Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          jDrQYHaAOsqZoylQgnZobkWfz59suoX1csRoU8c3F0M=
Subject key identifier:   4E:87:0F:0C:66:72:EB:70:82:2C:41:6A:E3:0A:4D:0F:F1:6F:FB:80
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0D20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0D0E
Signing time:             Mon 02 Nov 2026 18:30:17 +0000
Manifest this update:     Mon 02 Nov 2026 18:30:16 +0000
Manifest next update:     Mon 09 Nov 2026 18:30:16 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: pViiW2o7j5tfG6T/SHOJXn3QZ8mXs5+LTXXC3jZ0bwg=)
                          2: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=)
                          3: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3360 (0xd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: Nov  2 18:30:16 2026 GMT
            Not After : Nov  9 18:30:16 2026 GMT
        Subject: CN=6ae8d6b9-e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:8e:78:f8:1e:2e:aa:19:41:36:31:00:f2:
                    03:49:51:1a:0f:9e:63:9b:43:05:e5:8a:a6:ea:fa:
                    54:ae:39:24:6a:93:10:ed:3a:8b:91:1b:49:43:df:
                    2f:e6:08:0d:75:90:48:47:c0:2a:09:b1:51:02:5a:
                    e3:f6:0a:aa:d6:34:3e:b5:e2:28:d0:61:92:91:07:
                    c3:80:b3:ab:62:07:3a:08:09:0f:b0:10:db:2c:4a:
                    3c:6c:81:86:e7:93:1b:22:4d:80:36:83:dc:02:cc:
                    01:5d:43:39:a1:a4:2d:a8:ca:5e:1f:25:60:2e:34:
                    5c:12:b7:7a:d9:e7:56:ac:00:86:55:de:78:c3:27:
                    89:ab:dc:9e:d2:c5:53:6c:9d:c7:97:af:0b:25:1f:
                    2e:65:06:2f:8f:61:37:42:f7:a6:82:ec:e2:c4:a7:
                    2d:d6:23:da:1b:c7:a5:ba:b3:66:d9:3f:a3:b1:b6:
                    08:e8:7e:45:57:dc:79:4d:bd:c9:22:86:28:e1:1e:
                    f8:44:72:e1:2a:34:88:b9:54:0e:77:45:03:a5:f2:
                    1d:fc:c6:6a:17:fc:0f:6b:8f:3a:37:0d:07:4b:5c:
                    32:fc:f6:91:98:d0:e0:57:f8:b4:65:41:d0:82:57:
                    0e:11:44:d5:ca:a4:20:36:06:c8:2a:7b:8f:29:1b:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:87:0F:0C:66:72:EB:70:82:2C:41:6A:E3:0A:4D:0F:F1:6F:FB:80
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:d4:c4:3e:2b:5b:63:77:fb:ee:7f:ad:9c:b0:ae:3d:e7:
         54:e6:80:8c:6a:19:4e:3d:95:07:2d:0e:3a:2c:91:26:6e:25:
         6f:9b:0f:69:ee:48:03:02:f2:03:4d:dd:38:b5:f0:eb:0f:e0:
         7b:31:0a:26:78:3d:ec:36:30:75:93:9d:e8:8b:cb:03:b2:95:
         60:49:34:db:01:29:21:b1:4b:16:9b:80:e8:0c:d8:5b:48:26:
         45:37:64:6b:b9:11:af:4b:2f:68:75:eb:8f:eb:db:f6:0e:b7:
         81:de:75:cb:7b:e5:4f:53:6a:d6:94:27:79:57:e3:13:7f:8b:
         26:d5:46:05:8f:17:f7:7e:6e:7d:93:e0:fd:3f:24:a0:b6:c1:
         8a:9e:23:2d:49:c7:68:f6:84:5c:8a:b5:8c:3b:b0:85:07:a3:
         97:29:22:a4:5c:a8:d8:ee:24:58:2d:82:1e:4e:d1:df:ae:6f:
         ee:43:da:8c:58:5f:a5:62:a4:10:ee:d8:3b:69:19:0e:c5:6b:
         61:ed:af:46:10:cc:0c:0d:22:96:41:96:0d:61:55:70:e7:e2:
         28:c5:2c:14:97:68:3a:bc:13:20:5f:85:52:b1:dc:a2:39:6f:
         67:4b:98:a3:a3:24:98:09:e6:50:3a:69:9f:1f:d5:55:6e:a2:
         da:b3:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:12:04 2026 by rpki-client