Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
File:                     1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft (raw, json)
Hash identifier:          uqu1BLS6Uxnwgt/ZldhJpHfgl2WVzLXCRd17PbOk17k=
Subject key identifier:   F1:FC:32:2C:04:EB:9B:B2:F1:E7:41:47:E3:B7:E9:EE:6B:62:FA:B0
Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
Certificate issuer:       /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Certificate serial:       17E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
Manifest number:          17B0
Signing time:             Mon 28 Sep 2026 16:38:39 +0000
Manifest this update:     Mon 28 Sep 2026 16:38:38 +0000
Manifest next update:     Mon 05 Oct 2026 16:38:38 +0000
Files and hashes:         1: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl (hash: 1Bb+q/ZG/XVftWYW8/KaiQDm8f1nrAzXXvjj3IZtpr0=)
                          2: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (hash: qOit09+AVxL4JZOfb7Jk4FlkN3MrFEc/I7m2qFpUON4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
                          rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 16:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6114 (0x17e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
        Validity
            Not Before: Sep 28 16:38:38 2026 GMT
            Not After : Oct  5 16:38:38 2026 GMT
        Subject: CN=6aba980e-bdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:4f:9c:f0:85:17:f3:d6:39:99:58:2c:0d:
                    c3:1b:af:21:13:80:74:5a:53:09:98:82:1f:38:44:
                    d4:19:63:ae:f2:3d:0f:6f:56:0e:97:53:ee:e1:9a:
                    80:05:89:d2:6d:03:01:49:5f:19:8f:56:e2:b2:18:
                    a1:66:5e:e8:d4:82:0f:3c:7d:d8:9e:a0:a4:5b:4b:
                    9d:8b:92:41:71:81:03:5c:94:f2:50:ee:34:11:77:
                    61:ed:1c:c1:66:8f:ec:36:91:9f:ae:98:26:bb:8e:
                    dc:fc:ac:75:4c:e8:2f:3a:2f:3a:81:b8:28:02:8c:
                    61:56:ee:5d:d6:e2:26:0b:dc:a0:aa:a5:f3:bd:b8:
                    7f:b3:d2:1c:a9:40:cb:7f:1d:3b:0f:bf:66:83:4c:
                    9f:c0:61:8f:13:94:4f:80:b2:b5:7f:11:e7:a8:85:
                    2c:3e:f6:5d:40:53:fc:e2:fa:66:74:f2:df:da:29:
                    1b:cf:a5:b0:ba:73:7d:27:0e:fb:ce:7a:8b:ed:24:
                    27:37:84:7c:d7:26:90:ac:60:59:aa:3d:5d:39:bb:
                    ca:65:a0:b4:e0:01:18:aa:4f:02:6b:ec:99:de:7c:
                    1b:14:e8:45:3a:ea:ad:12:18:7a:ff:0c:ba:32:8c:
                    f4:f6:b6:58:fb:0e:2d:5c:97:d9:f6:3c:a2:6b:95:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:32:2C:04:EB:9B:B2:F1:E7:41:47:E3:B7:E9:EE:6B:62:FA:B0
            X509v3 Authority Key Identifier:
                keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:99:3b:f4:62:23:27:be:49:dd:6d:94:72:a9:ed:3a:f6:
         6d:3f:55:db:72:45:3f:e6:3e:e0:ba:83:a0:59:df:d3:b3:da:
         9c:4e:4e:43:08:fc:b0:33:47:7e:22:2d:bd:2d:28:55:54:f5:
         ee:8a:c6:c1:53:d1:15:fe:73:9b:6b:88:ad:eb:2d:09:9c:48:
         2c:3a:30:13:c2:52:0d:36:5d:20:05:06:38:80:2f:f6:ee:e8:
         3f:81:3e:80:23:54:3e:cc:34:e2:4d:55:a5:21:79:24:f1:90:
         19:04:3a:90:ab:3e:9d:7d:84:4a:dc:eb:6f:8a:5c:25:e8:ad:
         9e:83:f4:7a:fe:d5:f9:87:74:5b:c9:ee:90:be:bd:99:bb:f7:
         9b:a4:0f:9c:94:12:38:43:55:07:d2:7e:c0:12:88:85:a1:b6:
         c3:d9:6f:81:f7:68:2a:95:b8:bc:28:7a:5e:c4:f5:64:58:bf:
         5f:06:85:c1:75:25:7a:e2:04:26:13:95:ec:06:75:36:91:58:
         07:30:04:f1:a5:b0:ae:a8:be:4b:e9:ab:24:21:89:66:db:e9:
         22:28:65:3a:1c:01:c2:81:90:7d:45:a9:55:b7:ae:e0:cf:5e:
         d7:f7:e1:bc:fa:f2:84:ea:85:30:ad:c1:79:58:d3:34:9e:6e:
         a1:25:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:08:04 2026 by rpki-client