Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
File:                     _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json)
Hash identifier:          PPmkPm1Dg7TPezdYtTFwBHz6O6+aDT58P4ESyFo3M7Y=
Subject key identifier:   95:D0:41:17:B1:BD:49:29:38:19:24:76:CA:00:DB:5B:CF:92:B5:42
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Certificate issuer:       /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
Manifest number:          0251
Signing time:             Tue 27 Oct 2026 02:32:26 +0000
Manifest this update:     Tue 27 Oct 2026 02:32:25 +0000
Manifest next update:     Tue 03 Nov 2026 02:32:25 +0000
Files and hashes:         1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: eWVeHDTwhBG50lhUwBekMMzQRlE4qmH1Gzq/zl8Mhqw=)
                          2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 7OoOfpcr1vPPybtXEFAjpZ6Vd273QIKn3xw75HgxFXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
                          rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
        Validity
            Not Before: Oct 27 02:32:25 2026 GMT
            Not After : Nov  3 02:32:25 2026 GMT
        Subject: CN=6ae00d39-898f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:40:f3:bf:09:92:2f:ed:77:84:21:5c:8f:
                    55:ea:50:91:9c:4c:76:0e:e6:bf:83:f5:52:b6:93:
                    26:43:95:07:aa:3c:dc:01:a3:8e:71:7b:f9:68:ba:
                    4c:51:f1:d2:b1:e4:96:11:c6:01:8f:2f:bf:f6:80:
                    06:33:5c:66:9c:9d:be:3e:1b:87:cc:70:c1:69:44:
                    e6:d5:d1:6e:32:6f:6f:26:f8:7e:0f:6d:97:8d:e2:
                    fc:ab:07:fc:82:4d:e9:79:c6:3f:f3:c8:4e:c2:d2:
                    5e:15:e2:3a:ab:ef:91:e3:8c:6c:94:e7:94:e7:5c:
                    45:d0:d5:fc:e1:27:d4:76:19:bd:f5:48:ff:d6:0e:
                    c5:20:c3:6b:60:a6:a5:70:7a:34:2b:1d:8e:d7:e3:
                    99:88:95:d5:fb:86:7d:76:4b:4e:a1:91:e6:28:dc:
                    08:68:b2:5f:6f:58:6c:99:63:0a:50:e5:4f:cd:9c:
                    7e:59:dd:e8:49:e1:84:30:00:c7:02:e7:df:40:9e:
                    4c:fc:ff:fa:ef:74:3b:7d:77:3d:79:30:05:dc:22:
                    cd:69:d1:9c:a5:7f:ab:1c:dc:af:93:e2:36:03:60:
                    6a:20:1e:1b:ed:b7:32:63:43:d7:68:31:b3:83:4f:
                    5c:6f:2c:2f:74:e4:af:43:a0:d3:e8:43:fd:50:45:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D0:41:17:B1:BD:49:29:38:19:24:76:CA:00:DB:5B:CF:92:B5:42
            X509v3 Authority Key Identifier:
                keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:b8:71:32:10:b7:55:24:2f:f7:b5:75:1c:58:1a:b7:22:
         1f:84:92:c9:a6:e0:4b:86:23:83:0b:a9:94:38:5b:6b:d3:e8:
         c1:5c:6b:48:ae:ad:27:13:7e:d6:44:e7:63:7a:15:38:9e:cc:
         46:2d:62:38:0f:50:32:6c:7d:c9:50:97:54:b6:c6:b2:2a:02:
         79:13:4f:25:fb:5a:15:b2:a0:ac:cd:18:28:35:a5:f4:9a:f8:
         5e:5e:5d:68:a2:06:53:45:dc:88:0a:97:9b:4c:e4:51:e9:1e:
         2c:e3:a5:b8:f8:e1:7e:e5:ac:fb:9d:24:8d:24:6c:68:fd:e4:
         43:3c:5b:f8:bb:92:37:8f:1e:df:2b:c4:4e:94:94:b0:af:0c:
         21:2b:2d:fa:5a:c8:70:e2:0e:b7:aa:3f:51:1d:d8:df:03:20:
         81:e1:8b:ea:69:c5:81:88:db:ff:af:84:f1:8c:5b:32:79:36:
         14:03:ee:66:9f:c5:cb:3b:dd:dd:bd:f0:b9:bf:53:f7:13:ba:
         8c:97:f5:ad:c1:f5:bf:a5:b9:60:9a:8a:61:db:83:f3:af:52:
         c1:aa:2a:a1:78:b0:ba:7c:dc:21:36:39:c8:d3:88:72:13:d2:
         27:a3:4a:8d:ee:7a:2e:a3:1c:af:59:3f:93:20:b6:84:e5:2f:
         d5:bf:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:13:29 2026 by rpki-client