Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          NR4KBpKuRnhtSkYh4uw+xg8uegPUvuKy7Ulcyce01RY=
Subject key identifier:   83:31:0E:A3:B3:55:D1:4D:4B:56:A9:10:86:FC:75:3C:40:5D:75:E3
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          FC
Signing time:             Sat 17 Oct 2026 06:55:11 +0000
Manifest this update:     Sat 17 Oct 2026 06:55:11 +0000
Manifest next update:     Sat 24 Oct 2026 06:55:11 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: H4GLchJiFW8Q+7196MCwGHPi3tEiFKQGYbxNt6koB0k=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: HFBzqsB1ywMD+JWUEHOpXWYJ4PzPIFvuRP9SLPHmgeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Oct 17 06:55:11 2026 GMT
            Not After : Oct 24 06:55:11 2026 GMT
        Subject: CN=6ad31bcf-0587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:27:b6:29:2a:40:83:82:c1:61:6d:4e:a3:
                    ce:ff:04:ef:d2:30:2f:8a:99:ea:d9:fd:ad:2f:94:
                    9c:bf:25:09:32:1f:3f:87:da:7a:03:9e:e5:c4:7a:
                    ad:5f:13:99:09:35:ef:37:82:f5:ac:f5:5e:d5:4e:
                    b3:e8:0e:bc:12:24:fd:87:6f:5e:0e:8d:c3:8a:7c:
                    b4:0d:22:02:76:d9:32:28:c2:41:ec:97:e7:da:1c:
                    cb:19:40:c2:ac:64:2e:97:64:53:19:7f:09:39:8f:
                    15:d8:d6:4c:0c:6b:3a:ab:9c:84:7a:c5:3c:76:93:
                    7f:62:aa:7b:31:dd:35:4e:c9:12:7a:06:eb:63:7f:
                    6b:4c:58:55:2b:fb:2c:c0:0f:98:e1:a7:f1:db:67:
                    51:28:61:f8:df:28:9a:93:42:b3:33:95:b7:87:4b:
                    f6:0a:85:93:63:88:b5:ed:a8:3b:48:54:22:fc:d0:
                    1a:4f:4a:da:e3:40:63:ba:36:96:83:c2:3b:50:25:
                    6e:e1:75:3c:c0:10:4e:97:0d:ea:8f:28:68:1d:7f:
                    fc:ac:a3:e4:36:f9:ba:66:c7:b1:4d:4c:82:0f:e5:
                    bd:be:18:07:2f:56:48:ad:87:0c:5d:cb:99:14:aa:
                    ef:cf:56:57:91:39:d8:d3:34:11:01:44:27:95:ee:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:31:0E:A3:B3:55:D1:4D:4B:56:A9:10:86:FC:75:3C:40:5D:75:E3
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:a8:f4:03:8e:3c:89:02:ca:70:92:d8:55:0e:26:85:df:
         88:b2:58:51:70:b6:8c:36:22:fb:12:76:3f:bf:99:1d:1b:33:
         73:5b:92:4c:99:3d:bf:9e:3b:8d:66:64:bf:45:79:29:25:8e:
         87:e1:d8:b6:5f:e8:b0:72:7e:e9:17:63:36:19:77:8e:ed:1b:
         9a:72:6c:0f:af:ff:b4:6b:2d:fc:fa:6f:fe:aa:91:9e:c6:17:
         5e:71:08:78:ad:73:2c:99:0a:94:82:6c:d1:40:a0:ff:8b:4f:
         27:de:91:9d:46:a0:06:6b:8f:2c:06:e6:91:61:63:4c:62:42:
         e7:9f:e6:9b:11:8e:c6:24:83:7b:fd:e1:d0:cd:87:2a:fb:18:
         3b:c6:fd:ae:95:4d:d8:7b:12:36:e3:13:51:ba:9d:1d:be:6a:
         af:a4:92:9c:6b:ec:f3:d4:29:bb:32:1e:7b:a1:fb:03:12:01:
         d8:ee:b8:48:5c:1d:0d:93:ad:e6:2f:ad:97:c0:87:72:ed:16:
         6b:0e:61:f0:1c:f2:9f:05:56:ca:13:2b:02:3d:b3:bd:bc:30:
         cf:c4:5f:16:0f:02:6a:4c:d0:af:ac:5e:16:31:83:31:d7:51:
         3e:a7:09:51:59:85:ad:b1:a0:93:19:ba:2e:da:7a:ff:05:ac:
         bb:4c:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:36:53 2026 by rpki-client