Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
File:                     1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft (raw, json)
Hash identifier:          CNvSPny9+Mjk8P2jDH3dHE7YPexYrvDVCP0PDUs10XI=
Subject key identifier:   1A:C6:F4:DD:83:B9:8E:2A:31:D8:22:4B:52:0E:A0:DD:05:58:E3:FE
Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
Certificate issuer:       /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Certificate serial:       17F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
Manifest number:          17C0
Signing time:             Wed 28 Oct 2026 16:37:53 +0000
Manifest this update:     Wed 28 Oct 2026 16:37:53 +0000
Manifest next update:     Wed 04 Nov 2026 16:37:53 +0000
Files and hashes:         1: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl (hash: ib/DkmXRkCAzDPYSdqdnuQYSrPRhlgV6AA9RGayNg0s=)
                          2: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (hash: QOoxAPcSDNYd7ZeuO509c/Bc0Tll0c/S3y+OYF8yyjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
                          rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 16:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6131 (0x17f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
        Validity
            Not Before: Oct 28 16:37:53 2026 GMT
            Not After : Nov  4 16:37:53 2026 GMT
        Subject: CN=6ae224e1-9ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:c1:05:81:c7:70:cb:df:4e:64:bf:cf:f6:
                    f8:0f:8c:75:24:d7:55:96:e5:6f:1e:da:a2:22:05:
                    36:db:b9:f3:57:ad:26:34:53:83:42:da:a9:55:fe:
                    2b:38:80:37:c5:13:cc:39:bf:77:c2:eb:53:62:86:
                    92:4d:e3:98:c0:56:ad:c9:c7:b9:d9:77:a8:b6:f3:
                    12:6c:9e:a3:be:9b:08:cd:aa:a3:e0:08:f2:95:ba:
                    bf:35:0b:d1:c1:6f:48:be:ed:0a:ce:a0:90:43:1f:
                    9d:a2:6c:bc:f0:b4:4d:a6:e3:c6:e0:20:8d:6d:83:
                    57:ba:d2:f1:c6:1c:3d:d9:13:d2:f6:6b:1b:e1:ba:
                    ee:c8:67:cf:60:24:52:b1:cc:ae:0f:83:f7:94:d4:
                    a6:3a:3b:04:0d:82:f5:f7:d9:53:cb:db:0f:59:7b:
                    ed:5a:46:62:d0:1b:bb:8e:67:fe:98:d6:9c:2d:f0:
                    ad:a7:e9:b5:11:17:7f:d8:36:5c:45:28:23:d4:e6:
                    2f:1e:0a:49:c0:8a:cd:4f:c7:e9:07:a7:98:bb:0a:
                    84:dc:de:3c:5e:7b:20:f1:61:eb:ce:4f:9a:ea:de:
                    dc:02:8a:e8:e0:56:e8:05:0d:76:d2:ad:3a:4b:12:
                    fa:60:98:fb:3f:2b:2e:a8:e7:8d:bf:7c:79:ab:57:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C6:F4:DD:83:B9:8E:2A:31:D8:22:4B:52:0E:A0:DD:05:58:E3:FE
            X509v3 Authority Key Identifier:
                keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:80:a5:cc:cf:63:48:d9:95:35:e5:d9:03:2e:ad:c6:01:45:
         61:d7:ca:a9:53:f4:94:79:2c:0e:37:43:52:48:78:05:8b:bd:
         b7:00:07:43:b6:d1:3d:aa:93:e1:bf:50:db:db:3c:13:28:dc:
         f0:e2:ee:54:69:bb:05:9f:c2:50:a2:0c:1a:18:f8:22:0e:bf:
         df:7b:de:be:c6:ef:4e:6b:a4:a8:59:c4:c5:fd:7e:08:42:58:
         c6:46:2a:43:1b:8b:17:ae:f8:5c:7d:26:6c:91:7e:b7:2b:8f:
         94:69:7c:1d:d1:ec:4f:7b:69:87:3c:60:82:2f:39:31:11:36:
         bb:bb:66:c6:c7:72:8d:eb:1b:7d:34:96:76:22:3e:5f:c5:47:
         7b:c8:69:25:e2:96:45:5f:d7:8f:77:da:a8:34:b7:6a:0a:56:
         a7:1d:6f:48:e1:73:f7:ef:55:fa:75:19:11:80:eb:62:3b:4a:
         5c:14:9c:a1:88:dc:79:12:5d:97:75:dd:1c:7e:3a:9c:55:74:
         bf:0a:b2:d2:94:f8:67:43:08:d4:99:ba:cd:e2:b9:73:af:42:
         67:5f:d6:f0:7d:fe:81:8c:36:c4:3d:ca:f6:a8:8e:92:53:57:
         87:31:0d:a9:22:76:f7:ec:f0:3d:07:1d:b7:8f:21:1c:c5:f3:
         d4:18:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:56:17 2026 by rpki-client