Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
File:                     uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json)
Hash identifier:          Yc4vZy5n1QES1AUiYgTQvFY9dYn9kexczU5hc0GllMA=
Subject key identifier:   7D:2C:74:A0:59:E4:96:5A:56:F0:57:E2:1A:66:CF:CE:86:52:4E:6A
Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
Certificate issuer:       /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Certificate serial:       10E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
Manifest number:          1AF5
Signing time:             Sat 26 Sep 2026 17:21:38 +0000
Manifest this update:     Sat 26 Sep 2026 17:21:37 +0000
Manifest next update:     Sat 03 Oct 2026 17:21:37 +0000
Files and hashes:         1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: ANEh+xQ4uOqiqi/KFdASUs9B7GqOYcFJHEdq6O/SWOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4322 (0x10e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
        Validity
            Not Before: Sep 26 17:21:37 2026 GMT
            Not After : Oct  3 17:21:37 2026 GMT
        Subject: CN=6ab7ff21-e3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:24:e4:53:1c:af:ec:af:b0:14:c6:e8:3e:
                    bb:3f:2f:5e:a6:84:04:8c:e2:01:8b:28:70:6b:25:
                    f1:2c:d5:7a:f2:80:51:ff:d4:5d:52:d9:c8:c6:c0:
                    03:22:eb:64:8b:46:63:a8:bc:4e:31:86:ab:dc:a2:
                    6e:bc:81:38:99:f7:70:47:a6:bb:a3:55:bf:14:d5:
                    93:1d:cc:a1:4e:09:3a:57:c7:dd:b0:a0:39:e0:4e:
                    d2:e2:bf:e4:26:e9:30:3b:42:dd:4d:79:6f:c2:69:
                    6f:d6:2e:28:6a:8e:3b:90:5b:8a:27:13:ba:dc:b1:
                    bc:57:90:33:95:e1:09:72:d2:63:ff:e3:d4:3e:fa:
                    21:ae:35:1b:1c:88:ca:96:a9:bf:3e:6e:ff:1e:63:
                    f5:93:de:e1:a4:94:77:71:13:8c:d0:2b:f7:14:54:
                    b9:74:a4:e6:cd:78:8e:60:eb:a1:25:ce:2c:14:bf:
                    b5:36:db:2c:05:d2:1b:bf:cf:b6:1b:22:47:9e:2e:
                    5e:48:5a:32:8e:cf:b9:4e:ad:a1:d9:f8:59:7d:fd:
                    d9:8d:bc:f1:32:33:40:39:f6:82:a0:e2:f9:e3:15:
                    a4:1f:4a:6e:5e:eb:b4:04:19:bb:b4:6b:95:34:24:
                    5e:04:ac:69:14:85:67:13:00:79:9a:d0:da:7e:01:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:74:A0:59:E4:96:5A:56:F0:57:E2:1A:66:CF:CE:86:52:4E:6A
            X509v3 Authority Key Identifier:
                keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:e8:86:a0:b0:f0:eb:92:b5:94:6f:8a:e6:30:2d:54:ac:
         59:a5:70:54:5f:fe:c9:0f:5c:0f:82:e6:09:30:bf:03:28:58:
         e8:eb:95:1b:2a:a7:50:eb:2f:c1:f1:12:5b:65:07:a9:a3:1e:
         99:61:04:b8:bf:c5:f5:6e:f8:ad:f7:f2:a9:a9:aa:5c:6a:70:
         37:58:68:86:39:05:5e:c3:b8:de:fd:f0:91:d9:f0:42:2a:52:
         f3:c8:59:42:af:68:79:2b:a5:d3:ef:fa:2c:58:16:b0:ee:3e:
         43:19:0c:5e:13:aa:65:45:14:3d:26:de:23:2f:dc:9b:75:44:
         44:2c:22:c4:eb:b3:15:7b:6a:7d:af:84:d3:30:ca:b8:f4:76:
         43:72:d4:b9:82:b9:ba:ea:4b:dd:d2:af:59:fb:02:4a:d3:62:
         e2:8f:b2:af:27:51:ba:25:97:d0:be:09:02:d1:62:32:c1:dc:
         b9:c0:86:d3:47:16:64:97:5a:2f:d8:96:ce:f1:60:18:b9:fa:
         2d:52:0d:6f:47:f6:be:58:b2:e7:c4:0c:ec:fd:8a:59:51:b7:
         48:12:ba:87:d5:14:5a:20:a7:28:a5:ed:b5:fb:5d:5a:ea:82:
         77:5c:53:aa:01:c4:7a:c0:27:e1:f8:33:2c:a8:8a:9e:2c:38:
         ac:02:b4:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF
Q0IxMUZERDEwHhcNMjYwOTI2MTcyMTM3WhcNMjYxMDAzMTcyMTM3WjAYMRYwFAYD
VQQDEw02YWI3ZmYyMS1lM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTIk5FMcr+yvsBTG6D67Py9epoQEjOIBiyhwayXxLNV68oBR/9RdUtnIxsAD
Iutki0ZjqLxOMYar3KJuvIE4mfdwR6a7o1W/FNWTHcyhTgk6V8fdsKA54E7S4r/k
JukwO0LdTXlvwmlv1i4oao47kFuKJxO63LG8V5AzleEJctJj/+PUPvohrjUbHIjK
lqm/Pm7/HmP1k97hpJR3cROM0Cv3FFS5dKTmzXiOYOuhJc4sFL+1NtssBdIbv8+2
GyJHni5eSFoyjs+5Tq2h2fhZff3ZjbzxMjNAOfaCoOL54xWkH0puXuu0BBm7tGuV
NCReBKxpFIVnEwB5mtDafgFS1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0sdKBZ
5JZaVvBX4hpmz86GUk5qMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD
N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj
dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX4LohqCw8OuStZRviuYwLVSsWaVwVF/+yQ9cD4LmCTC/AyhY6OuVGyqnUOsv
wfESW2UHqaMemWEEuL/F9W74rffyqamqXGpwN1hohjkFXsO43v3wkdnwQipS88hZ
Qq9oeSul0+/6LFgWsO4+QxkMXhOqZUUUPSbeIy/cm3VERCwixOuzFXtqfa+E0zDK
uPR2Q3LUuYK5uupL3dKvWfsCStNi4o+yrydRuiWX0L4JAtFiMsHcucCG00cWZJda
L9iWzvFgGLn6LVINb0f2vliy58QM7P2KWVG3SBK6h9UUWiCnKKXttftdWuqCd1xT
qgHEesAn4fgzLKiKniw4rAK0+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:21:35 2026 by rpki-client