Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
File:                     ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft (raw, json)
Hash identifier:          JP97H6g5eS9QcAoDkMfMwXU1xlWG2RMFGmr4kRgvrn4=
Subject key identifier:   B4:EF:1F:82:93:42:B3:CD:8D:42:2E:F5:41:79:4E:E7:96:7D:E1:EB
Authority key identifier: BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A
Certificate issuer:       /CN=A915EA14/serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
Manifest number:          8B
Signing time:             Thu 29 Oct 2026 08:21:25 +0000
Manifest this update:     Thu 29 Oct 2026 08:21:24 +0000
Manifest next update:     Thu 05 Nov 2026 08:21:24 +0000
Files and hashes:         1: ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl (hash: pQ3tqAgCatQO5LXxP0c7DagQUjZQ5EsVqTz4XJba8Jw=)
                          2: 82755B58021E11F1B34B19A3496F56BC.roa (hash: ifPwyUF2Mr82aFijpmqBd1JrpsYwJgee18Gcn8+c8eE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 08:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
        Validity
            Not Before: Oct 29 08:21:24 2026 GMT
            Not After : Nov  5 08:21:24 2026 GMT
        Subject: CN=6ae30204-e6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:5f:c5:70:21:4d:7c:f8:30:59:de:14:69:
                    88:9b:ac:34:05:2a:de:51:bb:6e:ed:55:f1:f1:c6:
                    d4:55:0b:6a:c4:40:05:63:fb:ed:f7:64:d3:fe:c8:
                    de:a1:80:2d:ac:d6:57:92:6d:3f:1e:a3:0b:5b:70:
                    3f:91:36:2e:99:c0:75:de:45:7e:13:c4:4c:84:4e:
                    12:2a:af:35:c4:cc:01:9a:a9:4b:02:0d:96:e9:d6:
                    d3:7b:b9:1a:f0:fe:5c:83:19:70:59:73:f5:fd:0d:
                    ae:d1:f5:05:b0:ec:7e:ea:14:a2:f1:9e:e1:e3:dd:
                    55:a2:fc:39:ae:d2:e7:b6:11:9c:b9:37:1c:6a:14:
                    06:31:17:7e:ec:6f:c4:25:b9:57:0c:f1:7e:31:79:
                    9e:00:18:36:9f:3f:d8:26:fd:16:05:f1:7a:c7:27:
                    a7:58:81:c6:25:d4:e9:cd:4a:75:3a:f8:7e:99:e9:
                    3e:27:06:85:d7:56:56:09:b6:62:b5:1d:ac:b4:73:
                    13:f4:2c:93:fd:2c:ee:72:d3:1c:fb:f7:a7:47:d5:
                    7e:0e:f0:5d:5d:b5:31:d6:b9:93:d2:59:02:d6:64:
                    bf:33:d9:8b:c3:d2:ee:f7:f4:c1:83:85:b4:8d:27:
                    db:d4:5a:42:01:a2:e4:7f:60:6c:26:35:ff:9a:63:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EF:1F:82:93:42:B3:CD:8D:42:2E:F5:41:79:4E:E7:96:7D:E1:EB
            X509v3 Authority Key Identifier:
                keyid:BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:cc:50:da:86:c7:1f:ee:30:4f:f3:cd:02:21:62:fb:7f:
         32:ff:9f:23:cb:94:b7:9c:7a:8a:e4:57:f4:2e:b9:c8:c4:36:
         42:cf:53:56:06:91:98:4a:73:94:71:26:5d:e9:dc:08:89:b8:
         80:69:ab:1d:7c:a4:c2:6f:c0:45:17:63:ee:6a:1f:e8:22:6e:
         3e:10:ba:b1:b9:8a:04:32:41:65:8c:53:91:56:97:65:9e:81:
         3d:37:0c:e3:dd:89:01:9a:a7:90:b1:1f:06:d4:1c:09:4d:49:
         52:27:40:3f:ed:e5:aa:17:42:94:65:ef:b5:67:67:a5:f9:22:
         25:81:8d:cc:d7:7e:e0:cf:7d:13:94:ab:ed:71:09:7b:51:a0:
         d4:9e:b7:e3:5c:07:7a:cc:0f:5b:52:8a:c9:c1:c4:8f:1f:c4:
         cc:dd:a9:d2:a0:5c:f1:11:f7:13:c0:88:63:44:16:d8:83:40:
         a3:e2:3e:d3:15:ea:74:59:ae:6e:2d:36:f5:34:d9:e7:58:2c:
         08:4e:08:b2:fc:4e:8d:ea:7a:03:11:01:18:10:3d:5e:c3:eb:
         85:89:5e:da:93:20:d4:83:bb:8f:a7:16:12:4a:ae:01:a9:a7:
         92:c9:18:0c:73:db:e2:76:e4:b4:78:65:94:33:52:f4:90:85:
         01:66:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:55:53 2026 by rpki-client