Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
File:                     uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft (raw, json)
Hash identifier:          tM4Vkulj5c7ebg73LQ3QxsryD8R+1N3PZ7g7pIPfoks=
Subject key identifier:   B3:29:0A:90:95:0D:8B:53:E5:95:FE:85:62:A1:53:9C:A5:10:EF:CF
Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8
Certificate issuer:       /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
Manifest number:          0516
Signing time:             Sat 24 Oct 2026 23:33:14 +0000
Manifest this update:     Sat 24 Oct 2026 23:33:14 +0000
Manifest next update:     Sat 31 Oct 2026 23:33:14 +0000
Files and hashes:         1: uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl (hash: YhAuIFaX6klOMDrlU2gdQlQGCw3wztt3SegsXTfF+co=)
                          2: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (hash: /QT547/+dXOmTE2fY9OgGfm3FPSy5zUw++zInuMxxu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl
                          rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A3D, serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
        Validity
            Not Before: Oct 24 23:33:14 2026 GMT
            Not After : Oct 31 23:33:14 2026 GMT
        Subject: CN=6add403a-7b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:80:8a:e1:88:b5:49:2b:28:5b:ec:c0:fe:
                    2c:8c:86:31:3f:b0:63:b0:b6:e5:78:62:23:3b:40:
                    cc:5a:a5:d4:39:a2:be:9c:a1:8c:d3:ac:72:9e:16:
                    b6:76:fb:2b:b6:69:e1:f8:70:9b:17:af:99:bb:ae:
                    c7:86:de:e0:74:13:0d:c3:aa:ee:02:4a:4b:e6:cf:
                    85:c7:82:6d:ee:10:84:7b:90:0c:42:89:55:25:5e:
                    2a:0c:6d:8c:56:57:19:97:d9:3e:9d:90:ae:bf:7f:
                    e6:32:97:f8:c5:db:96:ae:e1:5f:6c:96:a0:6f:d3:
                    ac:0d:4a:50:bb:25:99:91:c9:ab:fb:81:ba:e6:14:
                    90:a0:35:34:2f:c9:7d:02:88:10:94:6a:02:d5:d6:
                    6d:fe:d1:2e:c7:1f:54:71:21:d0:a5:29:69:13:1b:
                    9a:69:1d:dc:43:aa:12:a9:eb:f9:89:2d:67:c0:01:
                    50:32:59:aa:4c:d3:9e:c9:f0:cc:7b:0a:27:4e:25:
                    85:8d:3e:d6:bb:87:3b:e7:e4:cf:fe:f6:07:48:50:
                    fa:fb:5a:de:26:04:5c:dc:0d:4b:fc:b2:17:61:55:
                    a7:e4:9f:c5:0d:05:a2:1e:f2:2c:d9:66:08:f1:6a:
                    76:02:b2:0d:52:b7:e0:44:40:39:26:df:2d:75:32:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:0A:90:95:0D:8B:53:E5:95:FE:85:62:A1:53:9C:A5:10:EF:CF
            X509v3 Authority Key Identifier:
                keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:81:ca:f2:17:09:8d:38:12:c2:49:08:27:d1:33:01:9e:
         6e:00:12:ec:20:90:30:d7:80:6b:aa:c5:2d:23:53:ac:9b:bb:
         fc:a0:e5:0e:5d:9d:19:bc:b8:33:f0:0b:6d:3b:29:78:ff:14:
         9f:71:eb:a8:a7:33:6d:37:d8:ce:aa:bd:e2:07:a1:60:82:20:
         c3:50:2b:a8:6b:13:97:55:19:63:20:10:da:f8:8b:e3:f0:b9:
         68:ae:d3:ec:9b:a8:76:29:05:84:d1:fc:99:5b:d8:31:ac:69:
         76:c3:16:22:0e:23:08:f6:06:b5:5e:51:b9:8a:cc:34:ff:db:
         eb:8b:d6:ec:1a:f8:95:8c:2b:c4:d3:52:45:3b:62:a7:8e:2f:
         82:d9:ee:68:89:a0:11:ca:25:c8:b7:44:0f:41:35:38:b1:eb:
         d5:68:f2:31:f5:de:8f:b7:7c:d3:e9:18:77:44:32:60:52:4b:
         24:b7:a6:b2:68:5f:a7:cd:10:44:7d:e0:70:8b:0f:33:6a:fd:
         ab:0d:00:a3:6d:d7:96:8f:65:f1:b4:34:5c:64:db:66:8b:7e:
         6a:38:15:85:63:a0:bb:14:8e:8d:1d:c3:0b:68:6e:1e:85:b4:
         b0:8d:b1:ee:99:b3:25:81:52:06:d0:c5:3a:af:e0:fc:a6:c4:
         af:c6:79:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVBM0QxMTAvBgNVBAUTKEI4MjI1RjFFQjg2NzY2NDdDMzU5REJDMTEwQkZFRURF
QjQ0RkQ1RTgwHhcNMjYxMDI0MjMzMzE0WhcNMjYxMDMxMjMzMzE0WjAYMRYwFAYD
VQQDEw02YWRkNDAzYS03YjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVmAiuGItUkrKFvswP4sjIYxP7BjsLbleGIjO0DMWqXUOaK+nKGM06xynha2
dvsrtmnh+HCbF6+Zu67Hht7gdBMNw6ruAkpL5s+Fx4Jt7hCEe5AMQolVJV4qDG2M
VlcZl9k+nZCuv3/mMpf4xduWruFfbJagb9OsDUpQuyWZkcmr+4G65hSQoDU0L8l9
AogQlGoC1dZt/tEuxx9UcSHQpSlpExuaaR3cQ6oSqev5iS1nwAFQMlmqTNOeyfDM
ewonTiWFjT7Wu4c75+TP/vYHSFD6+1reJgRc3A1L/LIXYVWn5J/FDQWiHvIs2WYI
8Wp2ArINUrfgREA5Jt8tdTLi/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMpCpCV
DYtT5ZX+hWKhU5ylEO/PMB8GA1UdIwQYMBaAFLgiXx64Z2ZHw1nbwRC/7t60T9Xo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzRC82OUVGQ0REMjZF
QzIxMUVDODc4QTEwMkJDNEY5QUUwMi91Q0pmSHJoblprZkRXZHZCRUxfdTNyUlAx
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VDSmZIcmhuWmtmRFdkdkJFTF91M3JSUDFlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUEzRC82OUVGQ0REMjZFQzIxMUVDODc4QTEwMkJDNEY5QUUwMi91Q0pmSHJoblpr
ZkRXZHZCRUxfdTNyUlAxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHGOByvIXCY04EsJJCCfRMwGebgAS7CCQMNeAa6rFLSNTrJu7/KDlDl2dGby4
M/ALbTspeP8Un3HrqKczbTfYzqq94gehYIIgw1ArqGsTl1UZYyAQ2viL4/C5aK7T
7JuodikFhNH8mVvYMaxpdsMWIg4jCPYGtV5RuYrMNP/b64vW7Br4lYwrxNNSRTti
p44vgtnuaImgEcolyLdED0E1OLHr1WjyMfXej7d80+kYd0QyYFJLJLemsmhfp80Q
RH3gcIsPM2r9qw0Ao23Xlo9l8bQ0XGTbZot+ajgVhWOguxSOjR3DC2huHoW0sI2x
7pmzJYFSBtDFOq/g/KbEr8Z5bQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:11 2026 by rpki-client