Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File:                     R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier:          Q1EWnwV1hHEf443K3tbRhTMETzzsQA8cfl3kk4Da91g=
Subject key identifier:   5C:71:18:97:20:54:AD:62:65:E5:25:4E:24:80:80:57:10:C4:EC:D6
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number:          01F9
Signing time:             Thu 29 Oct 2026 03:54:53 +0000
Manifest this update:     Thu 29 Oct 2026 03:54:52 +0000
Manifest next update:     Thu 05 Nov 2026 03:54:52 +0000
Files and hashes:         1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: pmJlE9i9kklX5WYfND47G7AvA09yYtn80LhWWk48ibk=)
                          2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
                          3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 03:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: Oct 29 03:54:52 2026 GMT
            Not After : Nov  5 03:54:52 2026 GMT
        Subject: CN=6ae2c38d-f822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:84:98:1a:58:0a:a1:b6:a0:46:5a:b6:b4:
                    e6:86:e0:66:d4:ec:a6:4b:a3:36:87:91:17:14:60:
                    a7:53:e9:e6:da:7b:ee:7d:8a:9e:0e:d8:40:bb:84:
                    01:50:73:15:b1:3f:3c:58:45:8b:d0:7f:24:94:fc:
                    d3:c0:a2:74:7c:4c:b6:a7:25:c2:59:37:1b:fe:eb:
                    27:93:80:eb:de:5b:d1:44:54:bc:93:45:3c:16:3b:
                    cb:f0:d4:43:ee:51:81:bf:85:c3:4d:8d:45:df:0e:
                    ba:fd:b3:c0:12:5f:68:06:da:ae:6c:9e:9d:42:fc:
                    f1:b2:a0:ee:2b:ce:6b:48:41:01:a3:02:00:d7:a8:
                    32:a6:54:b6:f0:ba:44:0e:c7:1d:4a:7b:b9:db:0c:
                    87:dd:21:d7:10:80:9b:01:6d:08:3c:ea:18:ed:32:
                    16:c1:dc:df:8d:0c:61:e5:56:93:63:47:70:67:03:
                    53:22:98:06:43:18:bc:07:7e:ac:9e:7c:26:3a:a9:
                    74:29:fd:6f:7b:84:90:a1:b9:bd:05:07:76:d6:5b:
                    58:b7:57:cb:f3:72:ba:a5:88:42:1b:9e:9f:c6:a9:
                    01:63:3c:de:9d:4d:4c:70:60:1e:0a:0d:02:5c:24:
                    01:e7:8a:c6:fe:ae:19:04:4b:44:bd:e8:90:93:21:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:71:18:97:20:54:AD:62:65:E5:25:4E:24:80:80:57:10:C4:EC:D6
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:bb:47:ba:8b:5c:7a:fb:4f:99:35:45:a9:c5:55:fd:3d:0e:
         6c:f0:6d:40:19:de:75:be:fd:b6:9a:b2:85:f8:05:32:88:af:
         8f:3f:68:38:f3:65:7a:2c:01:c9:0c:ae:ce:c2:e9:0b:98:23:
         b4:0b:b1:12:89:56:5a:a1:e1:05:be:f3:9a:33:36:ed:ed:73:
         6c:f1:83:ba:ef:cc:ce:c8:8e:56:d9:6f:a1:31:e8:6d:60:e2:
         a9:dd:81:1b:95:8f:1e:60:9a:e9:89:78:0d:25:9d:0b:f6:9e:
         51:59:d9:53:30:db:58:66:a9:c4:49:31:5c:95:1f:b1:c7:b2:
         b1:49:ad:39:52:b4:de:45:1b:be:33:03:3e:44:48:00:4e:e9:
         69:71:37:7d:b7:40:ff:6f:f0:f3:52:3a:3d:8b:22:59:a3:3a:
         4f:ee:0e:41:90:f7:5d:20:ed:d4:22:e7:11:43:d5:22:59:80:
         56:2c:23:0a:b0:dc:c8:29:c1:03:77:fd:49:a2:80:63:7b:7d:
         be:54:8a:fb:46:99:18:98:31:65:88:44:f6:b5:ad:81:fb:03:
         7b:a0:a4:30:4f:39:95:08:50:e8:ee:5b:a9:6d:b2:d4:45:13:
         a6:81:9e:6e:e9:f0:0a:45:ea:49:9b:47:49:92:94:fe:ba:85:
         49:90:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:22:41 2026 by rpki-client