Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File:                     UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier:          33cXtLnvUnli8RhHcmSlC/GT0np0qTQOWdpjNfQQN7g=
Subject key identifier:   36:E3:21:E1:DC:D1:2C:FE:28:79:BA:BC:67:1B:66:3A:64:1C:B8:77
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer:       /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial:       08D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number:          08C9
Signing time:             Sun 20 Sep 2026 20:23:56 +0000
Manifest this update:     Sun 20 Sep 2026 20:23:55 +0000
Manifest next update:     Sun 27 Sep 2026 20:23:55 +0000
Files and hashes:         1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: /7ROAFeNeVtBQrTDyiMvoW1vw235abXny5r+gDke4fU=)
                          2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: gn4KKIjx+cVov8CUqaUqG9obpblSjgg6mNoakxKefS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
                          rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
        Validity
            Not Before: Sep 20 20:23:55 2026 GMT
            Not After : Sep 27 20:23:55 2026 GMT
        Subject: CN=6ab040db-4919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:69:79:32:ae:7a:71:74:11:22:9c:1b:5e:
                    87:69:8e:19:de:ba:bf:90:90:60:28:5e:57:f1:30:
                    2d:47:88:48:0e:86:03:cf:99:ca:b8:f8:ea:09:7a:
                    d8:98:04:49:1c:68:ae:64:e2:06:ce:00:da:55:ba:
                    22:56:f6:94:d2:75:9f:64:10:57:84:87:74:93:c7:
                    59:84:4f:83:55:3a:c3:3a:38:ff:ed:95:9f:35:87:
                    61:9c:85:0c:80:16:53:d0:5b:8f:4e:96:35:06:32:
                    2f:1d:d9:dd:20:6d:8c:53:39:5c:cf:d6:f9:0b:f7:
                    f3:61:7f:cb:ab:2b:55:01:55:38:2e:98:5e:34:0a:
                    ac:a4:5c:c0:03:a8:4d:7b:b8:d2:c4:89:b1:5f:3c:
                    0a:ee:04:b2:e2:6c:4b:fd:98:e9:10:d3:fa:00:74:
                    26:21:9f:f3:9a:6e:02:07:f0:16:41:7a:23:f2:40:
                    29:93:9d:31:d8:9f:57:b0:a1:77:55:7d:aa:c1:80:
                    2b:98:79:96:89:e9:01:20:b5:25:cc:99:8d:a1:bf:
                    f5:d5:8c:4e:84:17:03:78:59:6d:71:2b:c0:9d:49:
                    d7:d0:6b:31:bf:90:0e:98:65:1b:56:e6:8e:90:87:
                    d7:3b:92:f7:d1:13:fd:ee:e9:c8:b9:5a:87:5f:03:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:21:E1:DC:D1:2C:FE:28:79:BA:BC:67:1B:66:3A:64:1C:B8:77
            X509v3 Authority Key Identifier:
                keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:4b:df:be:f8:4a:e0:42:d0:1c:ef:ac:01:0f:f1:a9:fe:
         7a:7e:31:d3:e5:b1:50:b2:da:c8:dc:86:15:4d:a5:83:8f:92:
         39:7d:49:4a:d9:b3:22:f7:df:61:44:6a:49:9f:4a:8b:38:fa:
         74:2a:aa:9a:7e:9e:e7:f1:5d:9f:8e:e0:3e:09:8c:c2:94:98:
         11:26:91:2c:e9:d1:cc:62:d6:1a:bb:8d:2b:67:3c:b1:30:5e:
         69:bf:9e:88:93:b4:6d:2b:22:5c:af:cc:ae:14:28:e3:eb:16:
         8c:4f:78:3d:53:b8:0a:c6:4b:9a:33:77:da:6f:c3:7d:99:c5:
         be:24:d9:ff:33:19:b4:e1:47:ff:34:48:30:37:0d:22:07:63:
         88:23:75:fa:77:69:de:f4:cb:7a:1e:99:2f:ae:ee:2e:e0:04:
         1b:3f:7d:88:77:3f:f5:4c:fe:ab:29:fa:49:d1:0e:1c:14:92:
         ed:a6:b1:5f:02:a2:ce:78:b9:a5:0c:27:dd:4d:ac:72:99:6a:
         90:cf:bd:6f:07:26:3f:fb:59:d0:0c:71:3d:44:57:49:72:f8:
         e7:96:5e:6f:9b:7d:ad:de:de:68:32:a6:8b:eb:27:c0:a6:52:
         95:4b:28:09:49:6d:13:f0:e6:f1:d9:91:1c:e3:0b:0c:d1:82:
         3a:93:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:03:34 2026 by rpki-client