Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft
File:                     UhKLBG453W6FQ1iOUUO1rSX07TM.mft (raw, json)
Hash identifier:          q8/7IiVCHQ0EmKUC8ErPATkwD1qlIkQ2KVFLjr5lB9U=
Subject key identifier:   CF:95:A3:BE:FC:BB:F9:B4:B2:FF:F4:D4:86:6F:DD:87:0C:4B:49:04
Authority key identifier: 52:12:8B:04:6E:39:DD:6E:85:43:58:8E:51:43:B5:AD:25:F4:ED:33
Certificate issuer:       /CN=A91CFB8E/serialNumber=52128B046E39DD6E8543588E5143B5AD25F4ED33
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft
Manifest number:          48
Signing time:             Mon 05 Oct 2026 08:53:39 +0000
Manifest this update:     Mon 05 Oct 2026 08:53:38 +0000
Manifest next update:     Mon 12 Oct 2026 08:53:38 +0000
Files and hashes:         1: UhKLBG453W6FQ1iOUUO1rSX07TM.crl (hash: 1bQN+v5AJz+A1y5MENzMM1GyI0CaZJ7dZOKawEXq+K8=)
                          2: 977C1752565C11F1BEA0792596833773.roa (hash: EfmhcEjq/wxAjnDl+I2bJhZZwo3BKc7Ehe1P+YMe9fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.crl
                          rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFB8E, serialNumber=52128B046E39DD6E8543588E5143B5AD25F4ED33
        Validity
            Not Before: Oct  5 08:53:38 2026 GMT
            Not After : Oct 12 08:53:38 2026 GMT
        Subject: CN=6ac36593-9cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:ac:cc:82:72:3c:38:54:07:13:6c:aa:f5:
                    8b:7a:3b:c7:00:a1:31:86:12:c3:36:f9:db:6c:67:
                    74:67:6b:f7:c1:17:b8:18:4e:d3:f2:2a:be:73:6d:
                    9b:c2:2a:30:0f:50:58:e3:37:28:31:45:30:53:ae:
                    bd:ff:88:74:67:d5:a5:1c:c2:02:bf:9d:5e:fa:2a:
                    0d:b9:21:ba:a7:af:48:eb:9e:ca:b7:0e:0f:da:6e:
                    6a:55:72:69:1e:51:bf:88:76:19:a6:b6:ce:86:75:
                    75:56:fa:d9:a5:de:d4:2d:7c:94:a2:2c:ca:ba:fd:
                    d5:0b:4f:27:35:1a:63:11:c0:54:be:4e:c1:95:91:
                    b4:5e:90:da:ac:54:99:b9:66:1d:75:77:94:1a:70:
                    28:3b:2d:86:03:63:15:46:d3:be:74:51:4c:6a:07:
                    19:f6:4c:42:6c:c3:da:b4:04:bd:d1:99:23:aa:5f:
                    9f:35:e3:50:fe:64:fb:ba:d4:88:e5:7e:f9:d7:bd:
                    e7:82:c2:7c:14:c0:04:82:81:36:ad:1e:f8:1a:d7:
                    d5:d4:f8:71:b8:0f:88:b1:86:7f:0f:e0:fd:66:db:
                    ae:fe:a5:2c:f0:a8:b6:8d:11:ac:b3:d6:b3:ed:d3:
                    2b:22:44:ee:c6:e2:3d:9a:bb:a9:c0:05:4a:86:d5:
                    07:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:A3:BE:FC:BB:F9:B4:B2:FF:F4:D4:86:6F:DD:87:0C:4B:49:04
            X509v3 Authority Key Identifier:
                keyid:52:12:8B:04:6E:39:DD:6E:85:43:58:8E:51:43:B5:AD:25:F4:ED:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f7:55:f0:0c:70:d8:80:54:8c:60:82:74:e2:73:d1:83:b5:
         21:1e:fa:69:65:f1:4e:fc:55:5f:83:9e:c1:cb:34:88:ea:bf:
         5e:32:38:fa:b5:7d:b3:a0:95:bf:86:08:7a:6b:df:37:68:e6:
         ed:03:bd:5c:56:a4:5f:a7:28:e0:b4:89:53:46:c1:0d:73:5d:
         ab:0c:13:9d:32:66:15:0a:66:07:bc:25:cc:6e:ed:fa:af:16:
         24:1b:a0:57:ec:de:a4:f8:48:19:af:f2:81:a4:3b:21:83:34:
         12:ab:c3:93:31:6e:4b:9d:55:40:f2:0a:50:77:94:f5:6d:3a:
         fa:a4:77:26:16:84:1d:bf:6d:74:b7:1c:db:3e:88:ee:24:8c:
         aa:73:0e:d0:93:3b:25:40:d7:f8:b5:b1:d2:7a:3d:e9:53:c3:
         e4:90:ac:f7:e0:f4:3d:8c:ab:ca:97:10:3e:31:68:2f:b1:95:
         24:09:2f:1a:51:f8:21:1f:0b:17:24:91:ac:32:e5:e6:80:4e:
         b4:a0:0f:25:dc:58:ca:e1:27:26:9c:8c:6c:9b:b7:09:ee:08:
         f2:73:51:d6:47:36:98:fd:9c:60:2b:77:98:2c:b0:c6:e9:89:
         f5:d3:66:17:00:79:e0:75:8e:60:07:17:9a:91:c1:45:b8:1e:
         d7:38:54:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:13:35 2026 by rpki-client