Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
File:                     U150NDn0nPv9SODvV-b6fUsxGq8.mft (raw, json)
Hash identifier:          Ec8cU6DuYUXqs0EdcJEkS5LlcBmvXaeyCW1XsnpzHdc=
Subject key identifier:   41:40:A7:18:D9:9D:AE:D0:40:DF:41:C5:37:99:E1:6D:12:3F:3D:5B
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Certificate issuer:       /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
Manifest number:          88
Signing time:             Tue 27 Oct 2026 06:34:15 +0000
Manifest this update:     Tue 27 Oct 2026 06:34:14 +0000
Manifest next update:     Tue 03 Nov 2026 06:34:14 +0000
Files and hashes:         1: U150NDn0nPv9SODvV-b6fUsxGq8.crl (hash: jS0PMIIVrotAquAkJyPUrKc6VGudC9mbPmIn/eUg3YU=)
                          2: 4FF63D680FE911F1BED32952083D8C67.roa (hash: L99vsE7QVMrcPtMmR6OsKMR7Y2Rb3mEx/QNb9KOL/Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
        Validity
            Not Before: Oct 27 06:34:14 2026 GMT
            Not After : Nov  3 06:34:14 2026 GMT
        Subject: CN=6ae045e6-9e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:e3:0b:78:d2:51:ba:0d:bd:7b:80:6a:42:
                    95:54:44:35:09:72:0f:39:2b:31:75:cc:6a:7b:ef:
                    0d:b7:84:03:a3:b8:a4:67:03:ee:4f:57:f9:e4:21:
                    23:d6:51:9a:8f:72:07:77:71:ef:77:a8:af:8d:8d:
                    54:68:5a:93:4c:fa:ad:b6:08:2f:18:7c:a8:01:e4:
                    b5:6c:2a:b6:e5:19:f3:ef:70:e1:3e:4f:35:3d:bb:
                    76:ad:cf:26:b3:ad:d1:a8:e9:e6:6a:95:86:a7:35:
                    d5:cd:f3:a5:5f:07:92:67:97:53:a3:9f:97:bb:83:
                    f8:53:7d:cc:bb:d7:da:77:72:e0:5e:d8:ad:73:62:
                    fd:35:98:75:da:a4:69:1a:04:99:f2:7f:59:e6:8d:
                    b9:64:18:a9:0d:92:2c:00:0e:17:d4:8e:ed:48:c7:
                    55:45:dc:51:5b:da:9a:2c:1a:f1:21:de:06:28:9d:
                    07:7f:a2:f5:47:e7:bf:84:ba:f2:be:8b:74:56:a4:
                    61:6a:f0:3f:ea:72:e8:f1:ea:02:d0:07:7a:18:ab:
                    f1:0c:fe:5b:9b:98:33:68:4a:78:12:bc:cf:ba:92:
                    23:b8:39:5e:3f:46:76:94:39:22:1d:59:43:d3:f3:
                    1b:86:22:f0:d0:e5:04:9d:e5:89:ee:1a:1b:37:bc:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:A7:18:D9:9D:AE:D0:40:DF:41:C5:37:99:E1:6D:12:3F:3D:5B
            X509v3 Authority Key Identifier:
                keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:1b:b3:b6:0c:2a:d0:cd:7d:9d:b0:6b:03:52:96:9a:e9:
         f6:25:6c:e0:b0:9d:a5:a7:b8:0f:c4:b1:ea:a8:aa:ad:40:be:
         28:4c:d9:4e:7b:64:d2:99:1e:74:c5:47:f5:16:2f:69:3a:37:
         40:2f:ac:bd:35:74:63:97:c7:f7:79:cc:cd:6b:f1:bf:4b:cb:
         f9:5b:85:2c:0c:16:34:fa:9c:84:47:0d:71:99:7f:fb:63:e3:
         63:38:75:af:00:8c:72:81:42:79:9b:96:a1:16:fd:8b:8e:f8:
         f2:e1:3f:1f:ce:24:b0:8d:9f:65:76:c8:13:5e:fe:7f:c0:43:
         f4:7b:1f:e4:fe:fa:b0:f0:6f:b2:72:a8:c2:10:d4:47:94:01:
         36:b2:52:32:c9:60:c6:0b:d6:a7:78:ad:e0:d1:d5:01:b3:95:
         ea:6c:5d:3a:dd:6e:81:27:21:25:f9:40:c6:f0:03:aa:50:8a:
         04:da:0e:26:82:0d:d5:6d:96:56:7a:d9:1f:2d:db:cc:a2:57:
         a2:f2:41:e1:b8:b6:df:20:f7:a1:7f:c6:83:6e:1a:36:9b:49:
         4b:71:2a:af:45:3f:b5:fb:4c:12:82:fb:a5:64:c6:78:df:54:
         bf:c4:ca:6a:40:94:50:1b:8f:c7:e8:54:4d:cd:87:f2:9d:57:
         e6:dd:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:42:44 2026 by rpki-client