Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File:                     Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier:          XTli/m/r+mzHVfOPCcbTEAlhaZ9Scs1HcertMgtYluU=
Subject key identifier:   BE:91:00:D3:3E:09:7C:FC:E1:1A:B4:27:98:21:94:58:90:E0:74:EB
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer:       /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number:          03BE
Signing time:             Wed 23 Sep 2026 00:11:20 +0000
Manifest this update:     Wed 23 Sep 2026 00:11:20 +0000
Manifest next update:     Wed 30 Sep 2026 00:11:20 +0000
Files and hashes:         1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: iFG7zp0o0JWbqWNGZKXBFiAV7osjHnd+UuLwE7P2ihQ=)
                          2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
                          rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
        Validity
            Not Before: Sep 23 00:11:20 2026 GMT
            Not After : Sep 30 00:11:20 2026 GMT
        Subject: CN=6ab31928-8a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:a2:c9:92:27:87:04:23:71:34:5e:e8:ff:
                    2e:07:9f:29:76:3e:3c:8d:27:a8:fc:8d:89:b7:a1:
                    62:5f:18:e8:88:8f:0c:29:59:e4:7f:8f:e6:11:17:
                    07:58:f6:bb:a9:5e:c9:04:3f:96:3b:77:e8:f7:11:
                    31:3d:ef:37:cd:96:49:63:b3:1c:20:34:63:eb:84:
                    97:a2:a5:ca:5d:bb:b6:26:24:9a:6e:da:79:7d:b8:
                    31:2c:16:78:1f:05:22:18:99:19:5a:1e:e4:91:6f:
                    22:21:b0:c6:0f:8b:29:84:b8:b0:20:b1:79:e3:e2:
                    4b:e4:99:e8:d7:a3:e8:17:47:5b:e1:12:8f:b3:28:
                    8e:7d:65:2a:39:7a:8b:a5:55:e8:58:dc:cd:71:a3:
                    3c:d6:6e:2c:d9:4e:d4:f8:5f:7c:5c:33:61:28:0d:
                    cd:b2:3b:07:89:26:ca:ec:7a:d1:34:0f:e7:cd:22:
                    91:0b:ad:16:35:65:07:80:31:d5:ee:c6:c5:1f:3c:
                    07:bd:e4:be:72:bd:51:dc:dd:00:b8:1f:db:39:57:
                    90:f6:15:52:11:fc:03:8d:9e:15:6a:0f:a5:cb:d8:
                    c5:6c:7a:d0:f3:9f:8c:0d:22:26:28:0f:57:46:7f:
                    d9:3d:f9:62:bf:d9:57:32:89:79:f3:e0:ea:6b:e6:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:00:D3:3E:09:7C:FC:E1:1A:B4:27:98:21:94:58:90:E0:74:EB
            X509v3 Authority Key Identifier:
                keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:42:9c:c1:44:ad:33:64:da:f1:81:e8:06:39:5f:bb:ef:
         aa:6c:c1:e5:f2:17:dd:b8:46:90:f7:e4:e1:90:dc:84:65:f4:
         18:1b:ad:46:e0:6e:d6:90:11:61:b1:9a:13:e4:81:d5:01:ba:
         20:b2:8c:3c:54:b1:32:7f:f2:8e:d7:e4:fa:65:17:f1:09:d4:
         81:22:a6:b0:b1:e1:e1:11:67:ca:51:ad:ad:62:ff:08:cb:82:
         73:27:0d:6f:4f:68:a9:cd:f3:4d:89:25:43:30:eb:07:c2:db:
         fd:aa:08:77:36:d4:64:bd:09:1b:b9:84:3e:4d:35:06:91:f7:
         17:63:ec:15:78:c5:a1:b4:73:a9:23:b3:a4:b4:8f:28:bd:48:
         6c:3b:b1:88:f9:30:4b:5a:be:7e:82:11:b5:0a:ea:48:8c:80:
         67:6e:63:33:98:6a:50:91:1d:8b:03:9d:b7:f1:75:99:a1:e2:
         9d:99:f9:fe:e8:3a:04:44:8e:b8:b4:6b:4c:21:be:fc:48:1d:
         9f:b9:41:78:e1:80:4c:39:66:d2:5c:0a:51:e1:ab:d2:1d:1e:
         00:86:ab:04:15:3a:4f:07:23:9d:a4:29:5f:b7:f1:cd:15:6a:
         71:8b:6f:a7:45:c0:b3:49:2b:db:a1:ea:1a:2e:93:79:4a:ea:
         0d:5a:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:52:13 2026 by rpki-client