Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          l+ppX86w0NjO4ck0xB+HvjwJLI8VSUbWHv4NZ/LQSUs=
Subject key identifier:   29:7F:45:7F:2D:EF:87:F8:FF:E0:C4:60:58:E3:B7:38:CD:A6:C3:5B
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          0192
Signing time:             Mon 21 Sep 2026 04:28:34 +0000
Manifest this update:     Mon 21 Sep 2026 04:28:33 +0000
Manifest next update:     Mon 28 Sep 2026 04:28:33 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: G8yc0cdRWWV/sEicevQlwTfY1dUJwhBhvOyX3lLSwDs=)
                          2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: QYDMiyLsJUluSn0j67IjTBM2ewHLlzSGUigM47qc2ug=)
                          3: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=)
                          4: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Sep 21 04:28:33 2026 GMT
            Not After : Sep 28 04:28:33 2026 GMT
        Subject: CN=6ab0b272-a0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:ce:f8:e2:1e:d4:19:78:dc:eb:e3:72:7f:
                    04:d8:18:d5:a2:a2:e8:bc:d0:63:a8:65:58:81:4e:
                    e3:52:ea:39:5f:a4:a8:8f:1f:62:e0:c4:50:4f:84:
                    ab:34:76:dd:eb:c8:3a:5d:f6:1b:23:f5:4b:dc:eb:
                    2d:64:cd:15:b5:84:59:f8:bd:18:0f:d6:38:a0:ff:
                    fd:8d:b6:da:32:8f:fb:69:f4:cd:55:93:9f:45:e6:
                    c0:ac:eb:51:43:12:52:2b:84:8c:a7:ec:9c:5c:4c:
                    e1:23:4b:6d:84:d3:6f:52:9a:f7:17:57:12:e1:00:
                    cc:c4:d0:d6:e4:ed:04:5b:e7:1b:4d:36:05:08:7b:
                    24:c0:2c:06:17:e3:ca:21:41:26:fe:f1:fa:25:90:
                    30:13:12:0d:ac:5b:27:18:60:09:8e:bf:1c:89:e4:
                    ef:32:a7:27:f2:df:3e:80:89:8c:e6:17:2a:3b:cc:
                    2d:85:5d:6b:e1:2e:4a:85:84:2a:96:1a:65:99:cc:
                    b0:eb:6e:29:86:ca:07:89:24:e6:aa:be:a7:b8:81:
                    26:0e:dd:9f:a2:21:1c:f9:67:4d:2a:f3:d3:7c:53:
                    bc:a3:29:ea:65:0b:d9:f1:0f:f6:1a:49:9d:30:e4:
                    e2:98:e2:61:2f:73:bf:e7:8e:6a:01:ec:40:1d:5b:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:45:7F:2D:EF:87:F8:FF:E0:C4:60:58:E3:B7:38:CD:A6:C3:5B
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:64:e6:ac:6f:9d:e0:59:03:df:8b:75:0e:b4:63:99:c8:0f:
         df:ed:fb:e1:4e:34:e5:36:60:d2:5e:f4:91:2e:69:50:96:4e:
         39:d9:75:39:49:d1:5e:1d:27:64:db:df:3c:c1:b9:f7:f1:4e:
         53:6e:42:29:31:c3:ce:50:a0:03:2a:b9:61:2b:ac:f0:15:16:
         f0:e2:02:bc:12:f8:1f:65:a8:91:63:e1:89:68:8c:54:37:5e:
         48:97:2e:3f:bf:f0:b6:24:04:8f:18:3c:3c:f0:fe:46:e2:40:
         8e:f5:70:3d:88:12:28:c5:9a:03:0e:16:94:37:74:c1:0d:77:
         32:54:0f:68:ae:94:4f:71:55:d7:f4:59:a7:a9:5c:87:7b:78:
         f7:e6:88:c4:f7:22:bb:be:82:9a:44:48:82:fd:c2:60:19:d2:
         5b:cd:d3:ae:59:05:45:af:9b:05:c9:8f:3a:70:e8:24:81:2f:
         f0:08:c1:38:f5:3a:31:8c:fd:8d:76:3a:69:ee:3b:99:5c:cd:
         6c:07:71:b4:fa:a4:40:d9:21:55:f4:41:25:87:43:42:40:9c:
         96:39:a9:75:be:18:fc:ef:1b:ab:a6:e5:70:b1:8a:0b:3e:0b:
         dd:2e:03:88:02:87:95:c3:2e:11:5b:04:c4:68:ba:74:06:5c:
         9e:9a:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:42:36 2026 by rpki-client