Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File:                     Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier:          EF73LpNN1L9DZKorYm3S2GiJXKgnziAtlqfCSdFBZSU=
Subject key identifier:   48:04:5D:2C:14:BF:9C:54:E0:47:17:03:46:3D:B5:BF:31:27:70:90
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer:       /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number:          A1
Signing time:             Mon 21 Sep 2026 07:22:11 +0000
Manifest this update:     Mon 21 Sep 2026 07:22:10 +0000
Manifest next update:     Mon 28 Sep 2026 07:22:10 +0000
Files and hashes:         1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: v/1ayM49KVt95Ei4aEmzCGMxKu00ziXi5FKlH5K3tus=)
                          2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
        Validity
            Not Before: Sep 21 07:22:10 2026 GMT
            Not After : Sep 28 07:22:10 2026 GMT
        Subject: CN=6ab0db22-16ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:95:b6:e1:d2:65:34:83:9c:c2:41:20:b9:
                    eb:f2:8b:f4:d5:15:1a:1b:5f:4f:2d:2d:d6:7d:da:
                    44:4e:79:2b:16:21:89:67:a4:c1:78:1a:63:c2:81:
                    cf:82:29:30:e4:ed:0c:da:72:3f:ff:35:1e:d0:be:
                    ec:45:37:13:b2:ef:6c:ce:bd:9d:72:0b:0d:15:f6:
                    a1:d0:b5:68:3f:65:85:cf:14:de:24:57:d3:f0:e8:
                    bd:12:6d:73:69:d5:9f:c2:66:f7:f9:1d:07:e8:b2:
                    03:ce:26:d3:f5:a3:4b:2b:9f:67:7a:78:f1:39:8e:
                    99:6b:ba:c8:55:f3:3c:a2:2e:1b:dd:90:02:48:0c:
                    f3:7a:1b:07:85:9f:1e:56:ba:bf:8f:7d:9d:ce:18:
                    3e:9c:6f:95:08:e8:27:bd:11:5c:27:e7:97:cb:28:
                    67:e9:e1:96:f0:3d:c4:a0:2f:43:da:49:18:37:b7:
                    07:ca:84:ee:8e:a1:a1:b4:97:95:dd:50:47:15:4f:
                    39:6b:15:3e:1b:72:b6:da:e5:1d:ea:85:72:6b:4e:
                    f7:04:68:4d:1e:10:16:86:20:6a:dd:4a:f3:87:3c:
                    72:71:50:e3:47:f2:c2:fb:2a:b2:d7:51:e0:25:de:
                    47:38:7b:94:86:f7:fd:bc:c0:d1:44:0b:fa:fa:7e:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:04:5D:2C:14:BF:9C:54:E0:47:17:03:46:3D:B5:BF:31:27:70:90
            X509v3 Authority Key Identifier:
                keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:05:fb:2e:99:76:8a:e6:7f:c2:83:3a:d3:50:de:ed:63:
         79:0c:7a:9d:44:df:39:04:49:6e:a4:67:9c:6c:63:8a:9a:d5:
         19:d7:4e:05:d1:48:43:33:0d:69:58:8e:fa:41:74:c6:98:ba:
         93:c2:ce:3a:8d:bd:3b:1a:54:60:af:49:65:fb:ab:99:ff:21:
         af:23:4d:c9:c6:1d:34:fe:d7:3e:bd:8f:ef:44:b1:ab:84:16:
         fb:73:e4:65:03:01:43:c2:de:4c:2b:51:54:c3:12:d3:06:0a:
         bf:29:19:af:cf:16:1c:fd:c2:44:a1:4a:6e:49:09:7a:98:51:
         7a:b1:dc:82:98:f7:54:26:ab:91:d2:cb:1d:51:79:57:9c:14:
         de:f4:63:32:ab:09:2d:ae:3b:3f:6b:e5:fa:28:78:40:04:d0:
         f9:01:dd:de:f6:02:48:a1:b6:a0:f7:83:4a:6a:e1:bb:6c:96:
         a5:ae:84:a1:9b:aa:14:5e:af:6a:15:be:9a:d8:fe:d7:d0:6f:
         50:cf:79:0d:eb:80:dc:04:a9:41:5d:d5:43:62:12:45:f4:64:
         52:f4:fd:09:8f:f9:52:9e:97:3e:10:6d:3f:b0:38:74:81:59:
         6b:73:46:38:fd:10:3d:a5:1e:d4:95:04:c0:fb:ab:da:d4:d7:
         63:b7:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:58:03 2026 by rpki-client