Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
File:                     uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json)
Hash identifier:          1WlcxMPTr9jlw/3kxvi3tB/PebylUIRYTvYOtUgLKZ8=
Subject key identifier:   5C:A5:35:2C:C1:EB:B8:E8:92:D2:F1:BE:A8:18:9F:54:BD:5D:E5:BC
Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92
Certificate issuer:       /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
Certificate serial:       05D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
Manifest number:          05CB
Signing time:             Sat 26 Sep 2026 23:06:30 +0000
Manifest this update:     Sat 26 Sep 2026 23:06:30 +0000
Manifest next update:     Sat 03 Oct 2026 23:06:30 +0000
Files and hashes:         1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: kwFjV3dLOPXoF4Ysbw+d9VZIVVqrSahG4x+7FjdC+4o=)
                          2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: GPYE5Y2HwgNl8OKwBNP753iF7mxnvwMFHfPxqy4O8EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl
                          rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDCB, serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692
        Validity
            Not Before: Sep 26 23:06:30 2026 GMT
            Not After : Oct  3 23:06:30 2026 GMT
        Subject: CN=6ab84ff6-4f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:fa:1b:b5:b6:bf:85:cc:be:3c:a2:8b:b5:
                    d5:f7:60:08:f6:43:8a:1c:9f:a9:25:38:0f:44:44:
                    55:93:25:99:52:67:63:8b:b1:1d:5b:13:ec:41:2d:
                    72:96:77:94:b7:38:37:24:d5:9d:86:62:82:99:3a:
                    80:2e:7b:e8:b0:41:06:2f:96:bd:da:cc:e3:5a:86:
                    cf:b6:19:5c:c6:84:b5:57:1f:62:5d:14:80:49:3a:
                    23:cd:dd:00:0f:fc:36:91:e5:97:6e:37:c1:24:d8:
                    ba:a7:2d:4f:f4:e3:c9:8c:09:9e:9e:df:ac:16:90:
                    88:3a:e6:23:0c:36:dc:e7:77:e5:6b:ca:92:19:2c:
                    c9:b6:6d:b4:07:06:1f:79:15:cf:2f:1f:1a:e4:92:
                    6e:7d:93:e0:50:7a:24:8e:55:35:6d:8f:03:41:c2:
                    db:29:41:b1:ab:d1:df:6a:c6:86:b2:23:5b:cd:29:
                    d7:ff:44:b9:9d:ef:6f:02:6c:17:47:24:d9:4a:92:
                    65:af:9f:86:ce:58:9e:a1:95:9b:53:27:d9:d5:bd:
                    51:3e:c0:81:04:40:69:2e:44:62:df:76:f4:db:78:
                    5c:b9:ce:94:bb:f2:20:30:f7:f6:f2:69:cb:d5:f5:
                    96:76:8d:9d:0d:31:db:fe:73:89:13:6a:0b:ec:f1:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A5:35:2C:C1:EB:B8:E8:92:D2:F1:BE:A8:18:9F:54:BD:5D:E5:BC
            X509v3 Authority Key Identifier:
                keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:11:0f:c0:f5:90:b6:f3:ba:0e:51:d5:ff:99:57:47:82:27:
         49:26:af:57:0d:70:7f:26:c6:47:7f:84:cc:e8:e8:83:ef:3c:
         35:70:05:89:12:9a:58:6e:37:ae:9f:8b:ca:c5:10:3e:d6:69:
         ca:88:bf:81:3f:a7:36:a3:75:d5:ee:03:cc:ae:3d:aa:d0:68:
         d3:3b:65:1d:a7:c5:24:c7:ef:0a:9e:d1:47:18:da:1b:08:3d:
         1e:b4:75:dc:0a:0c:b2:4d:c0:ad:c7:e2:c8:94:ee:2f:f9:d7:
         b7:de:0f:92:bd:af:fa:28:87:6e:d3:ea:18:95:62:c0:a2:12:
         97:fe:39:cc:da:29:56:a8:38:87:ca:9f:21:ea:d8:68:93:23:
         c9:a1:07:e9:8d:80:55:3a:4f:8e:c3:7d:5e:19:e5:27:6a:a1:
         26:56:16:e8:43:75:a6:64:f1:d4:d8:d0:ff:01:24:62:fc:3b:
         bb:51:88:3c:0b:6b:8a:ca:c6:3a:61:c2:be:f6:07:5f:20:68:
         6a:0e:b1:6b:d8:38:b5:e4:b8:20:31:09:19:e0:7c:de:62:d9:
         27:b2:07:f7:3a:c2:dc:36:5f:dc:3c:ca:b4:b3:26:00:b5:df:
         6c:94:42:05:fd:c3:2b:2d:e9:c4:2d:26:a2:25:d0:4b:25:66:
         ce:e2:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:12:42 2026 by rpki-client