Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File:                     _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier:          BrjXY9rDYVW7yIbfELuxN1aiAisZPFDbtxII7xLj0Cw=
Subject key identifier:   30:FA:C2:3C:BC:92:AB:5A:AA:D6:4F:60:15:5C:79:EC:FD:13:E4:25
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer:       /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number:          AB
Signing time:             Wed 07 Oct 2026 07:41:25 +0000
Manifest this update:     Wed 07 Oct 2026 07:41:24 +0000
Manifest next update:     Wed 14 Oct 2026 07:41:24 +0000
Files and hashes:         1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: IZo72oyV40wE8/3qjh1EpBIQoJ6wWc9OsCJgKDK37Qw=)
                          2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
        Validity
            Not Before: Oct  7 07:41:24 2026 GMT
            Not After : Oct 14 07:41:24 2026 GMT
        Subject: CN=6ac5f7a5-56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1c:07:f0:ac:e3:23:92:38:d4:37:30:43:ee:
                    73:b4:0e:ca:fa:ae:99:fc:4f:45:43:1d:66:f0:06:
                    8f:31:92:ab:a7:bb:db:b9:54:78:67:b4:55:05:13:
                    69:6c:42:62:de:31:9d:bc:a3:e2:10:31:35:eb:7a:
                    3f:2e:e2:fc:e7:a9:3b:65:d0:e8:0c:5c:72:01:07:
                    fb:cb:11:98:7a:e9:e6:9f:08:a4:99:2c:c9:89:52:
                    51:de:23:1b:04:29:23:fa:d5:85:bc:92:65:b0:60:
                    06:42:fa:ac:05:ca:a3:26:63:e3:4e:2d:43:44:5c:
                    e6:89:dd:ea:b3:95:7b:bf:bb:ab:38:41:67:29:e8:
                    f2:77:80:11:69:f6:9d:29:4f:70:82:34:45:b2:33:
                    67:7e:15:7e:69:03:c0:06:51:6e:c9:be:4b:70:59:
                    60:b9:41:28:b0:e7:23:11:cb:c3:0b:3d:93:d7:43:
                    04:8e:2e:81:b6:75:2a:c7:e9:5e:4b:cc:65:52:77:
                    9c:1a:ca:34:65:0c:ee:61:07:4e:ba:12:c3:14:52:
                    c3:03:34:6e:df:ca:39:e3:c6:7f:da:9b:97:52:6b:
                    33:4b:94:28:26:78:c6:80:0f:3b:d2:89:f2:93:f3:
                    96:b0:b9:3e:68:ab:f6:a0:05:99:6a:3b:79:4f:3e:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FA:C2:3C:BC:92:AB:5A:AA:D6:4F:60:15:5C:79:EC:FD:13:E4:25
            X509v3 Authority Key Identifier:
                keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:21:d1:44:95:a0:a6:c3:7f:db:1d:bd:06:9e:3f:f3:ae:
         b2:47:0e:c3:98:cb:68:f1:3d:49:aa:79:bf:5f:24:ef:d7:d1:
         ae:81:e0:74:28:3e:33:c9:77:2f:4b:52:c9:06:33:35:45:2b:
         e3:71:db:c4:b4:67:a7:41:1d:0d:b4:3c:0e:c5:66:75:17:17:
         33:0c:a1:d6:88:15:68:32:f0:f4:40:06:10:d8:a4:34:cd:86:
         fd:5c:49:7a:e6:fb:35:9d:c9:1f:5a:03:b9:c0:b9:b1:46:ef:
         38:be:44:ac:ec:d3:7c:da:6e:d5:b1:dc:d5:a2:ce:83:60:0a:
         e8:9d:3c:f1:d6:cf:af:d8:01:17:21:48:ee:22:2c:eb:10:ed:
         19:6f:e5:35:3a:a0:b2:04:26:13:8a:49:a9:9c:c9:5e:a4:81:
         a4:a7:4e:c9:43:ce:43:ec:2d:cb:b2:61:af:1f:8f:42:1d:a4:
         2a:89:d2:bf:f2:40:b4:c6:c1:47:bc:d7:8c:ea:8f:a8:64:9a:
         5c:77:ab:48:27:2b:93:4e:85:ab:31:f8:42:77:f4:2e:62:5c:
         94:f5:47:62:ff:68:ac:5a:e4:51:a0:26:d5:46:67:a3:dc:a4:
         77:db:28:12:86:81:f6:66:0e:27:94:36:e1:3f:38:ae:70:62:
         1f:b2:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:17:38 2026 by rpki-client