Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
File:                     uGiurSwGbrZERE2wR1UigzYkoUI.mft (raw, json)
Hash identifier:          UzfbeN4IHJD+LhZLx341AvvXPVlu/RFHAAPMFi7pPVY=
Subject key identifier:   69:24:7E:7D:49:0E:31:22:D2:BA:CE:AC:59:3E:74:1F:76:46:DF:CF
Authority key identifier: B8:68:AE:AD:2C:06:6E:B6:44:44:4D:B0:47:55:22:83:36:24:A1:42
Certificate issuer:       /CN=A91A2BF7/serialNumber=B868AEAD2C066EB644444DB0475522833624A142
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
Manifest number:          05
Signing time:             Mon 05 Oct 2026 09:46:29 +0000
Manifest this update:     Mon 05 Oct 2026 09:46:29 +0000
Manifest next update:     Mon 12 Oct 2026 09:46:29 +0000
Files and hashes:         1: uGiurSwGbrZERE2wR1UigzYkoUI.crl (hash: 6SfzMT7DX6JoyaPa0B6LH9Ftpk1TSg5FSQkifoG2W+Y=)
                          2: 795E775CBD7B11F182EB58B66911F970.roa (hash: r0uKeirlP+BUrH5zH9qvtx1weVr+VrXu/913rYMa7E0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BF7, serialNumber=B868AEAD2C066EB644444DB0475522833624A142
        Validity
            Not Before: Oct  5 09:46:29 2026 GMT
            Not After : Oct 12 09:46:29 2026 GMT
        Subject: CN=6ac371f5-4f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:fa:81:dd:dd:c3:85:06:59:8b:6c:a7:fb:
                    69:50:83:68:6a:37:d2:09:ad:a1:29:14:b6:12:16:
                    c3:72:1e:7a:ab:95:e9:92:d9:89:9a:35:c8:b8:c1:
                    48:7f:78:3a:86:83:de:90:a9:7c:fe:72:6a:bb:44:
                    0f:d6:74:23:b7:66:5a:b7:05:76:8c:36:55:a0:f1:
                    00:e7:ba:ab:f5:a6:c2:7a:9c:e5:11:f0:c6:77:e2:
                    ce:6b:ab:ac:1d:0f:f1:fe:19:1f:04:6f:e7:3c:0e:
                    0f:a6:c1:90:74:92:1d:36:c7:84:56:dc:ee:d2:1f:
                    6b:aa:63:21:f7:ee:ec:dc:2a:c6:bc:48:44:ec:f2:
                    5b:b4:82:ca:86:d1:88:ad:0f:98:02:8c:69:5a:db:
                    8d:ef:b8:4a:b9:7c:c6:bd:6c:ad:2c:ae:5e:92:67:
                    8b:da:19:ea:10:6a:0d:29:63:bd:82:5d:a2:6e:81:
                    39:ed:a4:e3:61:d9:88:01:ec:3b:55:c0:03:38:9f:
                    73:f8:29:22:ba:63:56:96:da:7b:c5:c1:3b:29:db:
                    94:8a:1c:0f:db:05:51:55:07:78:cb:02:08:3a:dc:
                    e8:d1:31:1f:bc:e5:0e:33:69:8f:96:ff:5c:bd:de:
                    e5:53:9b:22:7d:f6:d1:e7:25:d9:67:71:25:36:78:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:7E:7D:49:0E:31:22:D2:BA:CE:AC:59:3E:74:1F:76:46:DF:CF
            X509v3 Authority Key Identifier:
                keyid:B8:68:AE:AD:2C:06:6E:B6:44:44:4D:B0:47:55:22:83:36:24:A1:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:9b:bc:a7:82:9d:a2:09:31:e5:e0:42:58:a5:8e:ef:62:
         3a:a9:fb:bb:c8:72:6e:79:f2:45:09:fc:ee:e1:46:ca:63:58:
         a1:e4:49:f4:c8:e1:98:10:20:ed:14:26:c7:a5:c1:79:6c:a8:
         73:f5:98:09:48:8f:b0:4c:f2:ea:f2:a4:64:6d:2a:37:ae:ad:
         a5:91:e1:42:1e:57:08:be:73:b9:a9:cb:16:e0:a4:ea:1f:04:
         13:ba:0a:0e:16:c8:9c:b8:8a:c0:79:69:d8:26:58:2b:42:36:
         c0:39:e4:d7:51:d2:a2:8c:86:1c:cd:92:a3:b3:54:a5:58:55:
         1c:80:67:6d:e4:46:16:22:1a:87:20:b7:b7:56:92:0c:e6:89:
         16:be:6b:44:be:c8:d9:9c:d3:f7:0b:24:e1:0d:86:94:e7:cd:
         6a:86:d1:9b:17:84:4a:9c:ce:b8:6a:f3:23:e9:66:47:ae:17:
         d3:bf:3b:65:55:e7:07:4a:98:a3:01:bf:43:79:26:34:db:4f:
         7f:5d:ef:b3:d1:d1:1f:01:fb:f3:f6:48:75:4c:bf:37:4c:30:
         ad:b4:d2:2a:a8:8d:92:b3:23:a8:6d:af:bc:ad:6d:4f:f3:c1:
         6f:16:88:64:4b:87:37:3a:12:a3:15:12:80:21:7b:16:db:47:
         d1:c6:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:18 2026 by rpki-client