Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
File:                     uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json)
Hash identifier:          EEKGOr814njTXFlA/Es5yALzYBJ9rH/YDH6obuEIhGM=
Subject key identifier:   CE:F7:9A:D1:1C:0A:4A:CB:6A:D1:99:39:0B:BC:FD:21:66:E7:7C:2B
Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Certificate issuer:       /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Certificate serial:       090D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
Manifest number:          08F5
Signing time:             Tue 06 Oct 2026 20:32:08 +0000
Manifest this update:     Tue 06 Oct 2026 20:32:08 +0000
Manifest next update:     Tue 13 Oct 2026 20:32:08 +0000
Files and hashes:         1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: 026tzANahPiCn+MejRDl4VgLTZni2xOFfPc/yoChP5M=)
                          2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: Hp4zWKni3ZG5s7a7I6JrXD6v+vCWtd+NXlSrK9iVhUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
                          rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
        Validity
            Not Before: Oct  6 20:32:08 2026 GMT
            Not After : Oct 13 20:32:08 2026 GMT
        Subject: CN=6ac55ac8-a373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:aa:16:27:b5:df:01:8c:81:1f:d5:1e:4d:
                    b1:ba:f0:84:d2:37:77:10:17:d1:aa:7b:0f:1f:98:
                    80:ef:eb:97:b9:13:7e:25:f9:b3:31:dd:8d:36:d2:
                    0e:43:7e:6c:2c:28:f3:38:08:6d:37:71:28:fc:b4:
                    d6:fd:01:e6:18:eb:16:04:a3:47:3d:b7:28:73:e7:
                    32:39:29:f9:27:4a:51:bd:7b:30:b1:62:7b:61:7a:
                    a0:d0:a0:87:a5:5b:44:19:a3:d2:3f:c4:3c:41:ff:
                    94:ef:3c:88:9b:14:ec:cd:6a:a7:4d:6b:21:73:6a:
                    41:5e:7b:3e:78:45:d6:f4:0c:28:4e:a9:30:80:e2:
                    06:13:a3:e8:ac:fd:06:5a:b5:6a:0c:c4:60:47:20:
                    c4:d3:8c:eb:f7:cb:a9:bc:63:8a:a0:fb:91:22:7c:
                    6b:c9:49:49:65:be:98:d9:ab:ef:60:79:7d:12:dd:
                    fc:6d:eb:e0:bb:84:31:7e:97:58:e3:16:60:ba:5a:
                    36:92:ff:16:8a:b1:31:93:b8:70:af:21:e0:8e:27:
                    65:f3:2d:fb:9b:7f:f6:bf:cf:41:c5:75:3e:e1:1e:
                    55:ae:36:6f:04:4f:5e:5f:de:eb:d6:6f:50:26:cc:
                    d2:6d:de:3a:3e:93:d6:bb:8b:b7:42:51:32:46:2d:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F7:9A:D1:1C:0A:4A:CB:6A:D1:99:39:0B:BC:FD:21:66:E7:7C:2B
            X509v3 Authority Key Identifier:
                keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:90:59:c9:f9:c8:6c:80:d0:88:1c:0e:ab:d5:be:7e:98:
         76:d5:d0:79:38:b4:06:a3:94:d3:29:2a:b9:0e:67:51:c7:21:
         87:7e:93:60:5e:3d:06:76:8a:95:68:01:dd:43:81:d9:29:84:
         44:d7:8e:4f:69:0f:f7:f5:b2:65:3e:a1:a4:57:c4:99:31:c4:
         18:2b:43:ba:a9:3b:1f:1a:7d:49:7b:57:50:6f:9c:65:8f:f3:
         09:1e:2f:7f:89:57:10:5a:48:24:ba:bb:b5:32:a0:45:6a:58:
         c0:13:0a:e0:f9:44:30:de:0c:07:56:6e:fe:a8:1a:42:c2:38:
         56:ef:c6:43:4f:38:3d:5b:a5:e5:de:f4:78:69:1a:de:54:8b:
         b5:84:13:f9:a2:e3:e3:e3:5e:9f:65:bd:e7:e0:fa:e0:1d:6f:
         73:85:aa:4a:c2:17:27:cc:41:6f:3f:6a:30:67:cb:b6:7e:9a:
         8a:56:0e:29:8d:da:a2:4c:d0:5f:b8:5d:fb:1e:9f:e4:d2:14:
         07:98:91:4a:5a:ab:6e:00:40:15:cb:89:ce:63:c6:da:cd:f6:
         9f:27:5d:1e:ac:7b:3b:82:92:e9:02:75:4e:90:46:e0:47:d8:
         20:67:2b:07:a9:e5:55:d7:a0:aa:be:7a:e7:60:3c:21:20:20:
         0e:60:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:43:46 2026 by rpki-client