Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          tr79fv+mGmAmaVg02UaUtPZx0EmXu8kHnw2Gl3EsKVg=
Subject key identifier:   6C:D4:8F:E1:73:46:86:43:11:99:85:17:03:F9:F5:79:4E:2A:B6:5A
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0C1A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0C0F
Signing time:             Fri 04 Sep 2026 18:44:42 +0000
Manifest this update:     Fri 04 Sep 2026 18:44:42 +0000
Manifest next update:     Fri 11 Sep 2026 18:44:42 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: DLpQiZ9Dq6JHMzjlL1lR2yoNuNvxlOEej93lt6H2r0s=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: cA+0IoAyCHHDkjIL9MPmk5AdVUHzu0n7NznpD3I+o6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3098 (0xc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: Sep  4 18:44:42 2026 GMT
            Not After : Sep 11 18:44:42 2026 GMT
        Subject: CN=6a9b119a-8732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d4:b0:90:f1:6c:63:e6:52:e3:50:e5:e2:b9:
                    39:90:32:7e:20:cb:3d:06:99:43:9b:03:68:2f:cb:
                    5f:4f:c5:8b:23:d9:f9:b9:62:f3:b5:ae:ef:36:c4:
                    93:34:0c:41:2f:9b:5f:95:bc:33:fe:a2:78:56:11:
                    c1:dc:b2:93:54:ea:80:66:72:b9:9a:98:50:c8:59:
                    95:d3:1a:1f:71:04:df:22:d7:52:57:5b:36:88:94:
                    d0:a5:fc:9e:b4:7e:49:a3:51:80:a3:cb:cb:6f:0d:
                    c8:5f:56:cb:6b:42:e5:d0:0f:9e:6e:5d:1d:e5:01:
                    ce:1a:7c:f6:5a:4a:98:3a:2e:ed:d9:25:c8:35:1f:
                    5a:ad:62:00:fa:8a:1f:17:01:6d:f1:9f:bc:f3:c9:
                    33:35:5e:4e:a1:d0:ce:3e:f6:c2:05:63:d8:12:e8:
                    ce:1d:12:17:53:16:ea:c4:2b:e8:7f:e6:44:a4:85:
                    c3:5e:8c:d2:6c:ed:97:38:87:fa:8e:48:2c:5c:06:
                    6f:99:31:c2:e0:5a:79:c8:7d:d8:3c:0d:4b:57:ae:
                    d7:fa:88:59:71:13:fa:46:ed:f7:93:cd:2e:fc:3c:
                    ed:72:dd:46:f9:7e:37:d1:19:83:20:42:98:8d:77:
                    20:bb:cd:73:f6:79:4e:4e:7f:4f:45:8f:ea:31:a3:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:8F:E1:73:46:86:43:11:99:85:17:03:F9:F5:79:4E:2A:B6:5A
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:21:77:b3:9d:1f:c8:ef:92:19:03:45:b1:17:29:09:bb:
         94:50:3a:92:a4:13:e9:c5:c3:80:ff:dc:e9:b8:8c:66:90:38:
         1c:eb:6f:2a:51:22:00:7d:48:60:c3:e3:2c:5e:c9:89:c4:b6:
         90:8d:6f:a2:77:a7:d3:40:04:a2:36:06:54:42:4d:c1:e9:ad:
         39:d6:ed:3f:64:f7:3c:1d:c9:57:89:f0:1b:7f:fe:c8:b9:00:
         4a:c1:a4:6d:59:38:b7:2e:17:34:5c:eb:3f:20:44:0a:cf:98:
         42:68:86:72:a8:2d:69:56:1d:17:39:63:b4:36:03:4c:36:5a:
         ab:12:42:44:c8:3d:60:3d:da:27:5d:7f:c0:cc:d1:0b:82:30:
         cb:22:59:7b:1a:74:e5:9a:a0:85:6b:b9:82:06:43:29:e4:82:
         9c:cf:50:91:14:b6:a4:c8:0e:60:1e:b0:ac:81:df:83:c7:55:
         f3:20:d4:9a:cd:1c:99:8c:7e:d6:af:89:72:b2:7f:c7:7c:d8:
         08:a0:63:29:72:88:5c:c6:51:2b:be:3d:83:bd:4e:94:16:4a:
         59:0e:99:57:3f:ed:63:3d:a6:48:22:c2:6f:9d:d0:57:3a:69:
         3c:d7:d0:a1:6f:2b:d7:d4:19:eb:92:e6:e0:cd:fb:b9:b9:53:
         89:b7:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:07:03 2026 by rpki-client