Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
File:                     UEMacUvIutzoUZ5LmRR-FR7fd5c.mft (raw, json)
Hash identifier:          RnrzBKyTZilqt5x2QxQXor7vlM/NG48dUyY9tu7JxZk=
Subject key identifier:   D6:ED:03:BE:6A:A0:E4:87:D8:11:37:3A:33:4C:90:BF:74:50:47:AE
Authority key identifier: 50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97
Certificate issuer:       /CN=A91DA289/serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797
Certificate serial:       0722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
Manifest number:          071A
Signing time:             Sun 20 Sep 2026 21:57:25 +0000
Manifest this update:     Sun 20 Sep 2026 21:57:25 +0000
Manifest next update:     Sun 27 Sep 2026 21:57:25 +0000
Files and hashes:         1: UEMacUvIutzoUZ5LmRR-FR7fd5c.crl (hash: QyW4cT8oMRXVu3EwnR7MKGKVo4v6FHOFvjPwJ2yZW5I=)
                          2: 0BE0F63C9CBB11EBA4731E19C4F9AE02.roa (hash: 7vdJyHXGC2GsKIXAZ6ng7RW8x3H+npu3uVHt+RP/wz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl
                          rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA289, serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797
        Validity
            Not Before: Sep 20 21:57:25 2026 GMT
            Not After : Sep 27 21:57:25 2026 GMT
        Subject: CN=6ab056c5-6498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:46:b9:ad:28:e4:d8:8a:f2:56:5a:b1:4f:
                    fe:48:fc:c3:e6:35:28:bf:68:1d:16:5a:33:16:1e:
                    d5:57:3d:11:8c:47:0c:bf:91:e5:95:55:b4:dc:6d:
                    ea:5e:8a:98:4c:2c:cb:d4:05:c0:4d:03:18:b4:d4:
                    1f:5c:9e:ca:e6:e8:1a:61:e4:de:25:fe:6a:51:c3:
                    56:bc:55:6b:36:10:d3:0b:84:0e:96:fa:88:ba:a2:
                    ca:4e:44:33:e6:d6:0a:6f:c9:6d:c8:bd:76:ec:c5:
                    04:08:c5:00:2a:45:71:c2:45:86:67:ec:41:73:03:
                    e4:22:5a:ef:cd:24:68:4d:78:73:72:d6:f7:db:0f:
                    58:d4:fa:9d:09:9a:1b:64:3b:88:b6:f6:fa:1a:29:
                    7b:3e:62:b2:14:20:0b:74:8a:46:fd:1a:76:25:f1:
                    e3:d7:58:2c:7d:8d:48:e3:5e:eb:3e:43:6f:76:3d:
                    2c:89:69:dd:ec:d5:e1:47:c0:f6:1d:91:0e:d5:88:
                    57:0c:93:2f:e0:ec:28:e3:6d:44:57:cb:6e:3d:22:
                    d0:18:e5:e8:df:94:e8:1f:c0:43:0e:7d:46:f1:a8:
                    78:14:fb:cd:46:8a:80:51:c2:a2:8e:7c:4a:bf:f6:
                    2b:28:c4:b7:23:d8:16:5b:46:62:5e:9b:7f:24:9f:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:ED:03:BE:6A:A0:E4:87:D8:11:37:3A:33:4C:90:BF:74:50:47:AE
            X509v3 Authority Key Identifier:
                keyid:50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e5:3c:88:ae:e7:1f:b9:3a:d7:f0:5d:d2:57:48:83:f8:e9:
         ef:b1:3d:af:ed:f7:86:77:73:ec:95:53:ed:11:db:43:c3:83:
         71:15:f1:f6:f5:0f:fc:d5:0e:2e:8f:dd:83:d0:41:4c:ab:d3:
         8c:27:2f:2d:1f:0f:b2:8f:d9:26:68:44:ff:44:9c:b7:af:b8:
         0f:d4:8c:d4:ac:bb:b5:0e:be:e1:ba:a0:03:26:58:25:94:ef:
         cd:ac:21:ff:4f:16:6a:d4:1f:58:98:4d:0e:02:94:7d:96:30:
         b6:31:ec:62:4f:79:38:80:e7:9b:78:1a:35:04:7c:35:5b:d3:
         a7:af:1b:54:76:4d:4e:f8:a6:29:82:03:a9:b9:31:d1:b5:17:
         1a:40:e8:26:09:1b:f5:e7:e1:79:93:16:e2:9f:be:a9:48:01:
         89:c1:b9:17:75:d5:d6:02:57:9d:54:b7:bf:89:1b:3f:dc:4a:
         cf:d1:63:8d:a1:ae:ae:8f:77:b5:18:6d:d5:b4:4c:ef:50:3d:
         26:99:68:64:21:1d:f9:a3:af:1b:77:b9:08:cc:db:9f:2f:c9:
         5c:fe:a8:f5:ba:aa:35:50:ea:da:f6:00:cd:98:02:c1:c2:15:
         d5:dd:e3:ac:14:50:52:2e:b8:f3:03:47:c0:11:bc:91:20:cc:
         42:b0:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:44:47 2026 by rpki-client