Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
File:                     UtXW_72oj1ReUbr5n32s4ZPAblc.mft (raw, json)
Hash identifier:          8aeqSA4gF0gqN2MAXunOvAajy2WvSY9gYibQJaAGt4E=
Subject key identifier:   0C:40:1B:5E:D8:9E:C9:70:F2:3C:E2:70:C3:BD:FF:AA:31:DB:69:A2
Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57
Certificate issuer:       /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
Manifest number:          08C1
Signing time:             Fri 04 Sep 2026 20:23:02 +0000
Manifest this update:     Fri 04 Sep 2026 20:23:02 +0000
Manifest next update:     Fri 11 Sep 2026 20:23:02 +0000
Files and hashes:         1: UtXW_72oj1ReUbr5n32s4ZPAblc.crl (hash: up3zjp/S3ZVCKqx7KWQe09lhWaRdQF+Ui+tjQG6JYgg=)
                          2: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (hash: gn4KKIjx+cVov8CUqaUqG9obpblSjgg6mNoakxKefS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl
                          rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17F6, serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57
        Validity
            Not Before: Sep  4 20:23:02 2026 GMT
            Not After : Sep 11 20:23:02 2026 GMT
        Subject: CN=6a9b28a6-8d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:71:26:c3:29:bd:ef:ad:2d:df:09:e1:92:
                    ce:97:d6:a1:d8:33:9f:39:0b:5e:ce:56:99:9b:6a:
                    73:7c:c0:da:31:7d:dd:ce:a8:92:dd:71:b6:fb:7e:
                    d2:79:63:29:91:0b:1d:c4:47:ca:7c:49:a1:08:cb:
                    48:98:94:32:61:78:0c:19:b6:66:50:7e:45:b7:c2:
                    c2:55:63:91:f6:e8:f8:c3:39:21:3c:6b:9b:28:a6:
                    86:0f:50:2f:db:52:af:79:d9:9f:f0:cb:8f:a5:03:
                    ef:5f:0c:da:b4:63:72:2c:36:16:36:27:ca:d2:7f:
                    31:c2:27:a8:21:c1:54:18:8b:a0:79:cb:19:99:fb:
                    1e:ca:69:d8:e3:75:7f:0e:3d:f0:17:e4:63:4c:c2:
                    9b:6f:27:a9:f5:d0:66:b1:cd:05:84:43:d0:3d:a9:
                    dc:a8:c9:5e:a8:b9:7c:37:c5:e5:1a:e0:5a:8b:bd:
                    24:0d:ae:61:ce:a8:f3:ef:6f:fa:e2:8c:88:7d:75:
                    59:ed:ab:c9:82:a0:64:ce:d9:81:7b:ea:68:cd:d1:
                    71:53:32:f9:c8:40:3e:9d:d1:06:25:0c:02:0c:f7:
                    41:a6:71:47:88:54:ae:6d:9e:32:98:91:e2:0d:44:
                    bb:9f:d4:85:0f:f4:d4:e5:33:3a:0e:08:b4:46:c9:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:1B:5E:D8:9E:C9:70:F2:3C:E2:70:C3:BD:FF:AA:31:DB:69:A2
            X509v3 Authority Key Identifier:
                keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:cc:88:32:89:ed:af:49:d8:da:4f:4f:f1:e7:fd:df:40:
         4e:55:5e:28:5a:b2:fd:9e:21:d4:26:54:9c:3a:03:11:ea:5b:
         e5:80:08:bb:07:c1:c6:4b:d3:1d:30:a2:26:87:fe:02:9c:77:
         eb:e6:a9:32:b7:10:58:dc:3c:7a:7d:7c:ae:68:be:2c:96:1b:
         1f:b1:da:c6:4b:99:62:60:8a:fc:30:98:40:8d:b3:01:b1:fd:
         03:cc:cc:88:aa:ab:ec:39:c6:7e:de:48:0d:c0:c9:a5:ee:05:
         e6:96:93:a6:8f:89:8a:cb:fe:c4:16:71:39:f5:b2:f4:4f:f8:
         a7:10:6d:ad:d3:88:5c:cb:e2:f5:54:7b:c3:8d:cb:67:b6:32:
         0c:2a:97:aa:a0:1a:00:14:65:1d:96:4c:14:21:e2:95:14:34:
         ea:1d:6e:17:d0:1d:11:40:88:93:d7:09:13:ae:55:3e:a4:57:
         47:5a:f8:1b:17:3d:ce:2d:c0:21:bb:23:d7:c7:ae:6b:6d:48:
         a0:2e:0e:92:7e:fe:d9:32:8f:3f:78:b7:19:c6:60:56:18:2e:
         e5:78:6f:f7:38:b4:97:a6:a5:4c:ee:d1:00:a7:d6:02:b4:cd:
         28:d1:ea:c4:9c:79:e5:4d:4a:6f:fa:67:1f:7c:46:69:99:63:
         ba:c7:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:03:33 2026 by rpki-client