Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
File:                     UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json)
Hash identifier:          1dsp4jDUsWTTzxpH/dn+uIabJhWpr1+ScnEpsPh6QAo=
Subject key identifier:   76:85:CB:47:AA:3D:41:68:7D:1D:70:68:14:35:67:BE:5B:26:41:64
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
Manifest number:          01C0
Signing time:             Mon 05 Oct 2026 04:13:23 +0000
Manifest this update:     Mon 05 Oct 2026 04:13:23 +0000
Manifest next update:     Mon 12 Oct 2026 04:13:23 +0000
Files and hashes:         1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: K0x7olmUocokKtmsT/j9FirYGmrbZNBTmKzyXRmwtRo=)
                          2: C23053B019A911EF97366417C4F9AE02.roa (hash: oIgJzpLs8FeOdJlyApHVC57ihP+eNhUbmgmPUwprt54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Oct  5 04:13:23 2026 GMT
            Not After : Oct 12 04:13:23 2026 GMT
        Subject: CN=6ac323e3-2f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:b2:eb:ee:91:fa:89:7c:f8:a9:7b:14:8a:
                    27:fd:f4:7b:99:0c:db:09:de:0e:52:57:d0:62:79:
                    90:fa:3b:e8:c2:30:ff:e8:73:32:04:04:17:d3:0c:
                    18:87:3c:69:00:5a:87:0c:d0:c0:9d:2b:ea:a9:24:
                    7a:5e:5f:ac:31:1f:e5:08:ec:be:64:d3:c0:f1:f9:
                    e8:8a:cb:07:38:9f:72:73:88:86:1e:87:0f:2e:14:
                    b7:ad:d3:5e:54:4c:5d:cd:38:58:8d:a7:96:a3:8f:
                    c5:10:f2:11:6c:ac:b8:bf:9a:cb:0f:fd:32:e0:29:
                    99:5d:77:c3:2c:a5:26:bd:a2:e2:af:18:cf:6e:93:
                    e1:ea:05:31:df:2a:f4:4f:94:89:aa:0b:66:c4:45:
                    f1:11:f5:6a:78:d2:ff:12:2b:fa:df:61:75:41:14:
                    77:3f:5c:29:aa:d9:e6:e9:26:bf:63:36:4a:9c:11:
                    1e:43:a5:f1:ae:ed:90:01:da:d7:84:ed:96:ae:a4:
                    a8:9e:84:f2:eb:af:f9:8f:7f:80:84:88:c5:39:7b:
                    7d:89:89:bd:35:be:6d:eb:4a:45:35:8d:5c:ae:c5:
                    f5:4c:0b:eb:f2:b9:e4:af:06:94:4c:cd:1c:26:95:
                    38:d8:6c:72:07:ed:2f:97:86:24:dd:9c:8a:90:80:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:85:CB:47:AA:3D:41:68:7D:1D:70:68:14:35:67:BE:5B:26:41:64
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:dc:e5:ea:e0:76:61:5c:df:c5:32:d6:c7:77:7f:2f:01:
         24:6a:da:b9:7e:ea:28:8d:b1:1f:8b:c5:96:d6:a9:f7:67:11:
         f2:14:b6:70:93:a5:1e:f1:22:54:78:ce:3e:6b:40:de:70:21:
         81:64:e4:41:42:50:d5:4e:21:30:cd:9a:24:cd:72:f0:ea:e5:
         e8:2c:ce:6a:77:b4:27:5d:9d:92:ac:60:03:0f:da:ff:e6:39:
         b7:12:28:e8:63:45:c9:31:b8:d0:70:71:d9:e8:eb:aa:48:69:
         7a:35:d8:90:25:fd:f6:0e:c3:a8:0f:4c:07:f1:61:db:7c:6f:
         11:e5:d5:07:70:06:d2:71:63:74:c4:a3:06:d3:7e:25:27:13:
         44:be:5c:92:44:1d:ac:22:c7:2a:e0:b0:49:a4:8d:32:04:64:
         11:02:de:cd:08:82:ab:8a:c9:b1:f3:7d:58:24:e8:a4:d9:bf:
         0d:f4:ea:85:26:11:7e:f6:3b:3e:16:47:cd:33:ca:b1:11:c0:
         c2:c6:01:04:e9:bc:8b:e5:99:21:6f:9a:54:22:9a:8c:2d:2d:
         13:d6:fe:b1:d7:4e:bc:8b:fe:3c:01:cf:04:78:5e:c8:96:9b:
         9f:9b:ba:f4:7f:fa:8e:95:5f:92:59:7a:f1:1b:ac:2c:d1:17:
         12:3f:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:35:04 2026 by rpki-client