Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
File:                     uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json)
Hash identifier:          UwTrPvF7zPv/CXTuVqrA6oTawNThHcY08NwV8v9N1U8=
Subject key identifier:   F7:07:B7:26:D0:F3:61:1D:63:E0:49:BD:D2:DA:E3:B2:DB:B6:74:E0
Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
Certificate issuer:       /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Certificate serial:       05D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
Manifest number:          05CF
Signing time:             Sun 04 Oct 2026 23:03:39 +0000
Manifest this update:     Sun 04 Oct 2026 23:03:39 +0000
Manifest next update:     Sun 11 Oct 2026 23:03:39 +0000
Files and hashes:         1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: WHkIiOWew1Z9JwRRyVqJziFvb4Uf8YRC/U9/8vHGaLQ=)
                          2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: GPYE5Y2HwgNl8OKwBNP753iF7mxnvwMFHfPxqy4O8EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
                          rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
        Validity
            Not Before: Oct  4 23:03:39 2026 GMT
            Not After : Oct 11 23:03:39 2026 GMT
        Subject: CN=6ac2db4b-c188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:fd:ad:b8:30:21:10:13:2d:03:54:bd:89:
                    c4:5d:6b:a1:49:dc:6f:0a:68:12:44:ef:39:20:06:
                    5c:d3:a2:04:28:71:20:97:86:fc:77:b9:c5:74:e1:
                    ff:65:dc:4b:35:7a:57:bb:a9:96:86:f3:c0:d4:88:
                    6d:76:7b:21:94:98:2d:f2:91:4c:a4:dc:07:93:2e:
                    cd:5b:95:f8:45:7e:1b:5a:0d:55:5a:b9:9f:84:d2:
                    f8:99:5c:66:59:a5:b6:45:bc:4a:b4:4a:0c:36:8b:
                    6e:03:b1:91:bd:17:e9:04:9c:9b:f2:82:d6:d7:28:
                    0f:7c:00:a7:ff:50:d9:6b:67:1b:eb:ac:08:f1:d4:
                    a8:da:2e:cd:22:8c:e0:95:34:d5:f9:87:2f:f1:8a:
                    5b:9b:01:c3:2a:60:e6:f8:0e:58:f5:a8:f7:a6:05:
                    51:12:47:4f:0b:80:c6:43:6c:8a:de:c5:58:1b:36:
                    fd:46:55:d9:db:f4:6e:f4:75:4e:87:d0:90:f4:b1:
                    42:85:4d:b3:1b:02:8b:12:a1:66:90:f7:9e:13:5c:
                    3f:2e:8e:09:3f:5d:af:d4:86:37:b3:6c:bd:70:32:
                    c9:99:8a:fa:fc:f9:18:67:2b:67:67:fd:0d:01:e7:
                    62:ae:13:e7:6c:34:c8:87:f8:d7:a3:4a:14:6a:6e:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:B7:26:D0:F3:61:1D:63:E0:49:BD:D2:DA:E3:B2:DB:B6:74:E0
            X509v3 Authority Key Identifier:
                keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:77:d9:f0:99:34:64:bc:a5:63:f5:ca:b2:8c:38:1a:87:ba:
         a2:c8:af:8a:a2:67:a2:52:75:d0:f5:7d:a5:dc:4c:9d:8f:91:
         6f:2f:71:49:0a:f3:b3:1b:75:ad:5b:29:5d:33:e0:ea:c3:59:
         6a:8d:85:3d:38:b1:b9:78:d9:84:65:ee:1c:bb:cd:b5:d1:75:
         7f:32:5c:bd:ef:03:10:ec:cb:2a:7a:67:2c:4e:7f:12:fd:04:
         02:11:0c:de:3f:78:b0:e3:df:28:84:15:45:b5:ed:5d:5d:c8:
         33:f9:dc:bd:da:7b:52:fb:49:d3:f4:18:12:01:c0:b6:83:e8:
         ec:c1:15:68:1c:27:bc:d7:7f:2e:9e:f2:74:15:1a:f3:5e:96:
         15:e5:97:2e:0f:a8:51:61:c4:d3:8a:fb:ac:1f:9a:a7:fe:b8:
         8c:b4:35:06:11:7f:3f:2b:78:78:09:0c:2c:42:49:ae:b2:96:
         e4:fa:23:b4:3c:3d:c4:e9:0e:3b:2e:2d:29:81:2e:62:cc:1e:
         08:de:63:4a:41:b3:85:38:49:59:5c:44:73:74:0f:04:f4:67:
         f1:9c:b3:71:df:95:af:f7:99:b9:76:0e:78:df:8c:28:ee:b9:
         86:d9:61:4f:8e:34:62:d8:84:85:52:05:36:b9:34:3d:d5:ad:
         de:04:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:55:24 2026 by rpki-client