Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File:                     Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier:          UmloKX32cQcBZ/ahT4MAEividl+gS6Z03PQjV7MqnN4=
Subject key identifier:   96:FA:C8:AD:91:61:30:44:F0:C5:C8:7C:2B:EA:E5:2E:3B:69:A4:17
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer:       /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial:       08B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number:          08A5
Signing time:             Tue 22 Sep 2026 20:25:17 +0000
Manifest this update:     Tue 22 Sep 2026 20:25:16 +0000
Manifest next update:     Tue 29 Sep 2026 20:25:16 +0000
Files and hashes:         1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: mkq2m/zu5uuHSy7MwTEADzkUYz9QTirbRGz/t3roRnA=)
                          2: 3791632A030011EB909C3244C4F9AE02.roa (hash: XDxzL6lCljcaL+PFu7uqMJYwZnreyNdPjBF2CgcbiTk=)
                          3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: 8w0OkkiQMesnqjsDX17pMHO1P+oif+rNa46fjPHMrwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
                          rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
        Validity
            Not Before: Sep 22 20:25:16 2026 GMT
            Not After : Sep 29 20:25:16 2026 GMT
        Subject: CN=6ab2e42d-8c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:2c:e4:d0:84:1a:fb:00:c6:6d:99:b9:01:95:
                    1f:24:f2:f2:6f:24:25:65:e8:13:75:a1:40:52:79:
                    ba:3e:32:43:8f:f2:63:fa:6f:ee:f8:27:56:fc:c9:
                    e6:0d:e9:3d:8c:38:15:8d:f8:52:62:39:43:3a:90:
                    b7:64:8a:b0:72:2c:44:ee:bd:82:73:8f:9d:83:91:
                    59:bc:2c:89:33:0c:8a:56:ef:e3:7a:ff:74:eb:40:
                    d0:c9:28:52:08:1e:3a:a8:93:94:d7:65:ef:a5:20:
                    3a:07:67:3a:e4:1f:a3:5c:47:18:88:db:27:13:35:
                    07:63:3a:32:00:25:6d:b1:ec:07:94:3c:b9:21:2b:
                    57:83:9d:df:3c:70:bc:5d:e1:ad:20:9e:87:25:67:
                    b1:98:67:19:d8:69:97:c3:8e:33:49:0e:f2:37:8e:
                    5c:6b:13:f0:1a:1c:02:84:d6:6d:4a:ce:3b:0d:b4:
                    5b:6a:9f:87:9a:35:0a:3c:69:ed:6b:b9:07:42:73:
                    64:05:17:03:1a:17:f3:79:d6:c9:7b:24:46:44:6b:
                    09:a1:22:77:96:d6:50:93:ca:a1:f6:cf:c0:ca:d8:
                    2c:c5:73:6f:40:d6:ba:9e:e3:b4:bc:d7:8e:a3:07:
                    d6:36:e2:07:24:4e:5d:d1:fe:d7:aa:40:53:c5:60:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:C8:AD:91:61:30:44:F0:C5:C8:7C:2B:EA:E5:2E:3B:69:A4:17
            X509v3 Authority Key Identifier:
                keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:32:b4:c8:a9:94:e0:ac:84:ac:b6:a0:97:8b:27:42:99:52:
         c7:a4:82:d3:48:46:3c:03:d0:cd:94:01:1b:c2:ca:29:72:51:
         41:a6:96:b5:d7:ff:ed:6e:df:9a:d1:6b:f7:62:75:04:e5:d5:
         ec:b7:3b:ac:5d:16:f6:c9:34:c5:bd:56:7c:91:ef:1d:98:05:
         11:80:18:81:35:ca:70:4a:7a:7e:01:74:c5:5b:4d:18:79:b4:
         29:c8:03:10:fe:13:70:d0:c1:e2:4b:57:5f:62:55:12:2b:2c:
         7d:34:b5:d8:49:ee:33:a3:63:eb:2e:6c:89:46:47:fa:83:9b:
         0b:33:cd:c7:87:28:94:b3:2f:62:98:c5:40:75:32:1e:b2:7a:
         d8:3d:5d:55:14:b6:be:35:1a:1d:f8:d4:8f:f3:05:b4:e7:d8:
         96:42:ad:f7:1c:ad:d0:3d:19:b9:e0:fa:31:fb:74:5f:cb:74:
         38:da:1e:4c:e8:be:a0:14:81:11:e8:bf:d4:0b:8d:f0:88:db:
         79:82:7d:06:cc:5c:44:46:5d:e9:01:06:58:05:13:5b:c5:40:
         7d:75:8c:ff:0e:3c:88:39:98:79:84:33:9d:56:cf:5a:ef:6d:
         8d:d3:38:28:84:e0:0c:b4:50:19:96:09:c7:06:f1:47:f2:85:
         c6:d6:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:29 2026 by rpki-client