Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          vrE6g/iK+hDhXxqWhHgxH5J8JnXLr4dp4cn3G8/YXMk=
Subject key identifier:   7E:85:E3:BE:81:98:F5:92:43:EC:D3:38:26:04:4D:53:68:58:EE:F1
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       034E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          02CA
Signing time:             Wed 21 Oct 2026 02:29:23 +0000
Manifest this update:     Wed 21 Oct 2026 02:29:23 +0000
Manifest next update:     Wed 28 Oct 2026 02:29:23 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: WJGV287yx24ZCnb7tUY6Z9T1gm4HM84c1vp4ZJFNAIw=)
                          2: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: /8aNoHkd5WMBzFS5RQwttij8J4S9+4VU4+ch/fZt/28=)
                          3: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: h1kmSXOSh9hB1Pembp+obryLLCyX/Jy9hKyc99yQ2p4=)
                          4: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: BvZtidO39xcJVMvtTC2yAWPqZeYJTR1TDRCbq0I40zA=)
                          5: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: 8sVi7APVUMWC/vLNIOqv8VZ8fY9gmiSrGT00qshCHL0=)
                          6: 3AB1C050E13911F0A327D96A6F6F56BC.roa (hash: kZ5yEIx0kVeHPtASX+X1UTXzekdFNnRNNQJD/TqUvVM=)
                          7: 305C2134666211EFB1D51134C4F9AE02.roa (hash: rwQF1qCzzbF48r+kUIpOGV4+GJ1ZCOz0lVkdJPIaz8c=)
                          8: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: XNwJRzeuKeHDcBqNhhKVmwXSnNPS4SmsbpnOy4X5BaY=)
                          9: B36B955CC65311F196E129ED5C11F970.roa (hash: H1n6MmHLEswxmwPeDcWlOKPBlCXRmj2AP/9U9V4ANfM=)
                          10: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: wkKDUCmsQSMjyixWGLENAK6CiAfip7g6NUfyzce9GkA=)
                          11: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: XyxksCtoE0dbUbNjUOHqzxhkRAFJROSlcs5wq94tPig=)
                          12: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: 7xpqZ91wcPuMMRlkm0PRbNRyyyJyggzoweRHZKLnU7c=)
                          13: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: Nyd6ZyMhGEMnYfO+G0HxhCkTD8GQPCYOeDyFciQ5ww4=)
                          14: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: is4GC2tYWCBQjy7UB88/QmA47gnWmQfRAE7Wn/qoEMA=)
                          15: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: dwfAWK+Isz7eJ2W0pDk4KtDWJ9hoNoDtgFSpWj1PkKs=)
                          16: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: JdWj2rBzJqr4zzFFv9P4DAREPACL1IZNwJGgU8YAklM=)
                          17: 606F042E6B1811F1B59AF4BC8347A888.roa (hash: QotEZPEcXp6GfO9ceWSGmNQ5ZsQIvNMXBOFjup9LVAw=)
                          18: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: 3DGRacSyoDjXRmzkTGB3hxFRyCSf+ycEGHH1/BdOsE8=)
                          19: B427C866E7A711F0A8B0D3B6516F56BC.roa (hash: mYKAiO0yD2BFiUDaFmoGaGWg5ICsuhWuZ50XMnZqKCk=)
                          20: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: DbFSL15/B+AzAY4T13VMLeEL4vMc7Oj15jkYJlrDFl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 02:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Oct 21 02:29:23 2026 GMT
            Not After : Oct 28 02:29:23 2026 GMT
        Subject: CN=6ad82383-e5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6d:51:7c:77:90:4a:a6:82:13:34:48:20:20:
                    d5:27:1a:1d:42:59:99:88:f3:d1:42:c5:71:56:d7:
                    9a:0e:b7:ae:70:42:e2:e6:73:15:57:01:02:c3:58:
                    d5:dd:7e:4d:48:41:04:c9:3a:31:69:0f:e8:b6:34:
                    d4:be:4f:61:64:f0:55:09:d3:62:db:79:99:74:26:
                    69:73:a8:0d:45:37:50:67:64:24:8c:71:e0:86:e7:
                    4f:db:7e:c3:77:7d:a0:4a:39:ff:b6:1a:ac:40:74:
                    c9:f9:55:67:8f:bf:85:c5:63:a8:1c:81:35:13:8b:
                    b3:81:3f:1c:32:24:c7:9f:68:11:af:c2:cc:c8:a2:
                    8b:8f:58:c7:2b:fb:18:38:3d:4a:8d:b4:4b:51:9a:
                    ce:e8:00:78:88:fc:20:80:07:33:f2:dc:e9:6a:f5:
                    a1:0c:85:8f:c9:91:5d:81:04:3a:92:7c:92:61:b4:
                    55:09:75:82:e7:39:21:dc:3b:57:76:97:95:e5:87:
                    cb:5b:d1:15:bb:1c:a7:bc:7e:d5:62:b8:f4:4f:0a:
                    a0:85:63:03:f2:5a:17:67:45:9e:17:f2:37:e2:4e:
                    84:cf:d4:cd:e7:65:b0:60:dc:d5:e3:b1:26:f8:69:
                    67:81:9d:05:d3:b0:7c:c0:6a:04:d9:ff:cd:82:3e:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:E3:BE:81:98:F5:92:43:EC:D3:38:26:04:4D:53:68:58:EE:F1
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:27:8a:6c:0e:26:d0:91:e9:af:cd:75:66:66:e3:97:08:
         81:91:7c:05:28:a4:0e:a1:34:ae:ce:9d:29:5a:84:9c:cc:85:
         3f:3f:79:d7:34:18:2c:ff:fb:be:38:c7:76:9a:d9:9a:c1:69:
         f4:5e:81:d9:39:f3:25:7d:82:0d:ef:73:da:21:fd:19:d9:10:
         df:e5:60:76:9f:18:a9:36:0c:68:59:c0:e1:aa:44:64:5a:e2:
         33:6e:e7:3d:42:f7:72:28:e5:0d:4f:e1:46:7a:0f:e5:38:5e:
         60:25:85:45:8f:44:02:d3:2a:ee:58:ad:84:67:cd:da:4d:94:
         00:b1:f8:e9:71:2b:cf:0b:b8:45:10:b4:c2:32:23:7c:f0:08:
         94:70:33:ae:2a:8c:6b:f8:14:c7:2c:26:ac:e1:f0:69:57:0e:
         c6:ba:64:6b:6a:77:a8:63:46:e8:43:c6:c8:13:52:a2:2f:0f:
         61:9a:83:e5:43:9e:41:28:05:d4:b3:22:3c:be:82:7f:67:fa:
         e0:51:a3:f4:d8:ec:9f:f3:6c:49:8e:e9:a1:5f:ba:79:0f:73:
         84:09:7f:37:ba:54:14:41:c1:10:37:41:5c:2c:82:ba:63:b3:
         0b:a8:45:2f:f8:db:65:42:e6:6c:f0:5f:fc:23:09:7d:34:fb:
         b5:33:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:51:21 2026 by rpki-client