Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File:                     UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier:          YduP6aT7ZCwof0LC6PvgfvJsARgmT5bHGZYwAp/Xz7I=
Subject key identifier:   18:28:FC:E4:BE:8B:CB:89:7E:8B:D7:C1:DC:D3:4C:1F:D4:19:C1:81
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number:          C7
Signing time:             Thu 05 Nov 2026 08:05:57 +0000
Manifest this update:     Thu 05 Nov 2026 08:05:56 +0000
Manifest next update:     Thu 12 Nov 2026 08:05:56 +0000
Files and hashes:         1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: AzOYdsDerS3gjVw+htyvNx3Fve6OK/5gV44bc9QIOHo=)
                          2: 1fJ5kLcMho8nRu5wQFMEcL2Plsk.asa (hash: Rw+9dGM3XJ3dM++zalky1puGyEHA4e1+Ah4Ib94jgxU=)
                          3: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
                          4: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 08:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
        Validity
            Not Before: Nov  5 08:05:56 2026 GMT
            Not After : Nov 12 08:05:56 2026 GMT
        Subject: CN=6aec38e4-b96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:69:3f:f6:99:da:cd:50:62:9a:1f:28:91:
                    c0:b6:b6:df:64:6e:8d:5f:83:37:85:e0:d0:f9:f4:
                    1e:ab:51:c5:ed:21:be:a5:90:fb:3f:a2:00:d0:d4:
                    c5:15:26:23:84:6d:f7:1d:ce:3e:26:1a:20:99:fb:
                    8b:13:fd:fd:5c:aa:8f:e7:d0:af:b5:12:05:d3:c9:
                    75:ba:dc:78:00:18:18:b9:00:a4:8a:e3:23:07:73:
                    3e:9e:63:a1:53:82:a5:97:d1:5c:b0:55:cb:a3:25:
                    27:11:3c:b9:28:b8:88:80:5e:74:ee:63:66:df:b5:
                    9a:38:52:ce:35:90:14:38:5d:29:84:8c:ca:94:db:
                    65:b9:e1:61:dc:d9:d0:4d:0c:01:7f:fd:27:ae:e5:
                    1c:43:61:9b:7f:46:31:f1:2b:7d:bf:5b:d9:96:c7:
                    fb:d7:b7:37:b6:30:76:0f:26:22:14:bc:64:af:2f:
                    6e:e6:24:ac:a8:31:01:d8:99:6a:bb:71:b1:4e:17:
                    21:5f:ed:86:e0:ec:68:56:eb:57:7a:db:bc:16:64:
                    a9:a3:29:2f:61:1f:e6:eb:c1:6a:0f:e7:2f:ac:f2:
                    09:26:60:d8:d3:a7:80:cb:2a:93:e3:0b:63:17:fb:
                    90:8c:62:83:8a:d9:bf:13:cc:d8:1f:c2:79:ea:10:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:FC:E4:BE:8B:CB:89:7E:8B:D7:C1:DC:D3:4C:1F:D4:19:C1:81
            X509v3 Authority Key Identifier:
                keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:fb:cd:4e:42:99:99:3c:46:d9:9e:72:8c:f3:3f:57:bb:
         e1:c1:bd:08:09:bd:e2:9c:7e:c2:1f:5f:aa:ac:79:f6:d8:5f:
         f2:d4:2f:d3:ed:b1:96:80:85:50:77:33:2b:5b:97:b6:53:9f:
         38:f3:c0:fa:4f:27:ec:5b:da:55:02:a6:bb:d3:a8:62:f0:e7:
         e5:40:66:11:46:34:6d:2e:8b:c6:9a:2d:74:d1:71:8b:22:12:
         13:d5:73:4e:1d:f8:d4:ce:40:fc:04:39:cf:6a:30:ff:e3:3d:
         a9:b0:7e:1c:14:aa:71:4f:17:4e:2d:84:46:55:ef:64:ef:65:
         41:80:cd:60:62:d0:bf:2a:77:ec:34:d0:81:44:36:b1:17:b4:
         a8:26:18:88:e9:ca:60:1a:b9:3b:60:8d:5e:f6:e7:19:54:5a:
         33:ba:5f:5d:25:ce:f7:de:e8:83:20:10:f8:f0:3a:0c:bc:fc:
         be:cd:d9:59:ea:06:d6:4a:8b:71:29:c7:0f:6c:b9:46:54:f3:
         d8:00:4c:33:9b:a8:5e:7b:36:ac:d0:56:84:73:60:b8:20:e8:
         79:c8:57:c1:ff:36:51:50:52:8d:d5:5c:b0:63:d7:9c:58:82:
         ec:33:bd:d4:f2:8a:92:f9:e8:10:d3:6c:ff:a3:ed:67:0c:8c:
         39:02:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:11:13 2026 by rpki-client