Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File:                     UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier:          qRhnk/zYYEmnEjExnjCVO2hwZCwofWCDoTZrn0afA8o=
Subject key identifier:   2D:8D:94:15:7B:B8:CB:28:4B:9B:D9:88:2E:BE:F5:72:6E:21:7C:FC
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer:       /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number:          016E
Signing time:             Tue 27 Oct 2026 05:26:22 +0000
Manifest this update:     Tue 27 Oct 2026 05:26:22 +0000
Manifest next update:     Tue 03 Nov 2026 05:26:22 +0000
Files and hashes:         1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: HjcHHxzvpqBm22i+kgyedfb5vRvflufADx0l7jIbhS4=)
                          2: 1D8F5C2E5B7F11F1B697DE78A6833773.roa (hash: klWUSQgK3IOTMfJYCoyqo1alTlwHxclvm8Ll88mJta4=)
                          3: EA7DD3B85B8011F19AAA063FA7833773.roa (hash: ga7RmHBxUIf+hUQhJPOXCSIER/vz19Y1P9LRsEGGGbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
                          rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
        Validity
            Not Before: Oct 27 05:26:22 2026 GMT
            Not After : Nov  3 05:26:22 2026 GMT
        Subject: CN=6ae035fe-0e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:2c:06:09:fb:ae:a5:e0:36:ef:99:d4:95:
                    93:8e:28:09:73:7d:f9:53:11:b6:fe:1d:bd:6c:bc:
                    72:27:b4:18:0d:89:2e:9f:d3:50:d1:e7:a4:3f:cd:
                    e8:da:9f:34:0a:fd:82:e2:d6:84:66:71:23:fa:42:
                    8d:63:d1:55:f6:c6:b6:4d:03:76:57:c5:c1:33:42:
                    10:f0:ca:0f:02:00:19:5c:3e:90:bd:de:79:12:14:
                    9b:1e:88:21:8b:10:d8:b9:a1:c4:22:6a:79:93:65:
                    6f:5a:6d:32:a7:16:e1:8e:46:4c:42:35:7b:4c:6f:
                    75:6f:d8:3b:8c:fd:0d:39:dc:71:d1:22:41:ef:da:
                    1c:58:a0:5a:61:64:42:94:f0:fa:f4:0e:36:31:83:
                    d5:0a:b9:81:3c:fb:8c:59:3c:0b:3a:01:6a:a4:64:
                    eb:28:da:55:0c:13:74:40:bc:c4:62:98:d7:e6:b2:
                    b4:a9:21:ba:b8:41:b7:a7:2a:ec:44:58:ed:08:97:
                    a2:e5:cc:41:49:99:66:28:1e:65:e0:42:a4:fc:e4:
                    89:0d:72:51:e5:20:8a:53:eb:8d:3b:78:77:cb:42:
                    c7:1b:6f:02:7c:f4:c3:4a:3e:aa:2e:75:b0:b4:8d:
                    f5:4b:fa:82:aa:aa:88:af:66:59:f7:ba:04:5e:00:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8D:94:15:7B:B8:CB:28:4B:9B:D9:88:2E:BE:F5:72:6E:21:7C:FC
            X509v3 Authority Key Identifier:
                keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:f5:2a:35:9e:7e:39:48:c4:22:71:49:9b:c4:c1:09:5f:
         3e:3f:fb:1b:78:be:a4:dd:0a:4f:cb:6c:58:f0:6f:59:d1:ee:
         23:85:50:16:d2:9c:01:69:60:6b:45:f2:ce:d5:80:29:db:38:
         e3:5b:6f:6f:9c:7d:1a:d7:e9:09:d3:bd:09:c3:61:9f:5a:9d:
         64:de:54:0b:2f:cc:00:31:51:69:0d:81:25:6f:8f:57:5f:18:
         94:01:2b:72:a0:f2:c4:de:b8:88:9e:fa:94:f8:e5:3e:b1:bc:
         ba:82:47:4c:c6:1d:14:6b:f8:7c:4b:dd:58:1b:0b:03:8f:ad:
         ae:d3:e1:e6:61:ca:30:53:98:41:ec:7e:72:29:c6:b2:4d:a3:
         74:82:bc:0b:e9:40:41:3c:b4:22:51:67:5d:36:85:52:fa:fa:
         6a:03:d8:39:85:ed:73:0f:7b:a3:c8:12:4a:23:6d:d6:b2:3a:
         97:2c:fe:fc:2a:27:ee:9c:0a:30:04:f6:81:78:b1:4c:80:c8:
         c6:74:06:ac:8b:07:3b:be:a5:91:0e:8a:d0:ec:ff:3a:e5:89:
         78:2d:c9:d8:49:f8:50:70:32:18:d7:a1:2e:17:ad:96:26:c9:
         ae:93:8b:52:70:25:96:2e:c5:a2:29:1a:37:a3:52:10:a0:2f:
         6c:1e:01:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRCMjcxMTAvBgNVBAUTKDUyM0FDNThEQTk4NDBEMEIxQ0FBODlCREZGOUUwRENF
NDY3NjdDNEEwHhcNMjYxMDI3MDUyNjIyWhcNMjYxMTAzMDUyNjIyWjAYMRYwFAYD
VQQDEw02YWUwMzVmZS0wZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowMsBgn7rqXgNu+Z1JWTjigJc335UxG2/h29bLxyJ7QYDYkun9NQ0eekP83o
2p80Cv2C4taEZnEj+kKNY9FV9sa2TQN2V8XBM0IQ8MoPAgAZXD6Qvd55EhSbHogh
ixDYuaHEImp5k2VvWm0ypxbhjkZMQjV7TG91b9g7jP0NOdxx0SJB79ocWKBaYWRC
lPD69A42MYPVCrmBPPuMWTwLOgFqpGTrKNpVDBN0QLzEYpjX5rK0qSG6uEG3pyrs
RFjtCJei5cxBSZlmKB5l4EKk/OSJDXJR5SCKU+uNO3h3y0LHG28CfPTDSj6qLnWw
tI31S/qCqqqIr2ZZ97oEXgB5vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2NlBV7
uMsoS5vZiC6+9XJuIXz8MB8GA1UdIwQYMBaAFFI6xY2phA0LHKqJvf+eDc5GdnxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEIyNy81MDA2MThEQ0M2
RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURRc2Nxb205XzU0TnprWjJm
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VqckZqYW1FRFFzY3FvbTlfNTROemtaMmZFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEIyNy81MDA2MThEQ0M2RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURR
c2Nxb205XzU0TnprWjJmRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXDf1KjWefjlIxCJxSZvEwQlfPj/7G3i+pN0KT8tsWPBvWdHuI4VQFtKcAWlg
a0XyztWAKds441tvb5x9GtfpCdO9CcNhn1qdZN5UCy/MADFRaQ2BJW+PV18YlAEr
cqDyxN64iJ76lPjlPrG8uoJHTMYdFGv4fEvdWBsLA4+trtPh5mHKMFOYQex+cinG
sk2jdIK8C+lAQTy0IlFnXTaFUvr6agPYOYXtcw97o8gSSiNt1rI6lyz+/Con7pwK
MAT2gXixTIDIxnQGrIsHO76lkQ6K0Oz/OuWJeC3J2En4UHAyGNehLhetlibJrpOL
UnAlli7FoikaN6NSEKAvbB4BWg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:15 2026 by rpki-client