Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
File:                     UYdFx6LySigtdUZZUC_WYh3HYYQ.mft (raw, json)
Hash identifier:          9f6YTcd8aYE2dwdttmLt/ONW8XvIMgM1gnpoVfo+6/8=
Subject key identifier:   67:1F:66:E6:F3:CE:91:B5:D7:38:54:05:D7:17:C5:3E:C3:53:07:C4
Authority key identifier: 51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84
Certificate issuer:       /CN=A915FE2E/serialNumber=518745C7A2F24A282D754659502FD6621DC76184
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
Manifest number:          05
Signing time:             Mon 31 Aug 2026 09:38:22 +0000
Manifest this update:     Mon 31 Aug 2026 09:38:21 +0000
Manifest next update:     Mon 07 Sep 2026 09:38:21 +0000
Files and hashes:         1: UYdFx6LySigtdUZZUC_WYh3HYYQ.crl (hash: DlP2TVUXwm5mnxs97pxbuJCFNa+w2pc8q8dQ78qUi2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE2E, serialNumber=518745C7A2F24A282D754659502FD6621DC76184
        Validity
            Not Before: Aug 31 09:38:21 2026 GMT
            Not After : Sep  7 09:38:21 2026 GMT
        Subject: CN=6a954b8d-e110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:3a:85:0e:ed:57:dc:cb:f2:89:88:58:fc:
                    4d:c6:04:d9:60:5c:11:94:69:11:f3:58:68:54:41:
                    7f:46:bb:b7:94:41:c6:18:19:b4:49:17:f9:21:ed:
                    b6:b3:e2:e1:c4:8b:83:09:d2:6d:d1:10:bf:f1:5e:
                    63:a9:8d:a8:45:56:11:33:92:66:79:2a:3f:92:39:
                    8c:67:6e:a5:b4:2d:8a:5e:20:55:87:d8:0f:3e:a8:
                    0b:cf:56:55:16:ba:a4:55:8f:90:f6:35:c5:f9:ed:
                    01:82:3f:c0:1a:05:36:bd:57:c7:26:01:c9:f9:d1:
                    28:94:99:7e:43:d9:37:b1:bb:3b:5e:a9:a9:92:9f:
                    51:2d:88:03:35:12:70:2a:01:2c:ed:82:60:44:43:
                    60:be:8d:4d:2a:03:15:b1:73:73:37:7b:d3:7b:a6:
                    c4:e3:00:27:16:af:9a:3c:dc:b5:0d:2a:54:6b:a0:
                    50:42:8a:43:20:89:41:37:ba:20:95:48:93:bd:7b:
                    37:45:6d:4d:6e:57:6e:d7:a0:d6:7b:ae:2e:f7:fd:
                    ec:7f:0d:fa:1d:5d:99:49:a0:af:75:ec:ea:80:3a:
                    48:61:ee:4e:d2:ac:0c:67:ed:2d:50:50:f2:21:51:
                    1a:bc:19:f6:07:82:2c:fd:10:25:66:37:4f:c4:3f:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:66:E6:F3:CE:91:B5:D7:38:54:05:D7:17:C5:3E:C3:53:07:C4
            X509v3 Authority Key Identifier:
                keyid:51:87:45:C7:A2:F2:4A:28:2D:75:46:59:50:2F:D6:62:1D:C7:61:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UYdFx6LySigtdUZZUC_WYh3HYYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE2E/BD1C248AA01B11F1892500316F11F970/UYdFx6LySigtdUZZUC_WYh3HYYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:c6:d7:48:25:e7:99:b6:e4:9a:dd:19:4f:48:f2:4e:66:
         b9:95:41:3b:b7:f8:b4:fd:22:5a:e3:1f:54:43:5f:13:9f:2f:
         0e:67:31:95:6b:fc:63:44:61:15:ae:41:ed:f2:b7:90:d0:11:
         32:09:16:41:dc:c7:d1:1d:42:6d:a6:d9:05:49:5e:65:9c:0f:
         68:d9:b0:f0:5d:1b:9b:cd:2d:89:34:e6:b6:d1:44:de:7b:c7:
         2e:7c:11:42:d1:c6:f5:70:27:92:10:b8:6b:10:18:13:3e:cd:
         45:32:ab:e4:a6:7d:d1:30:22:9a:8e:b3:fb:ae:a3:79:80:a8:
         5f:aa:4a:1b:67:ea:0c:32:82:d5:75:8d:fb:98:dc:0f:d0:d0:
         d4:20:71:80:91:e8:14:87:cc:27:6c:04:4e:d5:17:49:ef:2f:
         d8:28:d1:14:f4:14:28:dd:a2:a0:f3:66:97:4e:ac:f6:48:53:
         68:82:65:d6:a9:ce:b9:7a:17:0e:30:d0:16:6d:44:0b:14:0c:
         5e:c6:67:5f:b6:c7:05:f9:d7:43:a0:4f:e7:b9:f3:11:87:d5:
         9c:3d:1f:78:30:69:f4:fb:0f:80:31:d9:0f:7a:91:a0:25:5e:
         45:fa:62:d8:93:2c:46:b4:4e:9e:1b:f5:f1:29:39:5c:91:27:
         9a:b5:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:29:58 2026 by rpki-client