Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
File:                     UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json)
Hash identifier:          iSI52PJEwf/FPHdD37n5zkyP6/Jk5YVr063cPDUBVWo=
Subject key identifier:   55:A8:70:24:4D:B7:B9:42:D4:7E:1B:3C:46:A3:26:38:59:AE:E1:77
Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13
Certificate issuer:       /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
Certificate serial:       0C7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
Manifest number:          0C71
Signing time:             Thu 24 Sep 2026 18:37:28 +0000
Manifest this update:     Thu 24 Sep 2026 18:37:28 +0000
Manifest next update:     Thu 01 Oct 2026 18:37:28 +0000
Files and hashes:         1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: bT4CCZUCckRPO05fB1TRHrKt9aEyLecOSQsmgXyYfZc=)
                          2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl
                          rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3195 (0xc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13
        Validity
            Not Before: Sep 24 18:37:28 2026 GMT
            Not After : Oct  1 18:37:28 2026 GMT
        Subject: CN=6ab56de8-9b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:21:67:46:e5:9b:1f:59:87:3a:25:b7:7e:
                    52:87:0b:ba:2d:01:b1:51:a4:65:3e:8c:da:fd:12:
                    4b:25:f2:16:d5:54:5f:a1:14:3d:03:54:76:fb:c8:
                    2b:c4:70:b1:15:2e:74:e5:1d:ac:11:2b:c3:b2:74:
                    60:50:30:41:52:8c:35:ee:41:d6:df:c8:3a:1e:26:
                    14:5e:1b:7f:f8:da:ba:87:78:f4:aa:eb:55:2b:70:
                    43:cc:cd:ac:bd:11:ba:6f:ff:32:bb:11:c1:f6:03:
                    4d:e5:3a:0b:c4:46:d3:fb:6d:58:fb:ee:69:8a:c6:
                    53:4d:76:86:5e:36:c8:33:9a:f9:e0:89:c4:b3:58:
                    f6:51:fc:b4:60:62:96:8b:71:98:ea:80:90:42:8b:
                    1a:c0:8d:56:0d:b4:d9:98:00:99:29:09:ab:9f:8e:
                    0d:e1:7e:73:81:74:c2:ea:9f:75:5c:c4:dc:2b:40:
                    50:78:94:61:91:4c:41:d2:09:e0:62:70:da:a8:3f:
                    b8:f5:41:58:9a:96:22:2f:2b:68:ba:d0:6f:3e:61:
                    aa:33:2a:8d:95:40:b5:f1:56:59:94:71:9a:35:0e:
                    fb:a0:80:70:b2:cd:cb:9a:0d:c0:c8:36:b9:22:04:
                    c1:d9:12:99:69:70:0c:08:c9:47:14:4b:76:43:fd:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:70:24:4D:B7:B9:42:D4:7E:1B:3C:46:A3:26:38:59:AE:E1:77
            X509v3 Authority Key Identifier:
                keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:a6:45:40:6b:71:e0:90:f7:7d:90:41:46:de:ef:c9:6f:
         08:12:dc:18:e8:99:9f:02:a4:1b:fc:66:7f:c8:64:0e:c0:67:
         20:ba:b7:01:b1:dc:6c:7f:99:ef:88:70:b3:ac:32:a4:e8:83:
         9b:32:72:49:5c:96:54:85:ce:87:71:dc:88:77:73:db:b1:6d:
         c1:41:32:c1:6e:04:95:0d:0e:1b:9a:55:f0:d9:ac:ca:8b:36:
         b1:25:fe:59:1f:e1:34:9e:5d:66:98:9d:2e:db:03:e0:7e:99:
         bc:79:44:e6:93:fc:59:14:ba:7d:7b:dd:ce:5d:38:39:25:8f:
         d2:1c:6c:63:1e:5c:d9:1d:74:47:60:2c:4e:95:55:5c:22:52:
         7d:3d:05:55:46:cf:2c:93:df:03:3d:60:36:11:63:dc:c7:1e:
         bd:3b:b6:83:0f:4f:b9:77:ed:6f:33:4a:26:3c:12:7a:36:2f:
         e3:33:5d:ed:fe:0c:17:d3:8d:47:a1:36:a6:3c:15:5b:60:90:
         94:a3:e9:1a:97:61:65:73:06:20:75:9f:b2:76:0b:f4:79:d4:
         a9:05:e9:b3:51:41:7f:9d:30:fe:77:b0:d9:ee:f1:1c:a2:54:
         c2:60:4c:9a:77:41:9c:03:69:c2:fd:05:ca:75:c3:d6:5d:27:
         a7:28:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:42:05 2026 by rpki-client