Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft
File:                     UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft (raw, json)
Hash identifier:          VgfBWVEJ5dlnV4G9D5lJQBEzKStyzYYedG6btuIvUnA=
Subject key identifier:   8F:44:B9:9F:65:1D:7C:AA:6E:1A:42:A2:C4:C3:E6:A7:4C:A0:80:4B
Authority key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8
Certificate issuer:       /CN=A91FB95D/serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft
Manifest number:          51
Signing time:             Fri 09 Oct 2026 09:12:26 +0000
Manifest this update:     Fri 09 Oct 2026 09:12:25 +0000
Manifest next update:     Fri 16 Oct 2026 09:12:25 +0000
Files and hashes:         1: UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl (hash: pJWovMvPVG/SnhFxc7bworHETYy9qZ5MQlNZJuoPCNI=)
                          2: C4B1F19088EF11F1BEAD5A114511F970.roa (hash: xo/UHdXsxPGdn9koRsNyDMlw86tZjm0AwgRBi0XgpeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl
                          rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8
        Validity
            Not Before: Oct  9 09:12:25 2026 GMT
            Not After : Oct 16 09:12:25 2026 GMT
        Subject: CN=6ac8aff9-4a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:08:36:dd:ca:df:66:4b:90:0d:84:72:ca:
                    b1:71:90:f1:61:79:5a:f0:d8:fb:16:16:c2:27:83:
                    79:b2:72:40:b6:83:f0:08:07:9d:ae:7e:01:f1:94:
                    ba:82:46:36:c2:70:d5:2c:de:66:ee:b9:7f:05:09:
                    22:a0:ce:ed:c2:36:e4:8d:54:dc:e5:c6:7a:4a:1a:
                    02:20:c5:38:74:4b:92:60:c5:1f:e8:bb:7a:cd:2c:
                    3f:97:3a:17:59:3f:b4:1b:ac:e2:6c:83:00:ba:4c:
                    2e:7b:af:8b:2d:78:83:cb:95:93:ab:68:99:02:c7:
                    2c:13:a9:81:ee:e3:ad:ca:ec:cf:8f:ca:50:54:e6:
                    89:3a:c5:57:67:6b:50:21:90:3b:1b:e2:6b:85:61:
                    ea:48:47:d5:d9:f1:82:aa:d8:54:ed:d7:c0:e5:28:
                    e9:03:a9:47:dc:a9:d6:77:bf:49:3b:33:9a:27:5b:
                    b8:15:68:1e:d6:5f:8f:ab:dc:da:6b:1f:ca:7e:04:
                    52:e2:61:0a:08:6e:01:56:d3:a9:2d:04:0c:04:97:
                    46:a1:46:25:14:c6:ec:05:bc:d3:7d:0c:00:4e:53:
                    7b:65:fc:a9:47:9d:78:60:02:9b:4f:80:fc:1c:4a:
                    f3:85:7d:d0:79:8e:2d:15:f0:70:fc:1a:64:66:db:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:44:B9:9F:65:1D:7C:AA:6E:1A:42:A2:C4:C3:E6:A7:4C:A0:80:4B
            X509v3 Authority Key Identifier:
                keyid:50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:f1:6c:73:eb:73:41:32:95:b3:3f:e0:36:27:a2:2a:1f:
         57:d0:93:44:1e:a1:dc:e2:98:71:12:93:28:32:5b:a7:44:0c:
         b6:95:2a:4a:3c:e6:8c:91:1b:4a:d2:ee:b6:65:ff:5e:74:dd:
         c3:01:18:02:82:b0:ed:44:ba:4d:6f:43:8d:1a:fa:31:4e:4e:
         f6:9b:81:ea:9c:d9:db:f4:7f:b5:d5:db:5e:d7:ef:c6:af:f1:
         1f:1c:a6:f8:37:b1:30:8d:1f:01:1d:3e:44:10:1d:c9:70:c9:
         4c:be:6b:4c:05:55:83:6d:a6:f3:c0:a5:d4:6b:f4:79:10:39:
         9c:ff:a3:1c:5a:67:74:de:a8:9f:13:33:a2:f9:3a:16:cd:90:
         d8:65:a7:df:a3:cd:a7:6c:c8:78:a0:7b:e7:ad:e5:e4:c4:7c:
         ce:98:dd:68:47:c1:15:ba:7c:1c:bc:2a:05:c9:40:e3:ef:3c:
         f5:ce:a1:6c:41:88:b3:0c:3a:7c:35:9f:18:00:7d:80:11:17:
         99:76:3f:16:c5:f5:bb:cb:23:6c:31:9a:70:fb:97:a6:0b:c5:
         b0:0d:6c:10:c2:a6:19:a1:32:c8:c7:55:4d:6d:1d:61:c1:8c:
         5a:64:aa:5a:b6:e3:02:34:c0:89:f0:cc:63:6e:fc:37:b1:a1:
         d9:2a:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:44:07 2026 by rpki-client