Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File:                     UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier:          /UmtpCSw+W+B/EwHEsNZ07VrttAv/gCRfszlBtvkd1M=
Subject key identifier:   86:E0:2E:BF:D5:EC:56:9B:24:F0:57:58:7D:90:7B:74:C8:58:3D:D8
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer:       /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number:          0258
Signing time:             Sat 03 Oct 2026 02:52:19 +0000
Manifest this update:     Sat 03 Oct 2026 02:52:18 +0000
Manifest next update:     Sat 10 Oct 2026 02:52:18 +0000
Files and hashes:         1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: vCJmWD2d1laVQHTLiXT+P7ZznYw6QqK27yI7zJuNGr0=)
                          2: YQD1sMPSEOIvp6ejZTR_ZqI5gi0.asa (hash: FgNS4rG/VrXvutFh5DEQ0VgrBP013/BwvJ/5sm0ioH4=)
                          3: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: js8xICC+uo4E5pknpNk0KkzoVevnkz6o6MdDYMenHmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
        Validity
            Not Before: Oct  3 02:52:18 2026 GMT
            Not After : Oct 10 02:52:18 2026 GMT
        Subject: CN=6ac06de2-8946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:08:8f:3a:cc:25:64:b3:e7:80:f0:6c:9a:
                    d5:6f:55:4a:48:fe:de:fd:f5:be:b3:3c:ba:62:d2:
                    71:bc:1f:f6:9d:9e:dc:41:09:d9:f4:f9:9e:2c:73:
                    bb:62:4d:f0:ae:88:e8:17:bc:7a:c7:3e:a4:35:42:
                    e2:a4:7d:d3:eb:f0:99:c9:b5:c9:d2:9e:0d:60:a2:
                    bf:f3:64:6c:0e:75:fc:15:a7:48:f1:22:c4:07:2d:
                    99:a5:ac:ce:24:c3:b8:d0:c0:11:c1:15:72:3b:8c:
                    ee:2a:36:91:db:a4:a9:f9:d6:60:00:82:8e:1e:75:
                    b1:e2:d2:b7:93:c8:81:76:c6:1c:56:24:14:ff:47:
                    1e:8b:58:06:60:60:eb:21:7a:df:4e:fa:fc:f1:3e:
                    46:0f:02:7d:32:63:03:be:94:30:66:bd:39:9c:6e:
                    fe:06:36:12:9d:53:6f:83:eb:46:42:f0:b9:1e:ab:
                    a9:8c:2f:ad:8f:43:07:d6:0b:16:ba:72:e1:15:c0:
                    61:3f:eb:7a:49:b7:8a:74:b0:4e:f9:87:57:e3:76:
                    89:a6:b0:5b:28:47:34:1d:c4:28:00:1f:20:51:41:
                    4b:1b:81:af:49:b7:54:1e:f0:27:1e:30:53:a2:00:
                    2b:82:76:6c:00:0a:af:cd:64:1b:cd:c5:5a:f2:21:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E0:2E:BF:D5:EC:56:9B:24:F0:57:58:7D:90:7B:74:C8:58:3D:D8
            X509v3 Authority Key Identifier:
                keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:af:9e:fb:4a:6d:90:2a:fa:e7:fa:fe:af:fa:82:cf:b5:6c:
         4c:9e:dc:1f:6b:02:fc:c1:b8:c6:e5:96:8a:3e:76:22:b4:50:
         eb:7c:cf:cd:55:19:01:da:22:f5:68:22:7d:fc:f8:35:fe:69:
         4a:75:95:b7:0a:3f:02:36:6e:f7:aa:4c:7a:86:48:d2:15:a4:
         43:66:3e:fc:02:de:14:23:ae:95:81:95:b7:54:83:54:be:d9:
         a5:db:39:3f:a2:88:4e:a7:b4:19:08:f1:96:de:30:6c:64:d1:
         d9:29:c4:81:d6:51:22:0b:28:11:ce:db:25:ba:b5:df:3a:57:
         8c:a8:7d:0f:7a:59:a0:9b:8f:fe:58:8b:3a:f3:7d:09:43:d4:
         12:18:a5:ec:f8:57:b4:4f:21:bd:07:5e:2b:dc:25:f2:6f:81:
         6d:45:eb:ad:ad:a8:a3:64:c6:57:d7:ce:e6:17:8f:27:6c:e7:
         e0:77:57:2f:f9:96:39:33:48:e1:24:5f:bb:41:2f:5f:5b:2f:
         18:18:92:07:03:60:92:b6:78:d9:c3:0d:40:96:e8:b5:c7:47:
         65:e2:4b:5c:9d:6a:e7:42:5e:6b:ff:cb:bd:f7:0b:65:c5:3e:
         9b:10:0d:92:ae:5c:9b:8f:13:27:29:3c:85:a4:b7:e5:be:f2:
         73:5c:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:18 2026 by rpki-client