Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File:                     UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier:          5MMCgUoC1JxLZf9qtmIrRaCMkIkZD7B9DEM8gaC2cys=
Subject key identifier:   34:8A:96:EF:29:F8:F2:3B:BC:41:91:CB:1A:31:C2:B0:91:15:14:54
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer:       /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number:          0867
Signing time:             Tue 06 Oct 2026 21:03:18 +0000
Manifest this update:     Tue 06 Oct 2026 21:03:18 +0000
Manifest next update:     Tue 13 Oct 2026 21:03:18 +0000
Files and hashes:         1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: 9h+2m2H0UtVHWQ8v317dvpIsYHhzoBzDZ/wJyQUihTc=)
                          2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
        Validity
            Not Before: Oct  6 21:03:18 2026 GMT
            Not After : Oct 13 21:03:18 2026 GMT
        Subject: CN=6ac56216-edde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:5b:00:74:20:80:bd:af:93:90:19:7a:e1:
                    0e:35:5f:01:a5:5e:f1:89:a0:b5:31:05:7f:8b:8c:
                    df:7a:48:2d:c5:f8:03:47:be:2c:7d:ea:ca:6e:e6:
                    ef:c3:78:ee:c4:4e:fe:12:61:d3:bf:25:8a:88:be:
                    dd:86:fa:b0:2f:8a:5a:16:e1:91:f5:76:63:c9:da:
                    59:37:02:e1:f5:26:1c:ab:b9:5a:6f:cd:a5:04:32:
                    48:da:68:d3:67:72:48:5c:e5:33:fb:42:31:be:ff:
                    c0:32:e8:ba:26:27:76:f0:a0:e7:77:6f:12:df:1c:
                    57:4f:73:35:b5:cc:75:d7:0f:76:63:9d:09:14:54:
                    fc:9b:c8:2e:d0:5a:b4:60:d8:a9:3c:47:2d:4a:e1:
                    4d:d4:1c:56:ab:ed:d1:0b:9f:d4:f9:df:23:d7:30:
                    91:d4:8e:82:9e:b8:b5:7a:ab:20:60:a3:c2:4d:9e:
                    07:fc:65:60:e8:40:00:2a:26:7e:b0:23:4e:51:42:
                    57:a1:32:0f:cc:96:f4:71:5f:95:18:11:73:9d:0f:
                    c9:9b:2f:db:d0:ae:a1:13:cd:3f:36:43:a5:aa:76:
                    fc:67:cc:c2:78:af:99:50:a3:e6:5f:88:61:aa:63:
                    bc:98:6e:5a:0a:e9:ba:4d:d2:5a:8d:6d:f9:2f:58:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:96:EF:29:F8:F2:3B:BC:41:91:CB:1A:31:C2:B0:91:15:14:54
            X509v3 Authority Key Identifier:
                keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:6a:19:13:65:9d:57:0b:53:b3:18:bc:b9:bd:62:4f:92:
         44:f5:72:29:ae:59:c7:31:95:fd:36:b1:30:4a:da:b1:b6:ed:
         74:97:80:5e:e1:61:69:02:49:d9:23:58:a4:47:73:63:25:1a:
         49:af:2f:a7:fb:55:3a:2f:53:3a:6e:df:3c:ad:34:51:66:12:
         c6:dc:f4:a3:ab:ff:87:6b:e6:00:7a:7c:c5:32:27:fd:e5:06:
         af:13:d2:77:da:af:3e:cd:7e:a2:1b:ef:4e:e4:25:b2:a0:25:
         9a:58:cf:03:69:ed:df:37:75:56:8d:fb:7c:29:4c:27:da:55:
         c0:24:21:a4:06:46:3f:4f:21:ca:ec:1e:f0:01:a6:56:75:43:
         6b:8c:bb:68:59:56:14:57:60:c4:5d:db:0c:c1:2d:1b:da:45:
         79:05:92:27:a8:af:c0:f2:5e:fb:8b:f2:75:2e:c1:64:54:f2:
         05:c3:f6:99:67:aa:c7:04:6a:d1:3c:3a:51:c5:f5:09:b8:6b:
         54:d7:d2:93:a2:20:38:fb:61:bb:e7:ae:ec:d7:19:43:73:7b:
         98:c6:9b:be:82:2c:18:e0:ae:2f:60:35:eb:10:04:bd:2c:0a:
         81:fd:34:03:c6:8d:09:5d:c7:60:cb:cf:3d:cf:f3:24:52:78:
         ad:3e:94:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjYxMDA2MjEwMzE4WhcNMjYxMDEzMjEwMzE4WjAYMRYwFAYD
VQQDEw02YWM1NjIxNi1lZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkU5bAHQggL2vk5AZeuEONV8BpV7xiaC1MQV/i4zfekgtxfgDR74sferKbubv
w3juxE7+EmHTvyWKiL7dhvqwL4paFuGR9XZjydpZNwLh9SYcq7lab82lBDJI2mjT
Z3JIXOUz+0Ixvv/AMui6Jid28KDnd28S3xxXT3M1tcx11w92Y50JFFT8m8gu0Fq0
YNipPEctSuFN1BxWq+3RC5/U+d8j1zCR1I6Cnri1eqsgYKPCTZ4H/GVg6EAAKiZ+
sCNOUUJXoTIPzJb0cV+VGBFznQ/Jmy/b0K6hE80/NkOlqnb8Z8zCeK+ZUKPmX4hh
qmO8mG5aCum6TdJajW35L1h+WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDSKlu8p
+PI7vEGRyxoxwrCRFRRUMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq
X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf8pqGRNlnVcLU7MYvLm9Yk+SRPVyKa5ZxzGV/TaxMErasbbtdJeAXuFhaQJJ
2SNYpEdzYyUaSa8vp/tVOi9TOm7fPK00UWYSxtz0o6v/h2vmAHp8xTIn/eUGrxPS
d9qvPs1+ohvvTuQlsqAlmljPA2nt3zd1Vo37fClMJ9pVwCQhpAZGP08hyuwe8AGm
VnVDa4y7aFlWFFdgxF3bDMEtG9pFeQWSJ6ivwPJe+4vydS7BZFTyBcP2mWeqxwRq
0Tw6UcX1CbhrVNfSk6IgOPthu+eu7NcZQ3N7mMabvoIsGOCuL2A16xAEvSwKgf00
A8aNCV3HYMvPPc/zJFJ4rT6U8Q==
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:07:52 2026 by rpki-client