Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File:                     UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier:          rFqINRCKdqt6k6DiWB6FvNce8Ls5gVDwwAIvwI/rCT8=
Subject key identifier:   1C:B8:4D:2B:FA:D0:4B:70:D9:C0:43:47:70:15:1A:A7:DD:FA:76:F3
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer:       /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number:          D4
Signing time:             Mon 05 Oct 2026 07:03:52 +0000
Manifest this update:     Mon 05 Oct 2026 07:03:52 +0000
Manifest next update:     Mon 12 Oct 2026 07:03:52 +0000
Files and hashes:         1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: aZ3YTq9VRfovBu9IlQUQqYb5r6k/PKOzy+1MlHHzzp4=)
                          2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: VRMri+JmyP84ggb4uS0Bz/xwX6nfPL1abCeEWonYac4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
                          rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
        Validity
            Not Before: Oct  5 07:03:52 2026 GMT
            Not After : Oct 12 07:03:52 2026 GMT
        Subject: CN=6ac34bd8-9957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:67:2e:d4:ca:03:aa:71:68:a0:95:4b:26:
                    48:ab:6f:aa:1c:0a:67:68:d1:5f:d4:3d:60:c5:35:
                    13:c0:6c:82:86:05:96:02:9b:3a:b6:43:76:e4:0a:
                    9f:b3:cd:ed:d8:2d:3c:71:dd:94:3f:4b:e9:38:64:
                    ea:bf:a1:6b:e4:05:45:0b:5b:be:d5:f4:f4:2a:eb:
                    45:6d:62:1a:73:27:b9:8e:cc:ed:22:63:a9:05:4f:
                    a9:eb:9b:3c:8e:e1:c3:a3:75:81:9c:8b:a7:32:f7:
                    b3:c2:76:69:eb:2f:4e:ad:61:70:c4:4e:e9:fd:0a:
                    39:b1:a9:b9:59:0e:fc:98:68:6c:f3:35:c2:02:f2:
                    a9:96:c7:a5:d6:13:21:33:dd:2d:cf:9e:91:07:95:
                    4e:7a:79:2b:5f:4d:7a:65:6b:4c:0a:72:81:25:71:
                    66:67:31:9f:b2:d7:0a:f4:05:c5:4f:eb:fd:27:f2:
                    e9:8b:eb:5e:ff:4e:8b:ab:6f:10:4a:67:70:a0:3a:
                    16:55:79:23:4e:c9:44:33:df:dc:38:12:43:03:e6:
                    93:85:28:51:d9:d5:bf:3d:31:d8:b6:70:1a:9d:7a:
                    04:0f:cc:f4:5f:18:fd:d3:d6:a3:6c:e1:50:e8:2f:
                    2f:9b:15:ef:10:11:6a:61:01:f5:cc:c7:d6:ba:02:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B8:4D:2B:FA:D0:4B:70:D9:C0:43:47:70:15:1A:A7:DD:FA:76:F3
            X509v3 Authority Key Identifier:
                keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:bc:fc:99:12:7d:4a:5e:96:d8:e4:3a:85:03:99:2c:da:
         eb:7c:26:98:d5:9f:2e:d8:de:18:ee:68:3e:43:a2:e2:a5:d7:
         3b:26:96:d6:83:65:f1:6c:6a:4f:9b:27:20:30:f5:3e:3b:dd:
         37:db:e6:73:9b:e1:90:b1:7a:13:bc:fe:75:0a:e3:a9:9a:88:
         65:ee:eb:f7:68:e4:3f:65:e0:4e:eb:7e:36:5a:53:31:5c:24:
         ce:6b:62:ac:a8:3e:f2:cd:53:c5:4a:28:ff:67:ca:d3:78:7b:
         d3:a3:6a:d2:34:4d:0c:ff:42:aa:bb:f3:b2:b1:78:80:0b:0a:
         96:e9:33:38:1b:96:27:72:f6:b1:45:e4:13:48:c9:ee:c4:11:
         d3:57:23:9e:9a:b7:fc:76:5a:9f:5b:6e:0e:ba:e8:94:56:d4:
         d0:ec:f3:fd:c3:50:17:be:e3:6e:84:c5:81:65:1b:33:0d:9e:
         0b:3d:25:68:ac:d5:e8:7f:83:20:1d:90:59:c5:53:64:2a:1a:
         04:e4:ad:df:21:95:66:db:5e:32:15:53:bd:c0:6c:1e:da:f9:
         2c:5f:83:1c:55:36:1f:83:e3:b4:e5:61:d8:b2:f0:7e:7f:e4:
         05:71:e3:8e:6a:60:f6:65:ea:e5:48:b3:69:fe:f6:ef:c9:24:
         7f:07:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:24:32 2026 by rpki-client