Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          pYa2rdps8J4xpsx4aMKO7mdm6Wo1pg4r8mSOZuQpdtQ=
Subject key identifier:   72:B2:FA:27:9A:4D:50:21:3B:58:D6:3B:9F:F6:B9:7E:20:31:1F:6F
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       25ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          2544
Signing time:             Tue 06 Oct 2026 15:46:53 +0000
Manifest this update:     Tue 06 Oct 2026 15:46:52 +0000
Manifest next update:     Tue 13 Oct 2026 15:46:52 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: TRZlaONw1wcaLzUhzG2faVZpfaes5GUB8PX4Y+W4JE4=)
                          2: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: 1CMnEpOaVbO0k0JzlWaPtEIAbS4jjRsdEzoixyGeGHw=)
                          3: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: v2uBEmCEIm5pvZ9EH2l4nyK/MxwsL3nTuItKfaCsFqI=)
                          4: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: fuNutpFKQClH2VPB3cnbTYIb4iGCUV8UeRErUE10Ezo=)
                          5: 59B3485028C111E7A885571AC4F9AE02.roa (hash: 6UgOGQv0Ctje2VZDbPHgfGoDZCHN2/IGI8BJAut7+dw=)
                          6: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: tXBcw9heBb1mwYiu3J3UaWSpFSO8fD6ykc4anHFjygY=)
                          7: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: Ob4/NasTDkXwh6Ue75zCUaNsjqAbXrMtsg1xyaciVhc=)
                          8: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: R5wiapQyzv4PFdGIbESWbFC1/ORnX+w1AeINSqKu1Fw=)
                          9: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: DWCznIVbJukLHG+0Z6MmRrGlxJlVrbrdta4EWriOjaI=)
                          10: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: Sbs7sxOrn8/OzTIIzRbjhzhJW6gEsSZ2e7AVPVWMNws=)
                          11: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: JbDlEM/odCORQN2cHskqQP03mHShncMFQhmxSE5G3y8=)
                          12: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: 1UtYRjjh9qM25iS1XD5qeypwC+ASaYWF8u9x+N60Z5I=)
                          13: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: /GI7Xb+UM3KOtcERi36EejwBZCQbAwsbnf9p+9iQrZU=)
                          14: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: S/SJPo8hBAyeeEVgtq0TXCoa1DWmA3TcOc6W0YSiYd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9709 (0x25ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Oct  6 15:46:52 2026 GMT
            Not After : Oct 13 15:46:52 2026 GMT
        Subject: CN=6ac517ec-30d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:5e:1c:67:12:fd:9c:cd:4a:04:54:c5:c0:
                    38:82:2c:52:f5:88:84:a0:50:5e:b9:63:0a:b3:47:
                    86:f1:3e:bd:c1:b7:23:28:f4:f1:cc:21:a3:19:b0:
                    80:9a:45:4b:8d:ab:c7:b2:4a:c7:7d:f1:9a:b0:42:
                    be:32:9e:81:b2:63:66:46:db:64:bf:95:b5:ad:72:
                    57:94:6c:05:82:cb:51:d2:58:67:61:ad:fe:72:70:
                    c9:71:c5:ac:45:67:e7:66:da:f7:e7:c7:01:a4:4e:
                    02:8e:f1:90:f4:7b:fc:b3:a1:52:07:28:db:40:92:
                    14:ec:3b:31:40:57:e4:82:22:d6:4e:87:f1:1d:6e:
                    7f:45:bb:23:25:5e:84:7a:d3:ff:e5:78:72:c7:69:
                    89:a4:e4:94:42:e9:f3:53:f2:a5:ef:4f:a9:86:79:
                    ae:d0:6d:5d:21:6c:68:46:cc:c2:1e:c9:55:c0:2a:
                    c2:aa:02:8d:49:c4:dc:d8:55:db:01:5f:dc:75:7f:
                    ad:c3:15:f3:c0:d6:57:c0:44:6f:9e:9f:fd:02:eb:
                    b2:46:5d:b3:b3:85:b8:5b:7e:3e:b3:92:a1:3f:f6:
                    cf:e1:9b:fb:a1:2d:82:de:15:31:7e:36:a8:c0:c4:
                    b1:13:37:9c:b8:10:2c:ac:2f:07:26:02:f1:d4:25:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:FA:27:9A:4D:50:21:3B:58:D6:3B:9F:F6:B9:7E:20:31:1F:6F
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:2c:7c:3a:f6:c9:eb:49:77:7e:dc:a6:54:a3:ad:60:b9:
         38:15:59:7c:1b:0c:a1:c8:27:c4:fe:19:e8:03:63:c4:50:17:
         d9:8a:1f:e9:c4:d7:ca:9b:f6:b8:ae:91:2c:9a:58:ad:3c:22:
         f5:94:56:fc:3b:fc:62:d0:4a:8a:e8:16:b8:f9:b4:dc:be:81:
         b9:58:c1:81:52:c1:de:be:92:cc:8b:47:f6:56:38:95:23:20:
         48:b7:05:ee:f5:87:b1:6b:a7:41:81:3d:f8:4a:ca:d8:2d:51:
         99:db:cb:c4:dc:e8:03:5f:ff:68:7d:ea:7a:36:65:10:cc:67:
         8c:bb:14:1b:20:b5:b3:54:4c:c1:91:42:f2:3f:ec:85:37:25:
         64:81:1b:ee:77:bd:6d:40:62:41:61:5e:aa:df:2f:c0:ad:b1:
         4f:c6:5b:a6:58:7c:aa:81:97:02:eb:20:91:b5:26:11:68:4e:
         f0:7f:97:2a:18:ca:ba:6d:08:70:23:76:35:1b:26:14:02:fa:
         96:a6:2e:ce:99:51:2e:e1:2b:d5:f5:ff:c5:c9:c3:0a:1c:5a:
         3b:9b:46:f7:c2:cd:bf:7f:92:b7:c6:e5:c5:ee:41:ac:f9:36:
         fa:96:3e:a9:8e:7b:4c:4f:60:e2:f6:29:ce:90:bc:8f:5e:d2:
         3d:70:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:05:41 2026 by rpki-client