Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
File:                     UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json)
Hash identifier:          6tKmhb8xK8HaEwM9m6YoazUtTGmb946/SjsSFjvgnFg=
Subject key identifier:   B1:E4:74:0F:0F:1E:78:C7:DE:A9:FD:59:DE:AB:5D:AF:31:E3:62:F5
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Certificate issuer:       /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
Manifest number:          038A
Signing time:             Mon 05 Oct 2026 00:43:56 +0000
Manifest this update:     Mon 05 Oct 2026 00:43:56 +0000
Manifest next update:     Mon 12 Oct 2026 00:43:56 +0000
Files and hashes:         1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: sfPVq5U/sEfbBxDhLKx5ppMe7j8PhU6R9O85PwEZHhs=)
                          2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: gqN7UWMyX0CPgI9L0kIUiJFyQbeTEOCGXadnvfS1PPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
                          rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
        Validity
            Not Before: Oct  5 00:43:56 2026 GMT
            Not After : Oct 12 00:43:56 2026 GMT
        Subject: CN=6ac2f2cc-8050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:5d:70:57:29:34:06:58:ab:ea:83:79:bd:
                    95:5a:d5:37:3c:cb:33:65:ad:b6:82:2f:3f:dc:1c:
                    b2:6f:5a:f6:25:37:cd:f4:8e:be:97:00:03:a8:23:
                    47:90:10:21:27:c7:83:f4:81:e4:ab:72:e6:ab:27:
                    c8:a1:e4:20:dd:3b:1e:be:ad:a8:b1:12:3b:19:3b:
                    20:2b:ca:38:c4:15:b0:b3:ed:17:14:d4:e0:e8:b2:
                    91:72:28:79:e3:cc:89:36:e4:7a:fc:52:69:30:e1:
                    fd:d7:d9:89:94:1f:71:21:2e:c8:26:40:0a:7d:07:
                    ef:23:1d:d2:93:60:b2:0b:55:58:82:8e:72:17:b1:
                    a1:9f:3c:4f:17:30:d7:8e:86:00:e3:11:2e:e7:f0:
                    95:38:0a:52:1c:3f:a1:38:ad:3c:40:bd:26:6d:32:
                    a1:cd:77:5e:9a:c5:1a:db:11:5b:95:92:15:26:31:
                    09:1b:45:d3:36:b8:24:24:16:7e:a8:08:95:2f:c7:
                    43:65:9f:85:b1:d0:60:0b:80:9c:bb:cc:9e:5e:aa:
                    4e:ec:84:b8:06:4d:1c:4a:41:d3:f8:b0:78:db:47:
                    23:04:95:c8:f1:9e:59:93:9d:83:a4:c9:7c:71:96:
                    8a:ad:7e:bc:d2:50:7e:b6:05:2e:e8:3d:d1:03:75:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E4:74:0F:0F:1E:78:C7:DE:A9:FD:59:DE:AB:5D:AF:31:E3:62:F5
            X509v3 Authority Key Identifier:
                keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:86:a6:64:4e:3e:f3:ed:0e:69:6f:26:b8:50:2a:4e:fd:
         f7:7f:66:e6:8b:9f:55:0a:e0:ba:80:3e:e7:93:c3:c0:9d:20:
         13:80:0d:85:17:b6:9e:22:a6:6d:74:e9:f0:42:a0:4e:66:3b:
         cb:45:91:40:f5:f6:6a:c9:85:bf:23:a2:c9:34:37:5c:31:84:
         c4:83:a9:73:aa:d6:7c:47:b9:55:51:90:d0:72:cf:5d:5a:06:
         31:11:fe:22:13:46:21:a6:8e:ba:9f:a1:a4:6c:93:4a:ff:e4:
         cd:f8:3f:61:9a:17:9d:0e:f3:ac:71:42:15:a7:d6:b0:30:f9:
         30:15:98:6c:cf:a8:cd:c0:8e:86:00:25:35:0e:ca:26:6c:6b:
         12:e0:b1:df:0c:06:de:f3:e3:c6:5a:6a:95:cc:59:db:be:f4:
         e1:7a:9b:c1:c0:46:0e:52:69:15:b5:c2:70:e3:64:98:ae:0d:
         45:a5:49:d9:5f:b7:89:d3:a9:b2:48:b9:76:2c:ba:72:b3:01:
         9b:60:8f:a3:b3:3d:b4:01:93:bd:ef:a9:97:bd:a8:a3:69:d8:
         c9:63:30:a8:b7:42:36:ed:36:4a:80:7b:be:16:57:53:d4:c2:
         ba:70:5b:53:68:a3:b8:a1:35:27:d6:74:21:2d:9c:30:83:1a:
         24:4a:13:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw
ODdFRkREQzUwHhcNMjYxMDA1MDA0MzU2WhcNMjYxMDEyMDA0MzU2WjAYMRYwFAYD
VQQDEw02YWMyZjJjYy04MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzFdcFcpNAZYq+qDeb2VWtU3PMszZa22gi8/3Byyb1r2JTfN9I6+lwADqCNH
kBAhJ8eD9IHkq3LmqyfIoeQg3Tsevq2osRI7GTsgK8o4xBWws+0XFNTg6LKRcih5
48yJNuR6/FJpMOH919mJlB9xIS7IJkAKfQfvIx3Sk2CyC1VYgo5yF7GhnzxPFzDX
joYA4xEu5/CVOApSHD+hOK08QL0mbTKhzXdemsUa2xFblZIVJjEJG0XTNrgkJBZ+
qAiVL8dDZZ+FsdBgC4Ccu8yeXqpO7IS4Bk0cSkHT+LB420cjBJXI8Z5Zk52DpMl8
cZaKrX680lB+tgUu6D3RA3WWcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHkdA8P
HnjH3qn9Wd6rXa8x42L1MB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2
MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y
MHFBSm1XUG1NLUVJZnYzY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApUuGpmROPvPtDmlvJrhQKk79939m5oufVQrguoA+55PDwJ0gE4ANhRe2niKm
bXTp8EKgTmY7y0WRQPX2asmFvyOiyTQ3XDGExIOpc6rWfEe5VVGQ0HLPXVoGMRH+
IhNGIaaOup+hpGyTSv/kzfg/YZoXnQ7zrHFCFafWsDD5MBWYbM+ozcCOhgAlNQ7K
JmxrEuCx3wwG3vPjxlpqlcxZ27704XqbwcBGDlJpFbXCcONkmK4NRaVJ2V+3idOp
ski5diy6crMBm2CPo7M9tAGTve+pl72oo2nYyWMwqLdCNu02SoB7vhZXU9TCunBb
U2ijuKE1J9Z0IS2cMIMaJEoTgA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 16:05:25 2026 by rpki-client