Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          i3ZwfL5nF0+0ZTpKHa4XTjjedyt+yZu/S2KEV7ZzveI=
Subject key identifier:   26:31:23:A8:EB:9A:69:8C:A0:C4:85:07:D1:9B:C0:80:BE:75:23:5E
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          072F
Signing time:             Sun 20 Sep 2026 22:00:54 +0000
Manifest this update:     Sun 20 Sep 2026 22:00:54 +0000
Manifest next update:     Sun 27 Sep 2026 22:00:54 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: fowQq16XpgLnh4oPC7tIlsEU+5opYMMNiUCPQ+6TzTo=)
                          2: F28152A69B8611F1B4386D6F4511F970.roa (hash: ubTAyK2cMn31ieelGGRwezGPlj1FMuE8SjyOIKfT1/c=)
                          3: F32A5AEA9B8611F1B4386D6F4511F970.roa (hash: hC8DUUi3h7ApLUuU4cOKlMcdfzPUe8RieSnJ4Y0WyCc=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=)
                          5: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=)
                          6: F4BAE41A9B8611F1B4386D6F4511F970.roa (hash: BWEvHpZlHk2lCPCqxiJZlaQoZxUmZjbC4KZmOcnu+w8=)
                          7: F5D2F46E9B8611F1B4386D6F4511F970.roa (hash: 0au6Si15nGK7eMBlSyZBhtsSwPZhCvIKY7Aeoqgl6Xc=)
                          8: F30D41529ABF11F1B22CABD14611F970.roa (hash: 85pNotyjZ8mxuBhPKNSC6QbezOpRGw5rRNH9Oy4noF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Sep 20 22:00:54 2026 GMT
            Not After : Sep 27 22:00:54 2026 GMT
        Subject: CN=6ab05796-0571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:84:de:5a:f3:96:1b:a2:0a:86:fe:e4:e7:
                    32:d6:31:ad:04:e4:88:03:e0:d7:3d:3d:3c:f4:67:
                    b9:73:d8:9a:ba:6e:95:c1:42:a0:a2:d8:ec:ba:10:
                    bc:77:43:d5:8a:b3:72:93:f9:e9:1a:23:f0:bf:2d:
                    40:6d:bf:34:d2:79:4c:54:80:44:64:2f:dc:26:c0:
                    c4:57:46:0c:59:e2:80:76:78:62:56:d3:13:f4:8d:
                    2a:ae:34:ed:72:43:d0:c5:5d:7d:8e:45:ab:6e:e1:
                    ba:41:09:b1:1c:6c:5e:90:99:91:d8:c0:f5:e0:d3:
                    1d:98:f4:cc:11:52:90:72:a4:0a:e0:d6:cf:85:48:
                    23:f2:1a:65:e8:d7:e3:b4:8a:43:a5:8d:c5:d8:28:
                    af:6a:ce:2b:8d:da:d8:e2:cd:78:ea:e4:6e:f4:bd:
                    48:72:97:bc:5a:2b:00:d3:22:a5:c1:66:93:00:8d:
                    1a:36:f7:21:77:68:0a:20:43:ef:14:e6:d7:e3:fb:
                    0f:21:3f:0c:6a:59:cf:85:98:56:c7:38:79:11:aa:
                    e0:01:88:7a:28:be:36:7e:47:72:c5:0b:b3:e3:49:
                    61:55:76:60:66:54:77:cd:ea:d1:98:20:19:42:77:
                    a9:3b:aa:e0:0c:69:ae:e7:eb:58:d5:58:2e:b3:3a:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:31:23:A8:EB:9A:69:8C:A0:C4:85:07:D1:9B:C0:80:BE:75:23:5E
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:c3:49:39:fc:0d:0e:bb:ac:16:4b:c2:c0:5c:1a:59:c7:
         b8:59:e3:82:70:23:0e:0a:19:57:7a:33:d1:94:4a:53:89:a9:
         89:1e:84:6e:72:16:41:41:51:e8:ba:90:36:67:78:72:24:60:
         da:c2:94:e8:d3:f5:0a:9e:7a:38:70:3a:bf:b5:df:77:ea:e7:
         df:3d:a9:b0:88:5d:6b:be:6f:02:67:8c:b9:40:38:f3:ed:64:
         5b:8f:60:e3:b2:0d:53:40:cc:d2:89:e5:50:d0:0c:fc:d1:fd:
         16:61:41:c0:30:08:c8:05:16:98:1d:7e:04:47:9f:36:09:32:
         e0:c6:93:c2:35:80:a8:87:ec:cb:e4:63:2a:ff:43:5b:91:e4:
         c9:6d:86:9c:db:6c:bf:b5:36:6b:17:bb:76:79:2d:f3:61:86:
         89:7d:eb:83:12:a2:fa:58:f3:5c:b7:c0:5a:d3:ac:b5:60:c5:
         a4:2a:d4:fd:73:78:07:5b:c0:4c:c1:cc:c8:f9:df:28:00:3c:
         00:a6:20:f7:c4:07:51:c8:a3:e7:4a:6d:fe:f3:5d:0f:d9:7c:
         f1:cb:56:99:bf:0a:68:2e:c1:b2:a0:f1:c2:86:77:96:96:b9:
         08:0a:a4:e0:d7:38:b0:52:17:d4:b5:37:1f:f2:68:55:28:a0:
         a5:9c:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:19:20 2026 by rpki-client