Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
File:                     UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json)
Hash identifier:          FNad2Kc0X5tSFu7LDcoLnihzOobWK/v2vHssypVvRT8=
Subject key identifier:   69:0E:C6:4F:B0:15:E0:6F:97:99:C3:CC:1E:E8:E4:F9:DB:75:68:D1
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Certificate issuer:       /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial:       09DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
Manifest number:          09CE
Signing time:             Tue 18 Aug 2026 20:13:05 +0000
Manifest this update:     Tue 18 Aug 2026 20:13:05 +0000
Manifest next update:     Tue 25 Aug 2026 20:13:05 +0000
Files and hashes:         1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: Rjn+2wvSDFDJL3SecB/NWzxq85T4A6PF3IUXaYDaWks=)
                          2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: 8rPlmCK3KkG5hcmd4Inb5elC/JXqeY9737UahqoQ6Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525 (0x9dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
        Validity
            Not Before: Aug 18 20:13:05 2026 GMT
            Not After : Aug 25 20:13:05 2026 GMT
        Subject: CN=6a84bcd1-1975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:72:53:c9:cf:17:73:12:9f:71:01:83:2b:
                    69:94:17:9d:91:e0:04:87:03:2e:48:08:16:89:7b:
                    27:80:41:d2:80:67:0b:62:cd:b8:4e:9e:a9:da:1d:
                    17:1b:61:0f:ce:47:d8:a6:f9:54:1f:2d:af:4d:ef:
                    78:fa:5b:e7:7d:2e:b1:74:0f:ba:25:f9:70:96:b3:
                    2f:ee:87:14:0b:1d:a3:ea:05:5a:49:d4:e8:c3:f6:
                    18:3d:8a:5b:5d:74:cd:bb:f1:a8:0c:f1:f2:e3:3e:
                    12:03:a7:48:dc:8a:30:ca:c0:2f:76:a0:3d:c8:00:
                    5f:0f:69:70:25:3e:19:72:d3:99:8a:98:9d:b5:fc:
                    0f:5a:bf:38:2b:0b:4c:25:30:3f:25:5b:48:78:fa:
                    e9:b2:43:52:58:fc:23:bb:64:c6:9c:20:a2:8f:99:
                    0d:f5:68:ba:6b:ae:a9:8d:8a:2f:cc:ac:70:83:f3:
                    cf:c1:45:77:ba:ae:ae:fe:fb:f9:cf:ad:5d:16:27:
                    57:54:f8:04:15:36:db:75:d7:70:72:dc:bf:67:e1:
                    14:dc:c1:6c:59:04:f9:72:b7:13:97:09:fa:4b:1b:
                    93:65:ad:79:d0:8d:86:7a:01:47:89:99:f7:18:2c:
                    b5:e6:35:35:26:fc:57:9a:e3:06:2c:16:16:2c:ff:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:C6:4F:B0:15:E0:6F:97:99:C3:CC:1E:E8:E4:F9:DB:75:68:D1
            X509v3 Authority Key Identifier:
                keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:df:fa:d8:28:25:ce:10:38:4c:71:25:07:91:54:ef:7c:
         c8:a8:e5:23:d1:9d:e2:57:67:e3:50:96:5f:b6:39:2e:b1:0b:
         82:77:f7:7e:9f:c8:b1:cd:01:48:87:87:f2:1b:24:5a:7d:35:
         fc:09:cd:c7:f3:94:33:32:5c:74:f7:48:5a:d6:02:db:3b:7a:
         f5:a4:55:16:68:cb:1f:bc:f9:e7:ce:68:9e:fb:62:9f:35:a7:
         16:11:97:e3:37:17:2f:24:f9:05:51:de:d2:83:30:66:f5:8e:
         e9:51:48:de:9f:80:3f:74:e4:6d:b3:a5:90:77:91:55:ea:10:
         d5:81:ab:5c:09:55:ed:7a:a5:30:5c:a1:40:a6:8f:c9:2a:dc:
         86:41:b0:49:77:0e:69:1a:0b:d3:67:67:b1:2f:f5:cd:2f:f8:
         e1:4b:3e:0f:a4:3a:81:ce:98:4d:f6:a9:45:87:81:48:9d:15:
         ca:e7:ea:a1:7e:c0:11:68:a3:68:d6:d7:01:12:7c:49:bd:05:
         19:d0:ed:7b:4d:c7:b0:57:bc:87:c4:d9:56:b1:d0:a2:dd:52:
         ae:c2:b6:42:d8:1f:0f:8f:a4:1a:5e:b0:e7:4b:c9:53:4c:28:
         a2:f7:ed:23:a4:8f:1b:21:eb:29:40:12:50:09:17:4a:af:58:
         60:5b:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:11 2026 by rpki-client