Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
File:                     UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json)
Hash identifier:          oRW7b4z2qDCNXcR5XYH7acjASjTapPumIvozOMHUvWY=
Subject key identifier:   59:79:6B:85:40:E8:E7:92:37:EF:4C:20:D7:6E:50:A8:58:EF:6C:D4
Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
Certificate issuer:       /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
Manifest number:          C9
Signing time:             Fri 25 Sep 2026 06:53:29 +0000
Manifest this update:     Fri 25 Sep 2026 06:53:28 +0000
Manifest next update:     Fri 02 Oct 2026 06:53:28 +0000
Files and hashes:         1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: 7D3DfOIimh45UuThHUN3xHxdt6MHBKpz/gWt7z++H3o=)
                          2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: Znxli92ke42bUcuO4y2MWt6186ap7JgRI1qPxtQiAUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
                          rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
        Validity
            Not Before: Sep 25 06:53:28 2026 GMT
            Not After : Oct  2 06:53:28 2026 GMT
        Subject: CN=6ab61a69-2fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:9a:48:8d:60:4e:9e:41:64:b8:bf:1b:6a:
                    7d:ad:90:4d:d8:1e:af:04:74:64:56:a7:ae:ff:33:
                    55:49:0d:5a:8c:70:de:69:48:ec:e9:33:10:21:f3:
                    1f:b3:2b:25:89:5a:41:20:fc:dc:88:ee:7a:82:fa:
                    e3:14:bc:8d:0b:95:8c:3a:cc:32:1e:21:6a:f7:8e:
                    0d:92:63:0a:b8:8f:ce:a6:52:41:90:e4:f6:54:8b:
                    97:cb:08:c4:08:5f:84:30:d4:30:2a:da:c2:25:7d:
                    7c:0b:75:9a:56:8d:73:23:45:46:97:75:25:d3:d4:
                    10:f2:25:5a:53:99:a7:99:37:cc:e0:95:74:ed:bf:
                    fd:55:ff:0a:94:75:e2:63:be:b1:fd:68:58:ff:a9:
                    4e:8e:23:c9:e7:df:41:25:6d:37:f7:59:c2:5a:ee:
                    9a:94:e4:b6:42:cf:87:8f:cf:db:49:e1:e4:35:4b:
                    58:1d:ef:00:90:b9:a0:ec:a8:0b:c2:e1:66:2c:55:
                    22:c3:83:51:77:c0:37:53:89:80:ab:c4:1e:13:6a:
                    c2:1f:05:48:75:5c:3b:c5:34:c6:64:4d:89:b5:00:
                    cf:b5:01:05:3c:d5:a5:b5:d5:6b:bd:f4:ee:a9:b0:
                    08:40:82:8f:78:77:dd:60:f8:ab:0b:b8:00:f3:1f:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:6B:85:40:E8:E7:92:37:EF:4C:20:D7:6E:50:A8:58:EF:6C:D4
            X509v3 Authority Key Identifier:
                keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:12:60:2a:c7:9b:5c:91:be:fb:3c:e4:a8:91:fd:3a:e7:
         c6:8a:f0:48:b4:9d:c7:95:97:3f:40:20:96:c3:7d:c3:d5:00:
         54:fc:d4:3b:93:0d:2d:57:29:35:1a:2f:2c:91:bb:53:63:79:
         06:4f:69:2f:9f:60:f1:7a:90:a2:35:10:2f:0c:83:5f:3e:37:
         27:a0:0c:0e:03:33:16:9c:84:54:f6:65:75:c5:b9:75:2d:8c:
         43:66:c4:c3:16:4b:03:c1:89:01:63:6d:00:8f:9e:09:10:02:
         c0:c4:cb:15:7a:9d:e2:2e:2a:1e:3b:29:88:16:e3:67:93:5d:
         4d:8e:50:22:6b:eb:21:47:1e:a8:ad:a7:cc:e4:4d:f7:54:cb:
         ac:2e:87:02:94:d9:9a:5c:d7:03:b4:ea:88:75:ec:b2:9c:7e:
         e0:c8:38:1c:db:8f:a6:c6:b8:4b:ec:a9:cd:e9:24:9b:8a:27:
         69:8b:1a:5f:de:ba:38:8c:30:97:06:9e:0a:d4:54:e2:ba:62:
         50:9d:ea:4e:09:3c:e5:9d:ba:dd:ca:3e:1b:7c:bf:51:8d:e3:
         a7:fd:d0:72:e6:59:3c:cf:4f:84:4f:48:6e:37:83:92:aa:c7:
         1b:5b:f7:1a:5b:6f:13:b3:4d:9a:62:4d:f9:38:27:8a:18:10:
         08:70:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:50:09 2026 by rpki-client