Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
File:                     UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json)
Hash identifier:          5gFltn2YFzc3KVlQ99nMbFu8DStWPTPjKuP4J7eCOYY=
Subject key identifier:   2A:A3:0C:48:AE:55:02:D0:1B:D5:94:C1:5D:B6:89:8D:F5:52:6D:73
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       0B7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
Manifest number:          0B6B
Signing time:             Sun 04 Oct 2026 19:13:43 +0000
Manifest this update:     Sun 04 Oct 2026 19:13:43 +0000
Manifest next update:     Sun 11 Oct 2026 19:13:43 +0000
Files and hashes:         1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: UQMgwMjVizw04Ur2Ra0hVfT40ISK5cQrLC38IKL+ehI=)
                          2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: kSZwBkRVEDhOmYwl1df6enY/yo6PGCkdISiBlKr9L70=)
                          3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: H5nMQSpA4R3hyfzuxzqIbDx4LnU0+Yv2sw1pyaejWIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
                          rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2943 (0xb7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0, serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: Oct  4 19:13:43 2026 GMT
            Not After : Oct 11 19:13:43 2026 GMT
        Subject: CN=6ac2a567-f589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:f5:51:b1:37:55:c5:c2:01:35:52:8a:be:
                    0f:e5:01:2c:7f:90:db:da:c6:32:41:47:90:d2:30:
                    76:ed:1c:06:d6:8d:77:03:34:34:13:01:57:6a:b9:
                    35:9f:47:75:66:2f:78:81:30:ca:5c:9b:88:c7:83:
                    e5:03:50:2e:65:64:2e:de:32:d9:81:2a:d6:f3:8f:
                    b7:eb:5e:6d:84:91:d4:2b:aa:56:6d:99:0c:b7:2c:
                    03:65:dd:11:75:e2:3b:ba:d0:2f:1a:1c:31:9b:e7:
                    76:79:d3:ab:4e:47:39:ec:14:b8:ab:ca:77:ef:36:
                    f7:74:60:8c:6c:77:ea:9b:d8:78:09:ac:0a:3d:02:
                    e5:be:16:6b:c4:99:68:c5:ea:95:8a:fe:f5:a7:68:
                    e8:0c:e6:2b:cf:0e:96:c9:a0:01:e6:75:8e:48:0f:
                    94:69:22:4b:1e:8b:9e:d5:bd:36:bc:b0:01:cd:4d:
                    2b:79:ee:d3:96:06:a4:94:6f:06:e1:e1:9b:49:73:
                    8a:b1:5d:9b:7a:30:d6:5f:7b:c0:85:4d:3b:a5:90:
                    8b:b3:07:a4:51:6c:bc:a1:0f:0e:01:d9:27:bc:28:
                    b5:52:5a:83:ae:6e:ca:b8:0c:64:fc:ac:e2:10:58:
                    e8:60:38:3f:75:e8:21:c6:a2:9d:cc:b9:de:91:4e:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:0C:48:AE:55:02:D0:1B:D5:94:C1:5D:B6:89:8D:F5:52:6D:73
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:56:f1:07:53:74:65:2a:a7:4b:29:81:27:0d:a4:2c:b6:
         34:6b:db:0f:c6:1d:26:d9:d5:60:b0:b9:e9:92:b9:59:ec:c1:
         11:2b:7d:42:c2:eb:77:17:e0:cb:5a:ae:37:c7:db:70:ca:d3:
         0a:ca:fb:cb:ef:ae:f3:29:12:15:79:2b:d3:50:08:1c:3b:55:
         3a:b4:7c:cc:33:69:44:94:dc:b5:b2:e9:61:08:d1:33:5f:84:
         7c:2e:32:9c:84:b0:4d:c5:cd:5b:50:31:a6:c3:be:02:23:5b:
         e4:57:d4:38:6b:b8:2c:3d:a6:8f:7f:55:d8:4b:aa:d3:92:0a:
         04:37:50:19:5a:9b:06:11:fd:ec:f5:65:4e:82:25:57:b4:2e:
         cb:55:dd:f1:48:e3:78:8c:c9:3a:07:17:c7:78:0e:a7:da:f4:
         3e:bb:55:68:46:2c:42:60:ce:d7:ab:2d:8d:f0:89:d6:1e:1e:
         c7:cc:ea:08:8c:24:58:2e:17:fc:4d:e5:4a:83:9d:b0:90:95:
         e1:31:95:7c:1c:73:7c:1a:38:4f:c6:df:57:da:a3:92:77:a7:
         7e:33:1c:0e:66:71:d6:7d:5a:e9:d3:03:b3:8d:22:c9:43:82:
         f4:cc:f1:f3:dd:e6:f9:04:15:83:1a:e7:50:7d:87:7c:66:31:
         a6:f3:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:09:52 2026 by rpki-client