Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
File:                     rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json)
Hash identifier:          vyRVTpdqBdRpy1vKTT17Dp11jSUnY3YBL1LcPAJibrk=
Subject key identifier:   81:F7:4A:E8:73:97:47:E1:40:64:27:DE:43:90:BB:9F:48:69:2E:FD
Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2
Certificate issuer:       /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
Manifest number:          028B
Signing time:             Sun 25 Oct 2026 02:07:27 +0000
Manifest this update:     Sun 25 Oct 2026 02:07:26 +0000
Manifest next update:     Sun 01 Nov 2026 02:07:26 +0000
Files and hashes:         1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: BqCIekKPiLsn269to3uQs/SS5ECPVixvkkIuPSrAxIU=)
                          2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: 22rajykWohnsHcBReR8x/STsw649pWSuB1iNCKHSXJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl
                          rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
        Validity
            Not Before: Oct 25 02:07:26 2026 GMT
            Not After : Nov  1 02:07:26 2026 GMT
        Subject: CN=6add645f-c91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:0a:d1:3e:6b:87:bd:42:54:59:6c:aa:37:
                    be:e6:90:f6:70:7e:3e:d9:06:9e:58:6d:bd:da:8c:
                    8d:a6:6f:d4:b7:0f:91:75:3d:65:26:3d:13:12:31:
                    cf:d3:91:f6:a0:64:fc:b2:dc:33:eb:e8:25:80:a7:
                    b4:37:45:e5:6c:3d:00:27:90:45:0a:4b:34:cd:c1:
                    0a:16:bc:36:e6:bd:48:f6:26:a7:5b:4a:ff:13:c9:
                    26:8c:1c:99:67:e2:ad:30:39:c7:73:9c:6a:3b:1b:
                    b6:d8:5e:13:c3:09:1f:3b:92:a3:95:0c:ee:f8:d7:
                    a9:77:ef:2d:ee:e9:e9:43:72:fd:80:57:c5:45:73:
                    85:d6:a1:6a:6a:4d:c0:ae:d4:19:90:12:3e:dc:96:
                    c7:cc:d5:de:85:a5:27:5d:e2:aa:34:15:e6:55:b6:
                    30:4f:fb:7c:27:e6:34:82:40:a4:60:02:8a:20:c0:
                    76:84:9b:29:fb:d8:8d:ae:3c:91:19:43:52:29:4e:
                    02:9c:c2:38:1a:c8:80:a2:b5:44:e8:6a:c6:ef:4d:
                    f2:a0:1c:cc:bd:9e:07:4d:c5:94:32:0a:83:db:47:
                    8d:ac:88:fd:2b:74:07:b7:6a:b9:d9:2f:b9:37:f8:
                    ce:87:3b:e3:24:f7:73:24:d1:fa:f4:1c:22:17:21:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:4A:E8:73:97:47:E1:40:64:27:DE:43:90:BB:9F:48:69:2E:FD
            X509v3 Authority Key Identifier:
                keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:bb:88:69:de:1a:eb:75:4a:b5:0d:a1:a5:23:46:9a:f4:
         14:67:3c:a3:8a:4d:f5:71:c9:22:66:10:68:21:eb:f5:2f:19:
         ec:79:8e:8f:20:8f:7c:d2:23:4f:16:75:cf:0d:80:10:a3:bf:
         3b:9e:51:84:d0:c5:a5:b4:cc:bd:f4:92:3b:ab:33:56:63:56:
         6d:a4:04:ef:5e:51:35:ad:48:ad:41:e1:b6:e0:71:d4:7d:0e:
         c2:0a:28:a6:c4:35:f9:8d:65:11:f9:f8:f7:90:d4:ae:7b:56:
         15:79:a4:12:5a:a7:d9:fe:49:f5:51:b0:1e:59:0f:be:51:3a:
         5a:c5:7c:a8:e8:b6:d7:da:7a:37:17:a5:fb:c3:3a:bb:81:c3:
         11:a0:26:e8:e1:ed:13:0c:63:46:20:2f:e7:30:5c:9b:5b:97:
         f9:fc:c4:52:b9:77:73:30:c5:8a:49:bb:4a:52:08:74:ca:30:
         cb:5d:e0:27:37:6f:67:84:d3:18:f4:32:ef:ad:b1:63:b1:a9:
         01:d7:72:6f:8c:4d:8f:af:90:c7:eb:0e:d3:ba:d0:21:83:85:
         50:be:d4:de:7c:32:a5:5c:3b:57:a2:60:d3:f7:83:96:d8:0e:
         46:af:53:ef:b2:58:ba:a9:30:ca:cc:21:da:72:e1:0b:06:5e:
         be:cd:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:48:44 2026 by rpki-client