Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File:                     U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier:          dDsVD7GPJplLTHSnR2eCU+vBrl4cmPVy7NaIZ80C+lk=
Subject key identifier:   61:9F:8E:F3:BD:4C:92:4F:76:45:46:81:6B:0C:13:4A:1F:BC:5C:CB
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer:       /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number:          021C
Signing time:             Mon 05 Oct 2026 03:15:49 +0000
Manifest this update:     Mon 05 Oct 2026 03:15:49 +0000
Manifest next update:     Mon 12 Oct 2026 03:15:49 +0000
Files and hashes:         1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: 9GCJmM2HFT3jic0c01OpIlQElbYfbAQbJ5szSlhpUas=)
                          2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
                          rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
        Validity
            Not Before: Oct  5 03:15:49 2026 GMT
            Not After : Oct 12 03:15:49 2026 GMT
        Subject: CN=6ac31665-19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:f3:87:95:08:31:b3:d6:ce:16:a0:04:f6:
                    97:ed:ec:bf:24:ba:4d:c7:00:63:c5:56:43:60:d5:
                    9f:6d:85:47:4d:a5:13:93:39:a8:dd:3e:cb:d4:09:
                    a3:d4:72:6f:46:53:11:1b:ac:31:12:53:61:84:67:
                    a5:f3:14:ed:ff:95:cd:cb:cd:67:02:57:51:3d:78:
                    cd:2c:a1:28:f3:01:54:e3:6a:fa:b8:75:31:22:6c:
                    52:10:f8:4a:0d:11:25:69:14:1d:9f:4c:00:9e:4d:
                    75:4a:ba:01:5f:5d:10:07:97:c8:8b:6a:0a:81:5f:
                    b3:60:b2:7e:80:42:4c:19:7a:e2:e9:20:11:98:ae:
                    4d:79:ee:ba:be:c8:13:87:97:2a:ca:22:95:95:6d:
                    df:91:8d:c2:10:1b:da:10:06:19:3b:d5:1f:fc:42:
                    56:a0:20:3a:f9:75:12:8e:84:4e:5d:35:66:41:2d:
                    4d:b2:20:9e:ee:61:09:d6:e0:91:cd:2d:90:e8:b4:
                    76:4f:12:a8:5f:2b:40:bf:e6:8c:2b:dc:e8:89:2c:
                    60:5e:99:c8:40:10:f1:15:10:7f:3a:99:6a:11:f0:
                    ba:a4:f7:c6:ae:90:1d:7b:b0:02:1e:21:69:cf:00:
                    3a:c3:30:a5:ee:15:c8:4d:32:83:8c:b7:90:71:f2:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:8E:F3:BD:4C:92:4F:76:45:46:81:6B:0C:13:4A:1F:BC:5C:CB
            X509v3 Authority Key Identifier:
                keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:16:2d:11:5e:0a:60:ed:04:b8:39:c1:75:6e:d3:58:34:
         bd:b9:43:a6:a2:32:4f:7e:45:ff:96:1a:d5:4b:01:1e:08:8e:
         22:4a:ff:77:4e:93:a9:69:37:bf:c6:9e:85:f6:b5:78:3f:95:
         b7:24:4b:b3:ea:8d:06:53:c0:30:8c:25:ec:87:58:5e:62:fc:
         9e:50:5e:ab:4b:c7:dd:50:c6:a8:7f:7f:10:d8:07:d1:73:d1:
         0f:82:bc:d7:62:7c:bc:4e:6e:3b:f5:73:54:e4:fd:7c:34:4f:
         9b:43:52:72:fb:04:0e:77:7a:76:be:a3:1d:a9:bb:11:32:ed:
         02:01:8d:90:17:01:93:9c:4f:9e:91:b4:7f:48:2a:9c:0a:83:
         6d:83:ad:c8:6c:df:6c:2e:dc:92:bf:46:d0:50:d3:e2:82:b2:
         05:57:e4:75:4c:15:28:7b:c9:e5:29:a0:d2:9d:ad:07:15:af:
         92:42:b0:dc:85:d5:f9:49:2b:3b:77:4b:be:3b:a0:93:4b:c1:
         c0:2d:fc:02:d1:89:a4:68:92:ae:2d:b4:84:4e:84:3f:4d:dc:
         5f:c9:88:c8:0d:b2:5b:05:b3:5e:84:c2:18:4a:f2:19:b5:0c:
         a3:b1:96:d5:f2:fe:70:dc:7d:ef:93:6e:bf:31:51:08:c3:ee:
         75:cd:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:48 2026 by rpki-client