Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier:          O/LmYGic41oiAJS6R73Ki5e82pQIC39ob10qc72otMs=
Subject key identifier:   E0:B8:82:65:B6:2B:E6:AD:FD:F9:7C:55:73:6F:B6:C8:E2:9B:85:C3
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer:       /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number:          02AE
Signing time:             Wed 07 Oct 2026 01:55:16 +0000
Manifest this update:     Wed 07 Oct 2026 01:55:15 +0000
Manifest next update:     Wed 14 Oct 2026 01:55:15 +0000
Files and hashes:         1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: sF0iifhFeaPbamVsJQWWgie1BcxDK1a7Zdp12WN/2SY=)
                          2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: dfQicEx83KamzRMByyNJg2fEEP+DRBaHeaYlTc5tSSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Validity
            Not Before: Oct  7 01:55:15 2026 GMT
            Not After : Oct 14 01:55:15 2026 GMT
        Subject: CN=6ac5a684-8947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:cb:69:41:91:26:0e:4a:c2:51:30:68:53:
                    a2:e7:ab:c0:9e:82:60:26:5b:b2:96:17:ee:e1:77:
                    78:86:5c:05:38:5b:b1:d2:70:19:7d:b2:31:99:12:
                    b3:29:d7:c2:32:9a:08:d5:6e:b5:59:a4:b1:50:32:
                    de:f8:12:e5:1a:a4:11:e7:d8:4d:d3:1e:7f:16:23:
                    0c:53:95:5f:d1:3c:d3:e6:b5:ec:5e:5b:71:42:6d:
                    e4:2e:b3:d2:c4:53:aa:7c:bb:49:d9:54:79:c1:e6:
                    cd:e8:ed:81:38:b0:d7:21:d5:29:04:38:3d:a5:3f:
                    d7:0f:8a:3c:6d:78:e6:ae:e6:50:68:60:8e:d5:92:
                    c0:1b:e0:bf:25:77:4d:43:73:08:de:0c:eb:49:16:
                    7b:68:64:49:6d:88:9e:47:0c:fa:29:4b:a1:4d:d9:
                    3a:39:e3:12:eb:55:77:9a:dc:3e:f6:21:d3:9b:da:
                    2d:a6:3a:6a:c0:c5:70:dd:3a:ef:02:d5:f4:65:f0:
                    ff:11:d8:0e:32:13:51:38:34:92:06:8f:ed:17:8f:
                    85:23:19:62:52:f7:30:ad:51:9d:1d:21:a4:8b:3f:
                    91:9d:0b:7e:4c:a5:b0:fe:4e:fd:df:3d:9c:ed:fa:
                    21:4f:0c:91:87:81:9e:9f:df:eb:e3:e6:18:0f:6b:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B8:82:65:B6:2B:E6:AD:FD:F9:7C:55:73:6F:B6:C8:E2:9B:85:C3
            X509v3 Authority Key Identifier:
                keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:0b:60:3b:dc:05:ec:0a:e0:02:f5:67:dd:e9:d0:e4:09:
         a1:b7:f1:ac:61:1f:1f:6b:cd:15:0b:2c:e6:64:44:27:79:cd:
         d1:78:3e:49:8e:e1:6b:24:32:f3:dc:0c:0c:d5:18:9d:46:92:
         ac:1b:d0:84:6a:7a:be:fb:40:49:06:b3:e1:00:d5:b4:a2:16:
         51:f8:a3:56:b8:3a:b2:50:1b:f7:b1:52:15:98:fa:70:77:22:
         cf:26:30:bc:67:5a:b5:60:9f:3e:18:21:74:a0:ff:4f:c4:d7:
         c6:25:ef:c0:22:8f:b3:19:5e:22:cc:2a:85:62:b4:53:ee:26:
         d4:d6:10:99:cb:7b:f6:48:15:cf:d2:10:34:db:69:56:9d:23:
         fd:07:f1:86:b4:a2:f4:80:1a:c7:78:7c:34:cf:52:64:d7:c2:
         af:85:bd:96:a1:9d:83:b3:21:a9:0a:e4:2f:79:36:c7:4d:4c:
         ba:aa:f6:f4:52:2d:9f:35:9a:e4:2e:77:a7:67:75:c4:bc:88:
         46:d6:71:f8:39:72:ce:27:c0:c7:be:71:e4:6f:07:d0:87:23:
         83:6b:10:93:76:89:9b:3a:71:15:b6:e6:11:72:34:92:91:53:
         09:85:f6:bf:87:61:0b:ae:3d:29:c2:e2:3d:df:e1:27:1c:31:
         63:da:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:26:58 2026 by rpki-client