Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
File:                     uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json)
Hash identifier:          yTXmaaAoOEyIhzbsmGEYuHwiY2MVXHhrPT0rpcpgWmg=
Subject key identifier:   09:DE:B5:8B:C2:8B:90:4F:A2:1D:BA:BA:31:68:E3:EB:DB:39:10:11
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Certificate issuer:       /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
Manifest number:          C8
Signing time:             Wed 23 Sep 2026 06:34:26 +0000
Manifest this update:     Wed 23 Sep 2026 06:34:25 +0000
Manifest next update:     Wed 30 Sep 2026 06:34:25 +0000
Files and hashes:         1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: Pu/6Le9QjcLguy7GMHNRB0ZoYzCM4dU2VT//Tl5NVks=)
                          2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: /PEfcsPOZLF1b+5hUz53HClo8QR/oPzgzlje9Rn4Axc=)
                          3: g6DHXrlJXe3q9MNuk5wgOJdu924.asa (hash: jVNvIdmd8liSKDub1o5nyaepFI6kyX0CiEMe0Amf6vQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
                          rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
        Validity
            Not Before: Sep 23 06:34:25 2026 GMT
            Not After : Sep 30 06:34:25 2026 GMT
        Subject: CN=6ab372f2-ff04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:df:cf:d1:11:83:4f:13:5a:1c:8a:a9:a8:
                    06:b9:0a:ae:08:b7:37:d0:4f:6c:d4:3e:a2:6f:c4:
                    27:0b:06:88:42:2d:9a:fe:ab:6b:43:82:d8:53:fe:
                    a1:46:c6:9c:03:55:45:66:18:69:9b:eb:1c:01:d6:
                    50:b0:49:a1:7a:3e:6b:d3:db:43:33:38:b5:eb:53:
                    f1:67:3d:de:b1:58:f9:8a:cc:d9:be:3b:40:3a:c1:
                    00:78:8c:af:b8:62:0b:0b:4e:b9:9c:d3:2d:53:ef:
                    52:76:47:7a:0f:b1:e0:15:90:7d:39:8c:cc:6f:cb:
                    f0:5b:a7:ba:8c:fb:8a:85:81:2f:02:7d:f9:c6:0a:
                    46:3b:69:ea:16:e2:cc:f2:fb:fd:c6:17:b0:ef:a9:
                    9f:3b:74:58:0c:92:16:fa:33:79:82:05:8c:6e:b8:
                    02:48:f3:b1:0e:53:a8:61:fc:9b:8a:bd:e6:8e:b2:
                    8b:b4:1a:b2:bf:83:e2:40:97:ad:7b:cc:72:b6:4c:
                    bb:d8:c3:9f:c9:54:48:ab:84:bb:d1:c6:f7:7e:d0:
                    c7:0f:a7:a7:5b:ad:9d:6f:21:ca:d1:b6:da:aa:b3:
                    91:08:3f:7e:bf:ef:ec:4e:76:7f:7e:ce:33:80:34:
                    64:b2:29:8f:92:1d:e2:8e:9e:5a:e0:1b:80:2a:bb:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:B5:8B:C2:8B:90:4F:A2:1D:BA:BA:31:68:E3:EB:DB:39:10:11
            X509v3 Authority Key Identifier:
                keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:07:72:a0:8f:23:db:1d:e1:9a:f3:c7:3a:3c:39:5f:b5:
         8b:28:2e:fa:4e:17:2d:44:59:c6:17:89:c6:44:c1:1e:89:e6:
         bd:1e:97:ff:2a:4d:22:41:7a:9a:a3:9b:b4:fc:55:46:60:29:
         b4:22:aa:30:da:b4:94:d8:f1:03:05:13:c5:4b:57:b5:81:03:
         2c:83:e1:4f:0e:2d:9a:94:f2:38:17:8f:ed:7c:c7:5f:2a:0f:
         36:28:06:41:d1:23:b1:cb:5f:87:a6:a8:4c:ff:e9:68:18:e0:
         f9:9e:cc:b8:83:a9:e9:4d:5e:33:3c:a7:69:f4:ea:fb:d1:48:
         43:b6:1f:55:2f:93:eb:0d:54:70:cb:ca:e1:10:a3:f4:50:e4:
         61:01:a7:ed:76:59:4f:fc:d2:ad:ac:d9:39:70:82:a2:c8:36:
         85:a4:0b:d3:86:25:16:0c:20:e1:f9:13:db:ac:25:6d:5e:e4:
         66:bf:31:84:9c:06:c9:37:d7:1e:29:4d:75:24:03:87:fe:ac:
         ea:fe:29:a0:9a:2d:1c:f4:24:bb:57:6c:90:48:de:53:ad:ff:
         4e:de:27:2d:34:74:ab:b3:81:ee:2e:8f:dd:0f:40:88:b0:d1:
         c8:04:52:c6:6e:e2:e0:53:5c:6c:f6:c3:09:52:ae:56:08:e7:
         f0:8f:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:33 2026 by rpki-client