Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
File:                     uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json)
Hash identifier:          +Nr84IzJMdmF4MN+lc7JX0KsFMwFk/G1JfZ2wPwW5bc=
Subject key identifier:   7F:48:CA:68:1D:A8:1B:8F:C2:07:67:35:E6:E1:10:D0:79:93:C5:10
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Certificate issuer:       /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial:       102C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
Manifest number:          101E
Signing time:             Tue 22 Sep 2026 17:21:46 +0000
Manifest this update:     Tue 22 Sep 2026 17:21:46 +0000
Manifest next update:     Tue 29 Sep 2026 17:21:46 +0000
Files and hashes:         1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: GmDfwv6QofuPJ1aQcdumEBQ1+sxj9ISTtenieyjq08Q=)
                          2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: OjM1bFnCHb2Nbpu1zaIXajiz/Q+c8E0n3J971ErzXps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
                          rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4140 (0x102c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
        Validity
            Not Before: Sep 22 17:21:46 2026 GMT
            Not After : Sep 29 17:21:46 2026 GMT
        Subject: CN=6ab2b92a-f0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:ff:b9:0a:9b:54:d0:b7:4d:58:89:f4:2d:
                    5e:5c:84:5e:fc:81:93:1a:59:27:73:a1:13:63:a2:
                    92:4c:c5:ad:b7:4e:da:28:57:a5:67:78:fe:a7:97:
                    62:05:e2:09:b2:2b:52:29:41:02:30:c9:5b:6a:ed:
                    c6:d1:58:37:2e:4e:9c:c8:03:f9:48:39:e8:e9:f7:
                    3f:e6:f5:b1:38:e6:97:5e:0f:0e:86:73:c9:10:38:
                    73:36:23:83:9d:10:10:80:58:34:19:fb:ed:6b:9b:
                    88:05:76:55:9f:fb:2e:b5:25:69:5e:42:91:ce:74:
                    42:81:f4:3a:d5:72:56:82:b1:2f:19:76:77:47:eb:
                    aa:ec:47:6c:be:d5:f6:32:44:a2:13:ee:f9:af:6f:
                    6f:21:06:6e:39:2c:e3:3b:30:6f:05:7d:4d:a1:0a:
                    44:aa:63:e7:79:02:d2:79:14:0f:06:ff:84:2e:d8:
                    fa:4f:37:18:90:41:35:1f:4c:97:bb:89:c9:7d:86:
                    ac:dc:c6:d5:0d:d5:75:59:3f:8e:93:3e:e2:17:81:
                    f7:75:8d:79:c7:3a:ea:de:b5:44:b4:29:6e:7c:c9:
                    d4:f1:b3:7b:da:70:87:87:1e:ea:fe:f4:83:9b:25:
                    18:b7:22:c3:af:6d:92:ac:89:a9:90:9d:7a:1d:d2:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:CA:68:1D:A8:1B:8F:C2:07:67:35:E6:E1:10:D0:79:93:C5:10
            X509v3 Authority Key Identifier:
                keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:5b:2e:cc:73:b5:46:33:06:c2:f5:80:70:ef:ba:42:f1:
         48:16:8c:3c:6f:ae:da:33:e2:ae:c9:23:43:b9:f2:15:ef:30:
         e9:47:1a:15:60:33:f8:7c:5b:d8:5c:22:42:32:7c:fa:1a:3d:
         ab:93:7c:f3:7d:07:a5:8a:1e:69:65:3f:03:89:1f:df:89:f5:
         a8:ea:12:f8:95:41:f6:1b:32:eb:b1:e9:46:21:46:78:97:6b:
         4f:8e:d4:a8:5c:e6:24:de:36:3a:8e:71:a1:fe:fe:e1:4d:b8:
         51:55:e9:53:a6:0f:b3:d8:ef:55:41:d0:10:33:2f:f0:1a:54:
         2a:3d:c0:0b:a7:8c:fd:d2:65:91:0b:ac:37:22:81:67:d7:6c:
         0f:3e:7e:0f:ad:c5:82:e4:bd:80:85:e0:14:4e:ba:4c:f0:c6:
         47:39:43:36:a1:5e:a1:b7:e6:ee:ab:4c:fc:c8:a0:0d:64:c9:
         be:1a:ee:32:d5:02:21:11:11:06:92:48:44:bb:0f:6e:6e:5f:
         8e:31:18:95:d2:27:56:03:d8:0f:44:f1:c8:f5:cf:25:53:60:
         cc:d6:1b:98:2e:9d:4d:98:d9:24:e7:a2:9c:b1:4f:b7:46:8f:
         fa:22:59:25:8b:d3:75:f8:31:ee:4e:5c:35:54:70:47:48:28:
         23:6c:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:16 2026 by rpki-client