Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          TG+2TyL2k1P5STmJqGvgCbUL9aGfO5dyE/heL1pQbQs=
Subject key identifier:   13:EC:4B:1A:6F:17:7A:78:54:1B:68:58:8C:44:FF:6E:61:FB:4F:6A
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       089A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          0872
Signing time:             Fri 04 Sep 2026 20:46:33 +0000
Manifest this update:     Fri 04 Sep 2026 20:46:32 +0000
Manifest next update:     Fri 11 Sep 2026 20:46:32 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: 8yEuMCU1MDuLEuc1xjYe9A9gIKGtpFFobUTpybGHaRc=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4=)
                          3: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc=)
                          4: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: IQn111u6z6qLHojmECWDC2x1tW//DdSaFa0X28b5D0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: Sep  4 20:46:32 2026 GMT
            Not After : Sep 11 20:46:32 2026 GMT
        Subject: CN=6a9b2e29-7357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:a6:d0:3b:af:57:0a:1d:4d:10:94:59:d7:
                    c6:26:0a:61:79:81:63:f8:49:15:30:16:37:c5:8b:
                    bc:a4:95:04:04:53:c4:d3:fc:85:eb:54:e7:79:07:
                    3d:93:ca:b3:f8:df:2b:44:00:b0:25:d3:7e:04:ed:
                    5f:5e:0c:47:65:ed:2b:a6:22:f7:e4:89:04:ea:b7:
                    ef:24:6d:40:36:ea:44:d1:6e:e1:50:e2:7b:66:9d:
                    30:1d:2d:90:d1:b3:4f:62:06:d4:8e:c4:0e:93:e5:
                    7a:27:2c:e4:90:09:5a:d2:06:77:82:6c:55:d9:bb:
                    4c:59:93:7e:1e:73:58:3b:c8:56:3b:1a:e7:44:9d:
                    38:82:c2:4f:d7:53:e2:d4:50:c3:e2:6a:61:0f:88:
                    ff:87:a9:01:0a:9b:19:96:b6:94:b9:57:39:c1:c2:
                    84:0e:63:9e:42:1b:39:5e:bc:c6:ef:f4:ca:b1:a8:
                    5c:2a:54:70:04:98:28:b3:2a:ca:5f:ea:c8:24:58:
                    09:32:3b:ac:7a:b9:ec:86:08:8f:78:33:c1:a2:77:
                    45:1a:54:0a:a6:bd:fe:d3:b6:46:a3:50:75:cd:c6:
                    24:58:09:b5:74:f2:d1:45:81:48:94:ef:ac:29:dc:
                    6b:74:53:19:d8:0d:35:18:9b:1d:fc:8d:22:81:19:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:4B:1A:6F:17:7A:78:54:1B:68:58:8C:44:FF:6E:61:FB:4F:6A
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:93:27:10:1e:3f:e3:d1:ed:29:47:0d:7d:fe:4e:69:f5:35:
         cb:96:3b:54:38:e7:d8:30:ab:c7:72:49:59:23:2d:2d:55:ee:
         fc:8b:bb:f7:96:93:79:dc:a6:e4:e5:23:c0:a0:8e:b4:d1:46:
         b8:41:4f:e5:10:f2:8d:3f:b9:64:d4:ef:14:28:0d:71:5c:eb:
         ad:9e:da:51:b8:21:fe:e9:db:af:52:c5:9d:44:24:bf:7b:34:
         a7:6e:b0:41:a7:f2:e2:92:45:4d:32:a1:cf:a1:16:6b:c5:f3:
         f6:3d:dc:40:88:34:13:47:87:cd:55:6b:e6:f4:35:85:ff:87:
         4e:53:59:38:4f:75:88:da:71:a7:5d:9f:2e:53:b7:1b:ce:e9:
         ed:9a:94:b2:7a:06:fd:ab:fa:8f:23:54:ca:46:19:26:af:0e:
         35:21:a8:4d:58:5d:ab:35:83:08:9e:5c:82:31:32:79:b3:e3:
         0c:10:bb:75:d5:3e:93:90:2d:94:16:a0:33:f4:f7:c2:f3:75:
         f5:76:db:da:cf:2b:8d:b0:91:d8:fc:19:30:29:7f:3e:34:dd:
         19:9c:97:0b:74:2d:66:2a:76:5b:78:86:4b:7d:c1:df:81:fb:
         27:d8:05:c5:c5:68:2c:eb:ff:7b:26:ac:93:94:0b:13:62:ec:
         0c:87:2b:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3
MzU5REQ3NDAwHhcNMjYwOTA0MjA0NjMyWhcNMjYwOTExMjA0NjMyWjAYMRYwFAYD
VQQDEw02YTliMmUyOS03MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+mm0DuvVwodTRCUWdfGJgpheYFj+EkVMBY3xYu8pJUEBFPE0/yF61TneQc9
k8qz+N8rRACwJdN+BO1fXgxHZe0rpiL35IkE6rfvJG1ANupE0W7hUOJ7Zp0wHS2Q
0bNPYgbUjsQOk+V6JyzkkAla0gZ3gmxV2btMWZN+HnNYO8hWOxrnRJ04gsJP11Pi
1FDD4mphD4j/h6kBCpsZlraUuVc5wcKEDmOeQhs5XrzG7/TKsahcKlRwBJgosyrK
X+rIJFgJMjusernshgiPeDPBondFGlQKpr3+07ZGo1B1zcYkWAm1dPLRRYFIlO+s
KdxrdFMZ2A01GJsd/I0igRkwqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPsSxpv
F3p4VBtoWIxE/25h+09qMB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4
MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjc3OS84OTAyNDk5NDE4MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1C
T2plcFdIZG1vQjl6V2QxMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFZMnEB4/49HtKUcNff5OafU1y5Y7VDjn2DCrx3JJWSMtLVXu/Iu795aTedym
5OUjwKCOtNFGuEFP5RDyjT+5ZNTvFCgNcVzrrZ7aUbgh/unbr1LFnUQkv3s0p26w
Qafy4pJFTTKhz6EWa8Xz9j3cQIg0E0eHzVVr5vQ1hf+HTlNZOE91iNpxp12fLlO3
G87p7ZqUsnoG/av6jyNUykYZJq8ONSGoTVhdqzWDCJ5cgjEyebPjDBC7ddU+k5At
lBagM/T3wvN19Xbb2s8rjbCR2PwZMCl/PjTdGZyXC3QtZip2W3iGS33B34H7J9gF
xcVoLOv/eyask5QLE2LsDIcrOQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:07 2026 by rpki-client