Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          vP+gPqzfF88A61P+OFcVmQ+NwTVx1R02HFSE8p41/RQ=
Subject key identifier:   7F:01:F6:BE:7C:83:1B:3B:24:F9:C6:54:05:D4:9B:8D:F4:84:62:15
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0E55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0DE8
Signing time:             Fri 18 Sep 2026 17:54:32 +0000
Manifest this update:     Fri 18 Sep 2026 17:54:31 +0000
Manifest next update:     Fri 25 Sep 2026 17:54:31 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: Ry10NgcEO/wVmKCPkgVYidT/dephYRxQX0vp+Pq6GWc=)
                          2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
                          3: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: Ck9MZoOe7ob2C2a2or+Dyfv/jAKPzOkcpTF0nOQQiL4=)
                          4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
                          5: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3669 (0xe55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: Sep 18 17:54:31 2026 GMT
            Not After : Sep 25 17:54:31 2026 GMT
        Subject: CN=6aad7ad8-98c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:62:6b:31:8a:95:ef:cf:9c:fe:44:8f:4b:
                    f5:8e:69:d2:0d:43:9d:3d:c7:44:60:55:c9:e9:93:
                    4e:c0:24:61:8a:7e:22:c4:4d:91:f0:22:54:13:b9:
                    23:71:37:3d:f8:e6:46:a7:bc:00:40:c0:27:f6:9b:
                    5e:c8:de:4d:1a:33:7d:83:4e:d6:c8:43:79:a0:e5:
                    f7:d8:43:fa:04:7a:cd:82:6a:73:2a:84:8f:ce:20:
                    ef:b6:6f:1b:45:74:48:6f:86:4b:de:3d:b5:8b:79:
                    3e:ba:42:c7:74:d5:29:d6:d0:ed:ca:9e:27:1c:0e:
                    85:89:44:7f:38:e4:28:16:e7:da:56:f0:d2:58:3b:
                    b4:43:9f:2b:49:03:e9:a3:a1:27:9c:63:1b:a9:6a:
                    49:f2:e9:9e:71:ef:29:d9:59:e1:95:92:76:4a:88:
                    86:93:1f:1d:88:24:81:0e:65:d0:f4:c9:42:ab:28:
                    32:7a:1e:da:2c:58:0b:c7:01:45:30:d3:ec:1f:cb:
                    58:3a:87:fc:41:f9:4e:0d:4b:f0:7f:b9:c4:7b:2f:
                    76:d8:cd:e7:29:1f:67:c2:1d:57:a5:cb:6b:9b:e1:
                    3a:9b:b1:78:20:ea:9e:21:1e:f4:d0:ca:e5:9e:36:
                    a0:c8:a9:64:a4:f4:64:8e:b7:43:98:d4:2d:53:08:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:01:F6:BE:7C:83:1B:3B:24:F9:C6:54:05:D4:9B:8D:F4:84:62:15
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:b0:b2:5e:cf:55:36:0d:b9:70:a0:9d:f9:15:21:03:7c:
         8b:b0:8b:68:28:3a:7a:6f:af:92:6d:96:42:c6:db:10:6d:f5:
         de:f3:50:ea:96:23:cd:58:84:ee:b8:41:3c:9f:0b:18:32:95:
         03:f6:7c:1c:d2:ff:bd:22:f2:68:47:e8:df:b8:30:36:ad:5f:
         8b:d2:25:a0:58:02:5a:bf:68:81:5a:4a:c1:56:03:26:14:0c:
         8b:f7:af:a7:6e:de:7d:ee:6a:2f:12:cb:b9:9a:b6:a1:f5:46:
         c8:9b:62:e5:6d:bb:8f:a2:02:d9:ec:aa:32:4f:8b:fe:c6:ad:
         03:69:44:80:1b:43:24:72:f5:9a:9c:9a:50:dd:2f:7d:cf:22:
         ee:7c:ae:94:87:ff:ab:46:4f:1b:58:be:8a:85:9c:48:e3:01:
         c0:e0:07:64:ac:ed:e0:df:9d:62:49:1f:1e:88:19:e2:b7:ae:
         4e:a9:48:e4:55:83:2d:52:b3:4e:5e:c9:f3:ba:c3:43:15:cf:
         3f:28:d2:e7:0c:b5:1c:7e:e4:9d:59:9e:91:22:15:37:f7:27:
         61:fb:81:b9:27:ad:e6:e9:7b:68:0f:a5:53:59:cc:fc:74:d5:
         75:64:fd:e4:5a:50:ab:d7:9b:d1:bc:6c:01:1d:ba:dd:ec:9c:
         ae:98:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:38:27 2026 by rpki-client