Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          oQR6o5eXzOCaOfOjGezDYBqWCyAR+0QMpuuVfeACqg8=
Subject key identifier:   71:20:3B:C5:D5:99:A2:A7:1F:FF:A8:F3:7D:6C:C2:7D:21:F9:14:E0
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       075E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          072E
Signing time:             Fri 18 Sep 2026 22:04:07 +0000
Manifest this update:     Fri 18 Sep 2026 22:04:06 +0000
Manifest next update:     Fri 25 Sep 2026 22:04:06 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: JDzsvAfkY0b+c1DLA6ysyTIl4qkDYMqAN3/UjBQF2po=)
                          2: F4BAE41A9B8611F1B4386D6F4511F970.roa (hash: BWEvHpZlHk2lCPCqxiJZlaQoZxUmZjbC4KZmOcnu+w8=)
                          3: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=)
                          5: F32A5AEA9B8611F1B4386D6F4511F970.roa (hash: hC8DUUi3h7ApLUuU4cOKlMcdfzPUe8RieSnJ4Y0WyCc=)
                          6: F30D41529ABF11F1B22CABD14611F970.roa (hash: 85pNotyjZ8mxuBhPKNSC6QbezOpRGw5rRNH9Oy4noF8=)
                          7: F5D2F46E9B8611F1B4386D6F4511F970.roa (hash: 0au6Si15nGK7eMBlSyZBhtsSwPZhCvIKY7Aeoqgl6Xc=)
                          8: F28152A69B8611F1B4386D6F4511F970.roa (hash: ubTAyK2cMn31ieelGGRwezGPlj1FMuE8SjyOIKfT1/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Sep 18 22:04:06 2026 GMT
            Not After : Sep 25 22:04:06 2026 GMT
        Subject: CN=6aadb557-6b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:e4:63:0e:2c:eb:2f:52:b4:4c:dd:3d:f3:
                    6f:08:54:95:d2:36:0d:3e:10:41:65:9d:64:1f:c4:
                    a4:a5:09:a2:f6:d9:86:ad:ca:82:8c:31:cc:af:bf:
                    3f:f5:f3:55:91:7d:87:10:43:dd:f8:f8:fb:af:df:
                    84:ad:cf:17:a4:6d:86:46:1e:62:7b:68:88:c7:1e:
                    5f:8e:28:99:08:92:a9:97:66:a2:cd:03:ea:26:ef:
                    dd:9b:8d:36:39:58:bc:5a:be:b0:da:6d:7a:ac:cc:
                    a7:af:49:19:ff:2a:ce:43:11:c7:72:8d:c5:c8:6a:
                    fd:63:8a:d0:10:bb:e6:57:84:19:8a:23:4d:f4:70:
                    87:d2:eb:71:9a:83:d6:0d:ab:85:90:83:e8:30:ce:
                    82:49:c4:58:b6:9a:6f:5d:3a:2d:9d:8d:d7:aa:ce:
                    43:09:e8:c9:ec:80:27:11:c6:be:ec:64:b6:88:26:
                    9b:42:dd:ba:47:1d:44:95:7b:21:63:e1:87:4c:19:
                    c0:b0:11:d7:ee:e9:5a:15:80:4b:80:04:6b:95:6b:
                    d1:f4:dd:75:b0:d5:89:16:81:10:76:50:0c:88:31:
                    a2:bb:02:bf:8e:b9:2c:43:a1:b1:b6:8e:36:fe:6c:
                    c0:12:fa:d9:c5:60:95:19:45:dd:55:14:c6:7f:8c:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:20:3B:C5:D5:99:A2:A7:1F:FF:A8:F3:7D:6C:C2:7D:21:F9:14:E0
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:61:93:49:11:4f:29:7a:8d:ff:e0:99:2b:b2:06:33:4c:64:
         a2:41:dc:30:c9:75:c2:0c:26:30:5f:f4:1a:21:df:9b:ce:bb:
         0b:7f:bc:36:b5:ee:aa:a5:28:74:6f:1a:c6:ce:66:12:77:3f:
         e8:f3:93:b4:1c:10:05:e0:f5:38:00:f7:e7:70:e0:95:8f:c7:
         d5:33:8e:17:cb:cb:a3:2f:f6:d3:13:e0:12:b0:14:ef:ab:c8:
         1c:cb:63:b0:3a:f5:f4:1b:a2:b4:82:dc:90:aa:ed:55:17:52:
         11:8a:e4:9e:0d:1f:36:c0:e2:ff:11:e5:f3:88:9c:a6:d3:0f:
         af:4b:c2:14:0b:68:b7:51:f8:f8:6b:63:27:67:67:16:bd:f4:
         3e:03:8b:4b:a4:c6:ab:5b:2e:79:c4:d4:02:43:ef:73:45:29:
         d4:4a:c2:71:1e:48:9f:a3:78:a9:b7:9c:61:b2:e5:9f:19:fc:
         34:b2:d2:b8:2f:01:44:6c:1b:84:a9:9e:a2:58:98:c1:54:a7:
         73:91:0f:d4:9d:50:24:20:42:a3:60:e3:2d:8d:73:05:c1:03:
         e8:1c:7b:61:29:35:90:f7:03:0f:b4:a9:9c:dc:6b:de:6e:b5:
         43:77:50:5f:41:fd:12:7e:55:53:28:87:c5:43:88:ae:5d:40:
         31:4b:cd:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwOTE4MjIwNDA2WhcNMjYwOTI1MjIwNDA2WjAYMRYwFAYD
VQQDEw02YWFkYjU1Ny02YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0vkYw4s6y9StEzdPfNvCFSV0jYNPhBBZZ1kH8SkpQmi9tmGrcqCjDHMr78/
9fNVkX2HEEPd+Pj7r9+Erc8XpG2GRh5ie2iIxx5fjiiZCJKpl2aizQPqJu/dm402
OVi8Wr6w2m16rMynr0kZ/yrOQxHHco3FyGr9Y4rQELvmV4QZiiNN9HCH0utxmoPW
DauFkIPoMM6CScRYtppvXTotnY3Xqs5DCejJ7IAnEca+7GS2iCabQt26Rx1ElXsh
Y+GHTBnAsBHX7ulaFYBLgARrlWvR9N11sNWJFoEQdlAMiDGiuwK/jrksQ6Gxto42
/mzAEvrZxWCVGUXdVRTGf4wl/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEgO8XV
maKnH/+o831swn0h+RTgMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM2GTSRFPKXqN/+CZK7IGM0xkokHcMMl1wgwmMF/0GiHfm867C3+8NrXuqqUo
dG8axs5mEnc/6POTtBwQBeD1OAD353DglY/H1TOOF8vLoy/20xPgErAU76vIHMtj
sDr19BuitILckKrtVRdSEYrkng0fNsDi/xHl84icptMPr0vCFAtot1H4+GtjJ2dn
Fr30PgOLS6TGq1suecTUAkPvc0Up1ErCcR5In6N4qbecYbLlnxn8NLLSuC8BRGwb
hKmeoliYwVSnc5EP1J1QJCBCo2DjLY1zBcED6Bx7YSk1kPcDD7SpnNxr3m61Q3dQ
X0H9En5VUyiHxUOIrl1AMUvNEg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:43:10 2026 by rpki-client