Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          OP60VOvE6c7yxI1H0wcqJGyViEYhGOhMGuepo8KYM3w=
Subject key identifier:   4C:46:26:60:72:AB:B9:14:D6:9F:04:57:27:78:DB:33:4B:62:1C:53
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       03F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          03EC
Signing time:             Wed 23 Sep 2026 00:05:20 +0000
Manifest this update:     Wed 23 Sep 2026 00:05:19 +0000
Manifest next update:     Wed 30 Sep 2026 00:05:19 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: Dp9GMU+yRhY4ppmvMtSxM5jiGK+kV+J4Gy95wFIXqbU=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: coEyMl+P01v1R2i2iJg1fuZlCEmmrFGit4S5nWc09Hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Sep 23 00:05:19 2026 GMT
            Not After : Sep 30 00:05:19 2026 GMT
        Subject: CN=6ab317bf-4224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:17:5e:d4:05:4d:57:c2:ba:0f:37:ab:13:
                    bd:11:de:2d:7f:73:1d:64:cd:0e:a5:50:b3:c5:9c:
                    78:47:c8:9e:c4:a7:f5:57:3b:06:54:9c:50:6a:3c:
                    a5:c4:0b:6f:f2:c6:ba:a7:df:ed:0a:b7:d7:a0:01:
                    4b:ca:f9:5f:64:1d:48:b8:dd:e0:db:55:3c:00:be:
                    22:c6:ff:de:c6:56:db:1c:87:5b:8b:67:3a:dc:28:
                    01:c7:ae:b8:67:16:fe:66:7f:f3:ae:82:88:3c:56:
                    f8:ce:04:c5:e1:05:84:f2:d4:96:e6:91:49:cc:79:
                    72:b4:6e:bf:38:e6:ba:f2:6a:e4:53:7e:d7:4f:5a:
                    89:30:1f:48:aa:e1:4e:e4:bb:39:64:e2:5c:52:e5:
                    82:f2:ff:97:5c:bf:73:de:59:fb:51:33:8a:d6:ad:
                    b3:21:f3:d5:b6:30:69:36:5e:b3:09:ae:77:50:11:
                    f2:7c:fc:32:0b:e1:2c:3b:79:48:86:d3:63:6c:db:
                    36:f4:a3:0b:3b:93:0f:60:63:a8:4f:e8:69:f1:67:
                    38:c1:2e:b0:6f:7a:b8:bf:5f:60:8e:85:7a:32:34:
                    4c:33:47:a6:55:9e:73:60:29:a3:5b:32:6a:cf:f1:
                    01:0b:9c:9b:8a:53:cf:ac:61:b0:2f:72:5e:6e:c0:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:26:60:72:AB:B9:14:D6:9F:04:57:27:78:DB:33:4B:62:1C:53
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:72:23:75:35:b3:fe:9b:72:eb:54:67:89:2c:d3:1a:af:b5:
         db:2d:a0:b1:90:96:bd:f8:62:d4:41:60:03:7a:cf:bb:95:3b:
         f0:ca:00:b0:a2:4e:f1:98:51:ac:0a:b0:28:e0:bb:c4:7d:ef:
         48:44:b5:0b:da:fe:f2:61:7b:a8:7d:76:3b:0f:ae:70:12:ad:
         32:80:e9:43:41:8e:39:f1:79:cd:73:90:b8:88:cc:86:9d:4a:
         6a:33:c1:5f:e6:29:08:19:5e:1a:44:7a:db:9b:5a:8d:ef:7e:
         cd:01:c3:65:34:83:a6:f5:22:69:57:df:ee:90:59:b6:05:c9:
         d8:62:65:b4:5a:57:50:54:17:43:bd:0b:bf:da:dc:2a:27:0e:
         35:06:fc:ba:35:0f:8c:c4:e6:c0:96:16:14:d5:8a:a6:58:3f:
         92:cc:ac:46:f7:a0:1e:63:40:4a:98:6e:f0:04:f5:86:9a:78:
         b5:b3:ba:d3:fa:2d:5d:34:3b:85:8f:80:8e:33:8b:e1:44:08:
         3c:7e:a5:65:f1:59:40:c0:22:e3:27:4c:e8:ba:cf:2e:94:7e:
         35:fa:c9:0d:a0:b4:79:30:94:63:e2:d3:3d:34:d1:cb:a1:be:
         ff:d9:62:13:b5:4f:00:90:22:be:b7:69:26:d3:5b:c1:45:40:
         ec:bf:47:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI4QTExMTAvBgNVBAUTKDUyMTQ2QkYxMEYzNTk1RjE3QTkyMzlGNTM2NjRERDZD
MDEzRTJGOUYwHhcNMjYwOTIzMDAwNTE5WhcNMjYwOTMwMDAwNTE5WjAYMRYwFAYD
VQQDEw02YWIzMTdiZi00MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiwXXtQFTVfCug83qxO9Ed4tf3MdZM0OpVCzxZx4R8iexKf1VzsGVJxQajyl
xAtv8sa6p9/tCrfXoAFLyvlfZB1IuN3g21U8AL4ixv/exlbbHIdbi2c63CgBx664
Zxb+Zn/zroKIPFb4zgTF4QWE8tSW5pFJzHlytG6/OOa68mrkU37XT1qJMB9IquFO
5Ls5ZOJcUuWC8v+XXL9z3ln7UTOK1q2zIfPVtjBpNl6zCa53UBHyfPwyC+EsO3lI
htNjbNs29KMLO5MPYGOoT+hp8Wc4wS6wb3q4v19gjoV6MjRMM0emVZ5zYCmjWzJq
z/EBC5ybilPPrGGwL3JebsDyxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExGJmBy
q7kU1p8EVyd42zNLYhxTMB8GA1UdIwQYMBaAFFIUa/EPNZXxepI59TZk3WwBPi+f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjhBMS9BMTExOUNBMERD
RDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxmRjZram4xTm1UZGJBRS1M
NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VoUnI4UTgxbGZGNmtqbjFObVRkYkFFLUw1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjhBMS9BMTExOUNBMERDRDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxm
RjZram4xTm1UZGJBRS1MNTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQXIjdTWz/pty61RniSzTGq+12y2gsZCWvfhi1EFgA3rPu5U78MoAsKJO8ZhR
rAqwKOC7xH3vSES1C9r+8mF7qH12Ow+ucBKtMoDpQ0GOOfF5zXOQuIjMhp1KajPB
X+YpCBleGkR625taje9+zQHDZTSDpvUiaVff7pBZtgXJ2GJltFpXUFQXQ70Lv9rc
KicONQb8ujUPjMTmwJYWFNWKplg/ksysRvegHmNASphu8AT1hpp4tbO60/otXTQ7
hY+AjjOL4UQIPH6lZfFZQMAi4ydM6LrPLpR+NfrJDaC0eTCUY+LTPTTRy6G+/9li
E7VPAJAivrdpJtNbwUVA7L9HkA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:14:31 2026 by rpki-client