Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          uLRVzZWtA1p0UN0STX2FGreCsFJU51WGFStZD4lBXyU=
Subject key identifier:   9B:A3:F5:11:AE:1B:1A:16:D7:3D:D3:A8:DB:22:86:D1:F6:9F:87:1A
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       0330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          02AF
Signing time:             Thu 03 Sep 2026 02:23:09 +0000
Manifest this update:     Thu 03 Sep 2026 02:23:08 +0000
Manifest next update:     Thu 10 Sep 2026 02:23:08 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: 0pPDPqwogP+fnD+IhNitEPniERu/linQQ4OWl4bLPNg=)
                          2: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: BvZtidO39xcJVMvtTC2yAWPqZeYJTR1TDRCbq0I40zA=)
                          3: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: 7+Wttubsgh6M8s9RLpNNpWEMKB3NAUyej26Yviq2ycs=)
                          4: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: is4GC2tYWCBQjy7UB88/QmA47gnWmQfRAE7Wn/qoEMA=)
                          5: 606F042E6B1811F1B59AF4BC8347A888.roa (hash: QotEZPEcXp6GfO9ceWSGmNQ5ZsQIvNMXBOFjup9LVAw=)
                          6: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: XyxksCtoE0dbUbNjUOHqzxhkRAFJROSlcs5wq94tPig=)
                          7: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: wkKDUCmsQSMjyixWGLENAK6CiAfip7g6NUfyzce9GkA=)
                          8: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: XNwJRzeuKeHDcBqNhhKVmwXSnNPS4SmsbpnOy4X5BaY=)
                          9: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: Nyd6ZyMhGEMnYfO+G0HxhCkTD8GQPCYOeDyFciQ5ww4=)
                          10: 305C2134666211EFB1D51134C4F9AE02.roa (hash: rwQF1qCzzbF48r+kUIpOGV4+GJ1ZCOz0lVkdJPIaz8c=)
                          11: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: 8sVi7APVUMWC/vLNIOqv8VZ8fY9gmiSrGT00qshCHL0=)
                          12: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: 7xpqZ91wcPuMMRlkm0PRbNRyyyJyggzoweRHZKLnU7c=)
                          13: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: dwfAWK+Isz7eJ2W0pDk4KtDWJ9hoNoDtgFSpWj1PkKs=)
                          14: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: h1kmSXOSh9hB1Pembp+obryLLCyX/Jy9hKyc99yQ2p4=)
                          15: B427C866E7A711F0A8B0D3B6516F56BC.roa (hash: mYKAiO0yD2BFiUDaFmoGaGWg5ICsuhWuZ50XMnZqKCk=)
                          16: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: 3DGRacSyoDjXRmzkTGB3hxFRyCSf+ycEGHH1/BdOsE8=)
                          17: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: /8aNoHkd5WMBzFS5RQwttij8J4S9+4VU4+ch/fZt/28=)
                          18: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: DbFSL15/B+AzAY4T13VMLeEL4vMc7Oj15jkYJlrDFl4=)
                          19: 3AB1C050E13911F0A327D96A6F6F56BC.roa (hash: kZ5yEIx0kVeHPtASX+X1UTXzekdFNnRNNQJD/TqUvVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Sep  3 02:23:08 2026 GMT
            Not After : Sep 10 02:23:08 2026 GMT
        Subject: CN=6a98da0d-96af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:4e:62:e2:61:f5:af:19:91:08:01:92:20:
                    d9:b4:10:a7:a0:7c:c5:51:a4:0f:7d:a9:ef:48:bd:
                    b8:8b:3e:83:29:a5:55:34:6b:97:e1:4f:8e:91:cf:
                    92:f2:31:1a:48:51:7c:82:8f:a2:5d:4f:7f:c4:a2:
                    93:2d:a8:76:69:bc:47:69:cf:88:70:1e:ac:13:94:
                    21:4e:35:02:10:f6:45:00:d5:6b:7f:02:3c:14:64:
                    41:e7:60:af:a3:c7:cf:55:5c:2f:ae:43:c9:d8:5d:
                    fb:bc:b6:cf:70:62:58:f8:72:b2:9f:c0:cc:c7:b9:
                    e4:76:0b:89:c1:9f:86:72:4f:cc:40:b9:18:95:fb:
                    a7:2c:43:c0:b4:76:59:92:cd:64:83:b6:50:a2:5c:
                    66:14:e7:7b:98:bf:9e:4f:6c:80:ae:d5:94:38:5d:
                    1a:dc:ab:a3:83:df:c4:2d:d4:48:48:75:29:d5:f1:
                    6c:c9:45:f6:3f:2a:d2:49:02:47:2f:f8:32:0d:a6:
                    76:85:89:b5:0e:66:1a:78:18:08:4c:19:ab:12:ec:
                    8a:03:2c:e2:2b:7c:68:7d:c8:fa:a7:8b:82:b5:c5:
                    89:c6:5e:1b:31:08:79:26:39:c9:90:ac:cb:0c:af:
                    f8:23:6f:98:b1:24:00:23:21:5a:cb:e3:60:cc:1b:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A3:F5:11:AE:1B:1A:16:D7:3D:D3:A8:DB:22:86:D1:F6:9F:87:1A
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:62:1b:8a:eb:86:e4:b6:23:1c:b0:90:50:ec:7b:8c:e6:
         81:25:ac:3e:f4:3e:0c:f2:82:c6:e4:a2:78:94:10:78:50:03:
         7a:5c:df:db:10:75:ed:1e:11:4a:23:28:f1:a6:6a:21:77:f3:
         fb:a4:4f:71:3d:c8:b6:61:62:51:16:a5:84:c3:ee:a6:7e:81:
         8e:db:2a:db:b5:ca:24:59:63:9c:26:ae:bf:1b:25:0f:87:91:
         eb:b4:0f:9a:f4:b7:51:01:b6:f7:6d:59:8b:5b:56:cf:15:7e:
         c3:ff:66:3a:81:69:1d:4f:4a:b5:57:5b:24:be:74:5a:5f:08:
         c1:e1:a0:a0:ab:42:c3:45:c6:ad:56:73:32:cf:56:16:9b:95:
         cd:f1:16:f5:29:72:17:1f:86:2b:7d:09:33:52:15:47:02:1c:
         cf:ea:92:b1:9a:70:31:9a:d8:11:cc:bc:e2:08:e6:db:9d:e1:
         e9:0c:fd:5e:1e:d2:01:0f:13:ad:29:e0:ae:d9:1e:c2:7e:c8:
         4f:24:f2:1e:84:d2:cb:62:a5:34:f7:81:46:d1:cb:6e:3f:41:
         66:63:49:f3:29:bb:bb:30:84:d2:a3:5b:ad:ef:cd:32:fb:20:
         67:96:df:00:67:02:ad:fc:68:68:3e:24:3f:86:61:b1:29:59:
         d0:8e:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:15:29 2026 by rpki-client