Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File:                     UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier:          nUK/zFSK9DNCJIXeB3OoAJdalRixwVEsNER8HsjaQL4=
Subject key identifier:   A1:8C:DF:62:8E:36:ED:5A:70:89:DB:CD:6D:F7:73:70:A4:7C:A5:47
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer:       /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial:       0C68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number:          0C5E
Signing time:             Tue 18 Aug 2026 18:57:47 +0000
Manifest this update:     Tue 18 Aug 2026 18:57:47 +0000
Manifest next update:     Tue 25 Aug 2026 18:57:47 +0000
Files and hashes:         1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: cAsGHPqeDQS/UMZEaxbcu9f7aKGKGlU1iAKx0MsE1ng=)
                          2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
                          rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
        Validity
            Not Before: Aug 18 18:57:47 2026 GMT
            Not After : Aug 25 18:57:47 2026 GMT
        Subject: CN=6a84ab2b-6329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:88:d0:71:21:36:4c:9f:22:8f:6b:c5:c7:
                    8a:5d:05:d6:f3:a6:05:f5:9b:ab:ae:e4:a6:94:19:
                    1d:e9:03:46:e7:1c:2f:49:46:57:ec:7b:32:52:c4:
                    3a:a2:68:45:19:56:ea:9a:a7:da:31:1f:2b:76:7a:
                    92:75:50:88:89:f2:b5:99:3b:b2:ff:c9:c1:43:96:
                    61:13:d7:c2:0f:f7:9c:22:43:2a:71:54:10:24:15:
                    6e:fa:0f:41:95:e8:d1:bc:ea:89:5c:83:f9:fe:d6:
                    8e:8b:c1:77:35:0b:3a:fd:e5:14:5a:ab:ee:c2:05:
                    ba:48:bb:bc:ef:33:7d:38:d3:a3:17:c3:b7:2d:2f:
                    8a:c6:a1:0c:2c:df:9c:a3:a9:4b:3d:71:b5:73:6b:
                    87:60:b2:d5:16:68:23:b2:8c:46:94:f8:62:fa:10:
                    82:c0:3a:c3:9c:e0:0f:b3:19:ce:4d:7b:cf:2d:e2:
                    75:08:ad:37:ab:a7:92:78:c8:27:0a:61:57:14:ab:
                    89:d7:d0:d0:08:bc:f1:3f:48:60:dc:ae:10:c4:fe:
                    5c:1e:ab:ce:cc:97:4d:d6:9a:e6:e5:09:ba:26:d0:
                    fb:27:07:26:8c:48:c9:a9:12:3d:7b:2c:5c:f5:a4:
                    84:fb:51:25:fe:f2:a1:20:dd:74:01:77:ba:94:2e:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8C:DF:62:8E:36:ED:5A:70:89:DB:CD:6D:F7:73:70:A4:7C:A5:47
            X509v3 Authority Key Identifier:
                keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:73:1b:f8:a4:69:cc:cb:de:56:76:09:9c:c7:40:e6:69:
         cb:ff:1b:14:25:aa:a8:27:8d:5f:6f:f6:57:6c:e7:0b:8e:19:
         a1:22:69:1d:8c:45:8e:98:98:db:58:e2:0b:39:b1:80:c5:5e:
         cb:f9:b9:3f:6d:00:29:82:1f:1e:a1:d6:ec:45:42:0f:17:30:
         6b:bc:ad:95:13:63:33:b2:f9:2b:55:1d:03:db:75:f1:47:7a:
         2e:4c:cd:89:74:a5:ec:53:f5:17:fc:fb:08:ed:ea:c9:49:17:
         b1:88:b6:6e:3e:19:db:52:8b:93:2d:15:16:5a:75:b9:ed:8b:
         05:9f:46:3a:af:ff:f9:1f:42:0c:84:68:9b:78:ba:91:68:32:
         53:b4:2f:00:46:9f:4c:45:51:df:8b:54:aa:d8:c4:22:e6:68:
         22:13:da:ac:52:cc:35:6b:d7:8f:cb:4e:d5:c9:9b:27:2f:d7:
         f2:11:f5:4b:3d:7b:f2:d2:2c:e5:fe:df:0f:97:a1:43:d5:d0:
         66:77:d5:6a:fd:c1:b6:79:da:27:ef:19:07:ff:b8:6a:aa:73:
         36:9b:86:3e:ea:e9:e7:1d:16:1c:6b:57:93:f8:dc:59:6f:38:
         5f:68:2f:f5:db:52:7a:93:1d:df:ac:06:5c:75:a9:aa:1a:9b:
         0e:d3:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:50 2026 by rpki-client