Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
File:                     U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json)
Hash identifier:          QwpMkku7vDk0KGe+IbZuR47yXunQMsMO725+RYP79Gk=
Subject key identifier:   B2:65:37:96:0B:7C:E5:8F:43:CD:A3:B3:F7:5D:F5:4E:F3:40:13:73
Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
Certificate issuer:       /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
Manifest number:          01D5
Signing time:             Sun 11 Oct 2026 04:12:07 +0000
Manifest this update:     Sun 11 Oct 2026 04:12:07 +0000
Manifest next update:     Sun 18 Oct 2026 04:12:07 +0000
Files and hashes:         1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: sK60udG1GO7goOjZvxUXj98ywPTXdfoCZ6HPgmmdH9Q=)
                          2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: qQKLwedn/C2ikUUx4cT43tzL687XdUpFednnBntiEcQ=)
                          3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: ynRpXZGmVceBMQx25RkW+LRXIrRmRVCK0pAGR+60GBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
        Validity
            Not Before: Oct 11 04:12:07 2026 GMT
            Not After : Oct 18 04:12:07 2026 GMT
        Subject: CN=6acb0c97-af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:c5:d7:99:1b:cb:c9:be:50:f4:3c:c8:c9:
                    ed:ee:dd:cf:49:e9:c8:e9:44:79:7d:c1:bb:02:e9:
                    70:18:c2:76:22:50:53:ea:f4:04:1e:bd:63:14:d1:
                    9b:e5:25:a9:0c:a4:cb:d5:60:b0:e2:cc:7b:76:05:
                    0d:0f:75:79:42:d3:9b:99:51:85:1d:15:a8:e8:48:
                    b7:09:4b:69:c4:40:db:35:5d:9f:b4:d9:5b:d4:5e:
                    8f:25:9d:65:4b:40:8c:8d:ba:5d:59:c9:4e:d8:1c:
                    f6:3f:10:fc:59:84:5f:4b:7f:65:9e:d8:02:61:3c:
                    ef:c5:08:15:b2:34:55:7a:10:ca:43:12:d9:08:09:
                    b9:34:50:0d:0f:57:9d:f1:c1:68:3d:2c:f1:3f:be:
                    d8:23:94:2b:39:2c:77:43:91:ea:de:ff:ff:80:30:
                    d0:d2:f3:3d:a0:31:73:84:de:37:d8:f5:51:08:fc:
                    51:d6:bb:54:ec:89:1e:61:d2:53:05:ed:d1:34:12:
                    e0:28:da:de:01:c7:c5:44:d7:70:2f:77:6f:bf:01:
                    0b:74:e4:7c:17:2c:00:c9:46:86:f5:ba:0f:b0:a5:
                    91:76:7c:6b:0e:fc:fc:6f:e7:00:90:51:1f:0b:da:
                    19:cf:96:21:57:a0:35:fa:7b:36:73:4d:89:f7:36:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:37:96:0B:7C:E5:8F:43:CD:A3:B3:F7:5D:F5:4E:F3:40:13:73
            X509v3 Authority Key Identifier:
                keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:b2:c0:eb:04:76:db:00:45:61:21:8b:bf:af:8d:6a:27:
         53:9c:6d:34:b4:cc:a7:cd:67:2c:4a:aa:3e:07:8d:33:bf:a2:
         02:79:9e:ee:d3:b4:f7:1c:08:ce:1c:b6:27:bf:69:de:4c:fd:
         99:33:0f:16:4f:f8:26:d3:2c:e0:c4:97:96:9c:0c:96:68:40:
         79:6c:20:f9:91:bd:6b:2a:0a:a8:e6:26:e2:39:4d:40:98:7c:
         23:61:5c:a4:75:34:8c:ca:f2:3a:d0:9d:04:21:4f:f2:d0:e4:
         72:bf:6d:b2:cc:8d:4b:17:00:91:b7:21:59:a7:d1:d9:d4:34:
         b6:f0:4c:56:b1:ef:ff:e8:04:27:e7:98:36:3b:40:43:02:65:
         54:03:b2:76:1a:6f:76:f6:1e:d6:5c:e8:24:19:05:e4:4d:bf:
         9e:d1:9e:30:d8:80:3c:1e:5b:4a:fa:04:bf:05:e6:8f:49:5e:
         f1:cc:3e:56:bf:ea:99:dc:5b:fd:1d:9a:70:72:22:47:23:eb:
         55:03:7f:6e:ee:94:71:ba:68:9d:59:50:11:da:6c:57:11:01:
         df:c2:2f:d3:10:41:3c:2b:3c:75:79:b8:7c:bc:4b:74:e4:f1:
         06:41:f6:53:5a:75:9b:25:8f:6f:9d:03:ea:c4:f8:e4:2c:0f:
         4b:ed:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:25:32 2026 by rpki-client