Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
File:                     UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json)
Hash identifier:          q/mWGB6qv8JG4kOja++affNAeneL025QTiO1fYtNkUw=
Subject key identifier:   B1:7F:18:19:CB:87:6F:7A:F1:FE:23:47:B4:7D:95:DE:58:41:B8:9E
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1D13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
Manifest number:          1DF5
Signing time:             Sun 20 Sep 2026 16:07:34 +0000
Manifest this update:     Sun 20 Sep 2026 16:07:33 +0000
Manifest next update:     Sun 27 Sep 2026 16:07:33 +0000
Files and hashes:         1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: Trajz5fdu6ysyeRabvrkXMJs2aSxSSd70TkEr0Ba070=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7443 (0x1d13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: Sep 20 16:07:33 2026 GMT
            Not After : Sep 27 16:07:33 2026 GMT
        Subject: CN=6ab004c6-de85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:6e:0d:7c:a4:71:95:1a:dc:44:57:b7:3e:
                    ac:2c:a3:dc:97:3c:41:09:39:8f:72:28:90:9b:da:
                    29:97:be:96:96:85:47:cf:f8:97:b2:b3:a2:13:d3:
                    3b:ab:04:75:51:3a:42:fc:00:91:3b:62:2a:6a:37:
                    90:ef:be:c5:cc:1f:e9:74:90:b3:ce:b5:bc:6d:42:
                    fb:5b:fd:0d:3c:d9:49:bb:b0:c0:9a:87:61:a3:8c:
                    c6:14:2e:94:c8:5d:f0:2d:a8:a7:25:62:87:82:6f:
                    fa:b1:9e:1a:ef:29:ac:23:1d:f8:1c:00:18:e2:3e:
                    25:d9:fe:c1:16:dd:1a:5f:9c:dc:21:03:3e:d9:fa:
                    f3:ab:3f:76:22:6e:12:20:83:61:69:73:74:cd:a5:
                    cf:66:3f:f1:7e:bf:13:72:f0:e3:32:a9:a2:25:c6:
                    13:c8:d3:2e:c4:20:71:c6:f0:07:09:ba:e8:2e:24:
                    d1:78:ae:7e:ce:a0:7d:f8:8e:25:b4:a5:71:c6:5d:
                    58:75:b8:03:68:7e:e0:77:76:f2:2b:ff:db:1d:c9:
                    9f:1f:71:2c:ae:0d:c2:3d:77:a7:59:10:45:f1:98:
                    18:d3:11:de:5e:32:e2:19:ed:41:2c:79:75:46:58:
                    2d:c8:0f:92:69:c2:45:17:ab:3d:fe:4a:fb:33:cb:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7F:18:19:CB:87:6F:7A:F1:FE:23:47:B4:7D:95:DE:58:41:B8:9E
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d1:9f:7f:4f:13:9a:58:76:66:83:90:93:53:7c:c8:c3:f3:
         dc:d3:e4:39:78:7d:80:cd:b9:4d:e4:0b:cc:47:27:aa:99:bf:
         9f:1e:1f:0d:4c:24:9d:ec:4b:15:9b:93:e0:9c:1f:9f:29:2b:
         25:0b:60:9d:0a:69:e8:07:ed:fa:b8:b6:9e:5f:eb:c1:54:65:
         8e:e8:3b:35:f9:c3:98:8e:74:d8:20:a1:b6:89:17:bc:f4:85:
         e1:03:0a:ec:6f:0a:47:6c:45:51:d3:44:79:34:91:53:d8:09:
         62:74:cc:f7:b1:49:8a:1c:27:e4:a8:f9:67:b1:b3:2f:27:be:
         05:f3:42:9b:a8:93:99:8a:2e:0d:cf:02:6d:54:23:60:92:6d:
         1e:2e:3c:37:8c:a6:dd:f1:13:ce:26:da:e4:b1:11:e9:ca:40:
         12:84:4b:a5:24:de:d0:c9:52:25:e4:b7:31:d3:86:cc:be:75:
         59:f2:60:45:6e:94:99:02:09:c7:eb:c7:08:18:02:59:78:32:
         65:d7:29:9d:c7:c4:bb:c8:6b:5d:05:19:e1:91:cd:bb:8e:dd:
         1e:35:dc:43:00:73:58:6c:f3:b8:91:11:4a:3d:77:46:60:72:
         78:f6:95:9c:cc:c3:11:6d:a2:0c:5d:84:3a:95:d2:1c:10:f0:
         2f:c8:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:49:50 2026 by rpki-client