Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
File:                     UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json)
Hash identifier:          LYmyQjtcxb6qSs2sc+B++qMxu3RQYbIRR6mQ2ey3JRg=
Subject key identifier:   C9:66:E9:55:F3:C9:93:68:B0:FD:C6:7D:91:03:30:76:75:CD:2F:74
Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
Certificate issuer:       /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
Manifest number:          AE
Signing time:             Mon 21 Sep 2026 07:03:17 +0000
Manifest this update:     Mon 21 Sep 2026 07:03:17 +0000
Manifest next update:     Mon 28 Sep 2026 07:03:17 +0000
Files and hashes:         1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: jIb+ubghY1phzSG2O/LT57CGlhvmG6atthUFwsZ2uVc=)
                          2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: VnxPQSSZH/jrUJ6zmg9TBmjFmVAPpsz93eEIgIGKblg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
        Validity
            Not Before: Sep 21 07:03:17 2026 GMT
            Not After : Sep 28 07:03:17 2026 GMT
        Subject: CN=6ab0d6b5-f301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:e2:48:e9:7e:c2:22:b2:6b:e2:00:ac:a3:
                    54:a1:3b:a5:ce:ad:3c:59:37:53:0a:11:96:55:0a:
                    90:75:23:f2:d5:0a:60:17:c5:ca:9d:c9:73:7d:c7:
                    5d:92:0b:21:be:d4:ff:92:d0:e6:f5:fd:0e:f5:b7:
                    95:8e:09:c5:22:ed:8c:d4:bf:e3:38:01:c4:4c:db:
                    37:d1:e4:96:9a:f1:1a:64:eb:71:3d:4b:1d:49:aa:
                    eb:1e:62:9b:87:1a:6f:83:75:49:d8:62:a1:37:60:
                    73:57:33:7b:c8:32:2f:72:a3:22:e2:3b:e4:95:0e:
                    73:20:d6:d8:ff:81:a2:41:de:c8:1f:57:20:5c:13:
                    28:35:e0:1b:6a:97:89:5d:c2:b1:66:6f:95:a3:c9:
                    78:f7:7b:bb:7c:33:09:e7:05:d1:05:bc:51:54:c6:
                    f5:63:69:66:2f:34:a1:35:24:73:bb:9a:45:77:27:
                    94:08:7b:0b:6c:23:76:29:7b:0c:c1:86:84:04:07:
                    e1:36:0a:62:b6:e4:a7:ea:c6:7d:77:a5:bf:73:95:
                    26:09:05:e4:0d:35:51:c9:2e:45:1b:00:5d:a1:69:
                    1d:a7:ec:3f:40:19:4b:3d:3c:23:98:d4:d9:b3:a1:
                    b1:99:b0:3a:4e:a7:c6:6b:e4:64:30:e7:40:fb:97:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:E9:55:F3:C9:93:68:B0:FD:C6:7D:91:03:30:76:75:CD:2F:74
            X509v3 Authority Key Identifier:
                keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:c0:f1:54:eb:ba:7c:63:fe:6e:9c:d7:95:9c:e6:6a:10:
         99:28:22:1d:9b:55:eb:f0:08:60:df:35:cc:e2:86:ac:8e:c1:
         79:3b:08:a9:8c:45:3b:92:db:d4:05:11:c1:34:c4:c0:c4:25:
         e2:23:90:9e:a8:35:0e:2f:66:28:20:7e:f4:49:6a:86:7b:12:
         45:37:b5:46:f4:9f:7e:6e:76:09:da:f8:f5:99:77:73:70:d9:
         61:fb:16:fd:b8:32:f0:74:58:b4:bd:80:50:10:16:88:04:19:
         af:08:ab:12:00:54:d8:df:3b:25:04:7a:ce:ed:33:0a:cb:fb:
         2a:9a:a5:af:4b:8a:5d:42:01:7e:45:08:6c:1d:c9:b5:aa:40:
         00:b7:d5:3c:af:41:ba:c8:34:4a:67:3b:c6:33:ee:20:54:fd:
         4e:0c:cb:fc:c8:cc:a1:0a:65:53:3e:fd:12:2a:50:18:2f:17:
         3f:ed:f6:ef:62:4f:5a:ba:26:34:de:35:32:37:bc:90:78:53:
         8b:cf:6e:6d:b7:3e:ed:c0:4e:fb:3a:09:a6:6a:0c:61:70:0b:
         e7:67:e3:d9:75:db:55:6e:3d:52:a2:f3:df:8b:4b:36:70:98:
         63:42:f4:a9:e5:bc:25:0d:8a:5a:32:f2:67:60:e4:cf:37:be:
         b5:72:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:11 2026 by rpki-client