Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          1yT/FdfdStGh3mDWK2OO/biw09IpwPa00eyCrPxoEpQ=
Subject key identifier:   44:00:FF:0A:B6:FA:3D:67:22:70:57:14:75:88:81:6E:36:82:94:C0
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0C22
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0C17
Signing time:             Sun 20 Sep 2026 18:45:58 +0000
Manifest this update:     Sun 20 Sep 2026 18:45:57 +0000
Manifest next update:     Sun 27 Sep 2026 18:45:57 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: 1pXwCZdrTHHENXrT3V7MTORRTAwnhgtTxDr6dwCmN18=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: cA+0IoAyCHHDkjIL9MPmk5AdVUHzu0n7NznpD3I+o6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: Sep 20 18:45:57 2026 GMT
            Not After : Sep 27 18:45:57 2026 GMT
        Subject: CN=6ab029e6-9bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:ce:7d:d0:d3:93:4c:77:81:28:d7:bf:62:
                    27:8a:6c:15:28:8b:aa:2f:de:51:76:39:98:c6:72:
                    02:0c:ca:78:b8:66:7b:89:84:58:23:c6:d8:6c:7a:
                    7d:f0:df:b8:e6:fe:aa:d1:8f:a2:17:fc:ce:11:fd:
                    df:3a:a0:04:16:5b:64:9d:b9:25:3d:6d:44:37:a8:
                    42:b0:fe:69:bb:74:a7:47:f4:0b:16:73:2e:93:30:
                    af:16:52:9a:66:59:e4:40:75:2d:c4:7b:e7:6c:40:
                    f8:16:42:83:c3:a7:b2:c3:90:6b:f0:de:98:6a:e4:
                    05:a6:a2:79:3f:f7:87:5c:5a:18:3a:05:1a:5f:98:
                    4b:53:ab:49:ff:3f:44:d9:f4:b3:79:43:9a:93:68:
                    5b:11:5c:ed:56:21:b8:ce:9e:83:e9:5c:88:15:49:
                    b9:91:97:4d:03:3a:c3:24:bb:f8:ec:23:82:a1:25:
                    55:09:fa:e2:80:a7:8b:05:75:3d:10:3c:e3:b6:86:
                    96:a6:0f:d4:c8:5b:4a:04:ce:24:bc:06:30:27:3d:
                    5b:7b:f9:0b:b8:a5:a4:65:b5:85:f8:91:a2:a7:a8:
                    9e:49:ca:48:bd:7f:f4:60:16:54:c4:e2:a4:35:35:
                    b6:bd:68:64:ae:50:f7:bd:05:8f:f8:cc:c8:c7:2c:
                    3a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:FF:0A:B6:FA:3D:67:22:70:57:14:75:88:81:6E:36:82:94:C0
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:3c:1c:e4:de:3f:36:aa:ce:82:a3:eb:a3:31:08:f3:d8:
         a7:14:24:20:e2:9c:a4:fb:21:74:37:ca:e9:80:f9:ba:3c:eb:
         a9:79:8d:9f:49:4a:57:17:94:04:b2:3e:3a:36:17:55:27:78:
         ce:a4:12:f9:35:9a:ca:23:84:6b:90:f8:47:0f:68:ab:a2:dc:
         69:a5:af:d1:22:f2:b8:86:08:0b:08:87:3a:23:91:f5:c6:8e:
         16:7c:e7:dd:1a:15:82:ee:76:1d:16:3a:1a:d8:15:f9:f1:81:
         1c:f6:ad:5c:2a:73:34:e8:84:f4:9f:87:63:45:63:2a:16:55:
         93:c3:25:e0:5c:ae:f2:c1:65:68:fd:cb:b6:8b:71:78:2b:cf:
         f8:6c:13:33:33:4f:b8:97:27:af:7b:54:11:10:0c:b2:83:2e:
         b4:66:83:31:97:0f:40:89:d3:3b:cf:56:48:f3:6b:d7:d4:7c:
         ca:07:68:c0:d0:2d:60:a4:22:31:af:d8:cb:15:12:45:fb:83:
         a5:91:5e:4e:0c:e4:90:f2:ec:f5:f2:fa:ec:95:30:b9:3d:b1:
         fe:97:1c:ec:0e:8a:5b:59:3e:2f:e9:69:9c:2d:e3:5e:35:e6:
         7b:f6:46:26:b3:16:e9:8e:f5:66:9e:71:bf:27:9e:10:be:43:
         b7:60:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:13:11 2026 by rpki-client