0A:13:69:1D:C7:56:F2
            X509v3 Authority Key Identifier:
                keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:35:4a:d7:a2:c6:5d:31:9b:41:f7:94:bd:d6:10:c3:9b:
         47:2a:b2:7a:9e:90:45:7d:84:b8:c5:64:b1:77:c7:5a:1a:b5:
         b2:81:06:18:ab:be:52:42:ed:ca:59:c5:40:92:cd:9d:5e:64:
         0a:19:dd:b1:1c:67:89:8c:53:58:c1:1a:bd:9f:79:43:0b:fa:
         15:67:f3:87:79:e0:b7:24:c1:de:f8:94:6c:a6:7b:c1:61:13:
         52:97:ad:c1:66:95:ea:ea:6b:87:ba:d3:3d:a6:92:5a:d0:a2:
         c8:42:41:2b:e5:a0:33:e1:01:a4:03:99:a4:6c:77:24:3c:ad:
         ba:65:23:6a:64:15:b9:4f:a7:dc:92:c8:c8:d3:3a:04:5b:c8:
         e2:4b:35:36:e9:bf:84:d6:d9:e1:51:a3:ab:bc:25:d2:1c:8e:
         08:a0:98:b4:78:6b:b6:d5:7a:ec:fc:70:e0:e8:b4:93:34:43:
         ea:89:11:25:f6:51:5d:b9:42:84:9c:75:99:a2:f7:24:f3:3b:
         0d:ed:7a:76:c0:b4:ea:b3:3a:ca:19:4e:08:37:2e:82:e1:0e:
         e7:ea:81:39:1f:87:cb:8b:5e:d7:ab:9a:8b:ad:d3:50:ce:26:
         df:96:33:e3:32:28:7c:cd:77:74:e8:7f:88:b4:b3:7a:80:50:
         aa:b1:56:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz
QkVERTM3MzQwHhcNMjYxMDEzMDUxOTQ5WhcNMjYxMDIwMDUxOTQ5WjAYMRYwFAYD
VQQDEw02YWNkYmY3NS1jNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3EOxQQbHu9g+vHWIcZKPE8mch5Rs8y258c/Ompfxy1FMwq6zoBSYxuXqTWls
t+tSxfj3annikJhGsecmtAsuAW9sDPLpJSWfvwTyKWIUEiiqGacwmlIjfwu2OyUq
7EvVdApvmsfw9KlzkebYcTs7lKOV0jY9NcpCcGkrOW8A8E60exRShURtAUyBJi30
HlP/TBfTZOZRaEpd84AI94mnmU83gk0pkEZ0reNVvcAGIPKPnIFBenAPuUU8Di5j
tT/waxJIUeN+97mxdts0hT5lP9SzTGgPgomWa+/OXafn6B2/TRzZu1tFmb0z0XYO
OtPYRSYzY9utSAY9XJeyMqI0kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhN7kYV
rptITcNUj/EKE2kdx1byMB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2
REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs
R2tVTDU5cDlsWWM3N2VOelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAldE1Steixl0xm0H3lL3WEMObRyqyep6QRX2EuMVksXfHWhq1soEGGKu+UkLt
ylnFQJLNnV5kChndsRxniYxTWMEavZ95Qwv6FWfzh3ngtyTB3viUbKZ7wWETUpet
wWaV6uprh7rTPaaSWtCiyEJBK+WgM+EBpAOZpGx3JDytumUjamQVuU+n3JLIyNM6
BFvI4ks1Num/hNbZ4VGjq7wl0hyOCKCYtHhrttV67Pxw4Oi0kzRD6okRJfZRXblC
hJx1maL3JPM7De16dsC06rM6yhlOCDcuguEO5+qBOR+Hy4te16uai63TUM4m35Yz
4zIofM13dOh/iLSzeoBQqrFWDg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:33:44 2026 by rpki-client