Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File:                     UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier:          zkNj7MqcfV5pOfgJ6NXnhhRTd2qE3fHb0McMWKTprJY=
Subject key identifier:   A2:FC:A4:68:87:59:32:B9:9D:C7:EE:59:B0:C9:8B:EC:C0:03:8C:2E
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       36B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number:          35DC
Signing time:             Sat 24 Oct 2026 15:17:35 +0000
Manifest this update:     Sat 24 Oct 2026 15:17:35 +0000
Manifest next update:     Sat 31 Oct 2026 15:17:35 +0000
Files and hashes:         1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: xpUyfZ4oGr/Jh+zBCwkTqqD6MBXq5VzrbtJ2W8PMc9M=)
                          2: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: xrmdLLEmHBEXKfK+TG0Dk+IrDsCMqxTM2oXKFCyUMsU=)
                          3: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: sB4yEk24brV7U55HdiVRGWHChZuTolQ5lII/wEtR7uo=)
                          4: CvF61BOFafSlrQARFiDhR1wj240.asa (hash: Z3Om+Oo4m2TA8gDHyU8MwrdiQpPS17pYZPJ3f0YFioA=)
                          5: Cyg3opLjC97GVIk7PxA0uSBCM7A.asa (hash: HLSzl81SxyEpBVwpRVxdTXRYVuWc7FdoDGlGlpt1rDk=)
                          6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: 436zBDnPnGZ3SOhOykoQMMQvMWG9r9+JB6vVgzRzKCE=)
                          7: SA8-IgRcu9eWytErliVq8WNLNEE.asa (hash: m4RjPxFhZ2AhYAh8Ic3/AAwmGM78o5cePqPFUNH4ZLk=)
                          8: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: eE89PGe/2iXoWPgaTFIDnebqRit5cWEOVZbQe/DuWbY=)
                          9: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: tYLxo7jbuVluJdA3j6VUBn1vuF7ypNJl6KNhTxT5YiQ=)
                          10: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: KaqrJVN+HzyD1nsBvHMD4Hbmck46T+5dGXtKWP7fEGY=)
                          11: A1QA4uTgoOvmNSFfsW45pmvLtbQ.asa (hash: whku0tjjZYdGS8Z+ML0j96kj6gswzsgFL8e0iin7Jbw=)
                          12: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: +sR0reUxc7B8aN9ftONoJd9EcDxqs4AGo23fd7H99yU=)
                          13: 5C3C24DA7C3A11F19502E96961A30FBC.roa (hash: +77vCVU7zK9eDrNIk/k034MQetemZz3M59FaR+fpfgs=)
                          14: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: MHuC/c0u9rLMw5yxdb8yo13RMMDAL1YViJT5Op2QWCw=)
                          15: bgy24N1KeKRHCayREa6bv93qk3k.asa (hash: lYedzIZpF4ZsVxphJ6RinN/nXnotrunx1dWFk9G2MeY=)
                          16: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: skq6JStmhqRgIs8z4El231wzMKzcPqomqPKtDgLrZik=)
                          17: n1wGO_BrdvLw-lFKsi_-ekuaTiQ.asa (hash: ZWW5pwD9DlNkuoKy9efAHiCeNij2lsr7bANlrYOyKWY=)
                          18: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: kefR9n9mBEOogfhkWHbCEREeJRCl5YzlKLqQiZzyJkc=)
                          19: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: ARFGvtWgIhsDD88anAt/fT68RSG6NvFwb2tGcNJ0NZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14007 (0x36b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Oct 24 15:17:35 2026 GMT
            Not After : Oct 31 15:17:35 2026 GMT
        Subject: CN=6adccc0f-2b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:3a:d2:ac:a9:da:17:b9:05:83:cc:02:b9:
                    8a:95:12:ad:14:dd:48:33:53:3c:02:f6:9a:7f:fa:
                    71:f5:5e:b0:25:44:6d:81:58:d8:80:8e:56:84:6f:
                    48:d9:0b:da:75:74:48:9d:40:e8:bd:e5:a3:22:82:
                    97:ae:fe:6e:95:73:6f:67:bc:a8:38:1d:1d:2d:fe:
                    4b:b5:b4:1c:e5:71:64:91:dd:13:a4:65:0f:1d:9e:
                    27:e2:2b:cb:ff:9d:be:f0:bc:ec:6f:4e:a2:88:24:
                    29:8c:76:dc:8e:0b:07:55:aa:dc:d6:52:9e:fd:75:
                    8a:f4:b2:0d:9e:08:ea:aa:66:71:ee:98:45:67:78:
                    d1:3e:87:4e:a2:10:2e:02:d0:02:f0:55:37:bd:b6:
                    60:50:da:95:77:52:91:82:25:e5:6d:1c:52:c9:cf:
                    19:78:2a:81:06:b0:b4:10:0b:79:93:a5:d4:d0:87:
                    03:52:c6:95:e2:96:bf:5a:65:8c:4c:60:c6:90:f4:
                    8d:18:ff:56:17:5b:6f:20:3b:f5:7a:cf:13:79:07:
                    d6:5e:dd:76:8d:bf:a0:69:71:5b:4d:da:fe:dd:cc:
                    b1:60:c4:c3:4e:a9:94:4a:c6:09:c2:b5:68:06:f0:
                    7b:80:29:bb:43:da:44:3a:42:a9:ca:63:8f:cd:06:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:A4:68:87:59:32:B9:9D:C7:EE:59:B0:C9:8B:EC:C0:03:8C:2E
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:10:83:bc:6f:bf:7a:27:70:7d:05:52:eb:b9:4d:ff:0a:49:
         fc:1a:af:ef:64:59:06:ff:91:ca:e5:b6:f7:3a:b3:e7:b5:2f:
         12:44:02:2e:05:d3:a4:3c:1d:7e:9e:d8:14:ff:a2:87:f5:fc:
         ab:92:28:44:fb:fe:0f:53:36:bd:f0:69:d5:8e:21:9a:a8:5f:
         32:32:3e:05:4a:77:70:ff:35:7f:ee:79:90:70:01:82:37:e6:
         09:02:7a:63:bc:2c:b9:58:bc:f3:3f:7b:76:90:1f:e0:a5:e4:
         a7:f9:c0:32:80:75:d0:d0:45:f9:f9:3e:d5:2a:a6:06:6e:5c:
         2b:da:7e:89:65:8a:bd:7e:a9:cd:72:9d:d1:23:5a:58:4f:06:
         0b:56:6c:86:a9:32:e9:9a:3a:70:23:4d:d0:90:82:57:f6:23:
         cb:c7:84:94:c0:33:ca:5d:d7:8a:a5:cb:9e:25:f6:85:5c:9e:
         7e:cb:41:43:71:37:f6:34:a7:65:bc:87:16:b9:0a:bd:10:6b:
         fd:11:88:de:12:cc:9c:62:1d:68:73:13:ce:21:4a:79:a5:5a:
         aa:bf:e6:6f:6a:e5:79:ad:fa:01:ea:0d:af:b9:49:87:ca:2f:
         a2:02:bf:31:56:a2:88:f0:28:96:44:d3:19:ab:9f:b2:14:bb:
         1f:db:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:28:41 2026 by rpki-client