Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File:                     ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier:          9GxEed6nYYnzn59Uu2l70+9QVECuu8EpLVqVZjwZMvI=
Subject key identifier:   9D:9C:D9:FB:52:91:35:FE:F2:AF:7D:1B:05:64:79:4D:25:6F:2B:E9
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer:       /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number:          0142
Signing time:             Sat 03 Oct 2026 06:08:49 +0000
Manifest this update:     Sat 03 Oct 2026 06:08:49 +0000
Manifest next update:     Sat 10 Oct 2026 06:08:49 +0000
Files and hashes:         1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: P1HmyS582JuhzArfWDrboAxNuYaCHXjWMVikkJcCwQI=)
                          2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: dEqBDGsqeiUN91FwP/nGNGZY5s+Bv1LRGDa/upjDjdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
        Validity
            Not Before: Oct  3 06:08:49 2026 GMT
            Not After : Oct 10 06:08:49 2026 GMT
        Subject: CN=6ac09bf1-4d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:90:03:b6:95:b0:9c:92:25:8e:56:ed:65:
                    4c:ad:a1:ae:c0:60:b0:c6:33:10:86:f1:ce:3a:f6:
                    48:2b:68:ae:c0:44:47:f2:c4:a8:85:36:92:c9:ca:
                    cf:96:00:ca:85:ac:0a:76:ba:d8:4f:b5:55:a2:a7:
                    0a:6f:7c:77:0d:3c:37:13:c6:32:0b:ba:52:2f:89:
                    e5:e6:99:52:83:36:02:e2:be:b0:a4:fc:a8:91:d8:
                    c1:95:10:33:bc:ca:6b:3d:c7:a3:38:dd:70:53:d6:
                    91:78:f6:f7:94:68:dd:39:58:34:a6:fa:5c:e3:b5:
                    a7:a4:49:76:c2:9d:c1:da:4a:2a:52:0d:73:d0:5f:
                    5e:00:80:e2:a2:c3:2a:c0:56:16:0c:28:87:86:a9:
                    3c:42:41:6f:10:66:7e:41:9a:07:92:8c:99:eb:34:
                    59:e4:82:5c:8f:a6:40:43:52:10:8a:11:b8:85:02:
                    12:46:19:36:f3:9b:0d:39:9f:62:85:86:c1:ce:e0:
                    a6:3e:ed:6c:eb:a7:b2:e7:00:35:e9:4d:f2:ca:72:
                    1f:46:ae:41:da:9b:df:0e:b0:06:8f:43:09:7f:49:
                    72:a0:62:cf:a8:d5:40:4d:9e:88:bd:b5:89:9a:26:
                    8d:92:6a:2f:66:9d:32:e1:dd:19:b6:d7:be:ac:43:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:D9:FB:52:91:35:FE:F2:AF:7D:1B:05:64:79:4D:25:6F:2B:E9
            X509v3 Authority Key Identifier:
                keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:37:d5:8f:36:ea:5a:19:03:ab:93:88:35:17:09:8f:24:d6:
         c6:91:62:4b:f9:89:70:80:29:b0:96:64:e2:a4:87:18:b1:94:
         d4:36:3f:2d:dc:24:c5:5c:8f:68:a0:30:c7:bc:f6:dd:68:e4:
         6a:30:fc:eb:9b:4b:5b:ba:97:61:8c:72:23:13:56:65:e9:c7:
         35:7f:46:9d:3d:16:63:2d:7b:4b:02:bb:38:c0:fb:d2:78:03:
         20:51:8a:7a:9d:23:fc:b2:85:45:5d:4e:ae:70:7f:68:40:b4:
         64:a8:4c:f0:d7:53:e7:6d:0b:d3:67:6a:ad:dc:eb:31:b2:f4:
         de:b7:1b:c2:40:df:36:ce:b1:ef:35:1f:01:fa:c7:9a:99:03:
         20:8d:c9:07:dc:2d:df:e1:89:6e:67:c9:5b:e7:9b:da:18:51:
         6b:28:da:5a:ed:73:d5:49:3b:c0:74:19:0d:6d:24:8c:b4:46:
         a9:7c:da:8c:fa:90:a8:88:f1:f9:47:08:21:af:d6:75:f0:bb:
         c5:60:b1:c2:b2:dd:73:67:74:b6:72:f4:fc:97:15:61:2d:3b:
         91:90:75:93:be:32:cf:0d:76:8b:03:97:e6:74:ab:44:a3:6f:
         30:70:d0:95:98:33:ad:03:08:bb:35:7a:c4:0a:45:3c:bb:63:
         ff:c1:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:58:09 2026 by rpki-client