Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          EfocmsFcSLiey7Jy2FrzBVgd7kg2xQFwqNaLfK5MSNY=
Subject key identifier:   9E:55:E0:2A:26:16:8A:CA:8E:3D:1F:B7:E1:E1:05:9B:D2:A0:51:AB
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          0239
Signing time:             Mon 21 Sep 2026 02:34:48 +0000
Manifest this update:     Mon 21 Sep 2026 02:34:48 +0000
Manifest next update:     Mon 28 Sep 2026 02:34:48 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: uPcX4uzRuvXNF09+X1QPvVi2oUfmZpxG5+DUZ5xliCU=)
                          2: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: vDdvCJ7Ilkj6j3EyUUG3A6VDOaQ9973VRteQFzrr2bg=)
                          3: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: INjKAtHT4YuZWArnvT5bdAmB2cAd6K4hrQ+j15TPHmw=)
                          4: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: wkL9CF0tWviJGwpOeaIeOvLdz67meR8gKKt1qekLsxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Sep 21 02:34:48 2026 GMT
            Not After : Sep 28 02:34:48 2026 GMT
        Subject: CN=6ab097c8-ff8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:6e:ae:63:33:31:ae:25:16:2b:ae:bd:27:
                    fe:88:17:bf:df:98:2c:4d:a7:1a:d8:cf:c6:45:50:
                    6e:b4:87:d8:87:22:d4:33:db:bd:6e:c4:6b:d5:d7:
                    60:5d:77:a6:10:1f:33:96:f0:70:bd:31:4a:67:96:
                    e5:36:b8:4b:e8:bb:22:52:5e:98:1f:60:42:51:b1:
                    0f:47:fe:50:30:44:72:b1:bc:5b:d4:b6:5a:05:a1:
                    f8:c1:8c:8e:4a:fc:c5:f0:e7:9c:5a:b9:9e:20:b1:
                    10:80:e2:a1:50:b0:10:67:23:c6:54:f1:40:eb:29:
                    35:56:4d:72:c2:d3:fb:40:e8:d9:24:13:72:b8:3d:
                    9b:07:4e:87:d8:31:ae:69:53:6e:f4:d2:e1:15:cd:
                    66:17:39:63:da:a5:6d:4f:f6:a0:d1:35:9b:32:d4:
                    ed:b1:b5:54:fb:b2:9d:22:a8:9c:68:21:aa:12:aa:
                    a1:93:53:36:06:c0:a8:89:f3:ef:f6:0a:d5:94:a2:
                    27:cc:b7:0b:d0:25:e9:51:3d:e6:7f:e8:ba:48:d6:
                    79:b2:0b:18:68:ba:69:6b:a5:6f:35:54:c1:e6:c2:
                    63:83:8f:9a:7a:2e:51:eb:d6:41:bd:ef:84:b8:d3:
                    d2:27:c6:75:68:14:dd:96:cc:af:1a:3d:53:38:51:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:55:E0:2A:26:16:8A:CA:8E:3D:1F:B7:E1:E1:05:9B:D2:A0:51:AB
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:49:2a:44:27:a2:b6:99:e9:81:7e:41:e7:f2:50:32:03:
         32:3c:7c:c3:fb:8d:fa:44:f9:a1:67:8c:34:8a:87:c9:2d:9c:
         51:67:1f:92:2e:13:66:e6:35:ab:70:c4:68:34:4d:59:b8:2f:
         1e:dc:09:f0:e4:13:4c:71:24:1c:79:74:ac:f0:8e:27:33:4c:
         80:8e:cf:fd:91:e3:44:7e:8f:17:22:dd:8d:ac:df:a0:33:c1:
         c0:8a:5b:2a:97:ac:71:32:cf:ba:a6:a8:40:e9:d8:d5:9b:5f:
         ff:24:20:d7:f6:96:dd:06:66:50:a2:46:e4:58:ca:27:b8:3c:
         12:09:d0:50:6c:5c:9f:31:c3:56:c2:b8:95:71:83:1a:e0:15:
         bd:c4:87:d3:81:3c:d2:43:0a:a0:a1:35:86:7f:da:fd:2a:7a:
         2e:3a:ff:96:43:b6:bd:91:cb:d6:21:95:2e:0f:30:b9:4b:7a:
         ea:2e:cc:b2:3e:ec:92:d6:09:6d:05:ec:ae:c1:70:c7:6c:62:
         d4:fd:9b:d1:98:db:72:06:4f:be:e1:f7:ed:6f:fc:0e:8b:83:
         a4:c1:67:2f:a3:8f:0c:15:93:20:64:da:33:1b:7a:12:cd:06:
         6c:1c:00:79:84:a7:3c:27:30:12:e4:17:be:ae:e0:7e:c6:f6:
         66:3f:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:06:16 2026 by rpki-client