Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File:                     UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier:          Niiz5lLyVXlxA1urOQLu28SHHy/CD7nQaSRqIWMNYGc=
Subject key identifier:   E3:98:65:7E:6E:39:3A:77:71:A6:EC:90:24:49:BB:A9:5F:7A:57:00
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer:       /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number:          0154
Signing time:             Sat 05 Sep 2026 05:14:26 +0000
Manifest this update:     Sat 05 Sep 2026 05:14:25 +0000
Manifest next update:     Sat 12 Sep 2026 05:14:25 +0000
Files and hashes:         1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: rg95Ze0/SHVVp5Va8UJZI4hJXmirwz4oUrNbEgXlqOE=)
                          2: 1D8F5C2E5B7F11F1B697DE78A6833773.roa (hash: klWUSQgK3IOTMfJYCoyqo1alTlwHxclvm8Ll88mJta4=)
                          3: EA7DD3B85B8011F19AAA063FA7833773.roa (hash: ga7RmHBxUIf+hUQhJPOXCSIER/vz19Y1P9LRsEGGGbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
                          rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 05:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
        Validity
            Not Before: Sep  5 05:14:25 2026 GMT
            Not After : Sep 12 05:14:25 2026 GMT
        Subject: CN=6a9ba531-0a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:78:18:09:43:d7:8c:37:e5:7a:3e:59:08:
                    7c:a8:49:18:d8:95:b1:62:77:de:67:95:e2:e4:73:
                    85:24:5e:6b:ca:37:15:e7:8b:56:6a:9f:52:e3:5b:
                    5c:aa:af:e6:aa:c2:37:e4:f4:16:3b:ba:b4:e4:21:
                    08:4d:31:27:a6:ed:fe:17:77:8f:42:6e:85:52:74:
                    36:a5:b2:79:b4:b3:41:37:30:87:5f:9b:23:fd:1d:
                    b3:25:1b:de:0a:09:3e:28:d8:14:84:1e:12:25:39:
                    0f:24:f6:90:3e:db:61:e0:2b:a9:01:51:b9:a8:cb:
                    cb:9d:64:96:38:c5:36:13:68:87:a8:40:bd:ea:24:
                    ab:e6:93:8a:a7:d6:35:2c:cf:41:ce:1f:2e:26:d5:
                    02:b0:9d:b0:8e:03:4e:64:09:d5:8c:de:56:5c:37:
                    df:c7:1a:77:7a:3d:c6:37:f6:77:2b:7e:d7:ca:e7:
                    3e:89:e3:fb:c2:de:ba:7d:c7:17:c0:95:f5:52:b6:
                    9b:e2:87:98:8e:c0:68:76:64:3b:6a:82:0e:e5:74:
                    04:7a:cc:45:c1:89:26:30:ae:7b:74:54:7f:89:48:
                    dd:74:ff:09:e7:5c:05:6d:3c:a5:b0:ec:3f:d0:1b:
                    d0:e1:a6:a2:b9:f0:41:b2:9d:75:92:7d:d1:15:30:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:65:7E:6E:39:3A:77:71:A6:EC:90:24:49:BB:A9:5F:7A:57:00
            X509v3 Authority Key Identifier:
                keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:d7:a9:66:94:8d:6f:f8:82:ed:40:86:a6:b3:9d:24:cb:
         56:56:61:27:b0:b7:5d:85:06:d5:7f:99:2c:13:3c:be:a7:9e:
         9e:ee:21:3a:cc:19:8c:9f:e6:60:50:89:2c:27:eb:29:83:c8:
         48:34:bc:fa:87:3e:e8:ac:ff:02:79:f5:63:ca:e2:6c:2e:09:
         84:03:93:5c:5a:27:68:9e:a6:cf:14:33:61:e6:a8:20:ed:35:
         a9:55:71:59:00:15:90:83:15:5f:ab:c4:6c:43:26:e6:44:6f:
         2d:cf:da:c4:3e:c7:0b:12:61:f9:12:8c:8e:d3:8d:09:de:0e:
         3f:d9:31:21:76:c9:ca:a9:d2:b5:d5:dd:11:fd:18:bd:05:30:
         b1:25:f5:a4:8c:42:c2:bc:a0:e1:fc:35:46:d8:2c:69:82:3d:
         59:fa:fa:1e:93:20:30:42:9c:d7:47:7b:41:e4:c9:39:85:6e:
         89:8c:1d:a0:53:99:be:38:58:69:38:45:be:07:97:dc:ed:8e:
         a5:bd:34:84:3f:af:ba:33:a9:dc:13:26:c3:22:48:15:cf:7e:
         1f:f4:75:23:31:56:c1:5f:be:4c:e5:3a:b2:4a:d8:ca:11:cd:
         29:7b:ea:a9:17:8f:8a:13:69:a9:70:cd:ab:b3:66:fb:e0:a2:
         de:5b:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:01:56 2026 by rpki-client