Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
File:                     2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json)
Hash identifier:          cV0jNkhd2Wbc2XIFHstAhneXPKbNqTOz1GxKJVm0yk0=
Subject key identifier:   8B:F2:EC:E9:26:03:43:1E:BC:12:B6:D1:70:BA:FB:82:BF:53:44:37
Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA
Certificate issuer:       /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
Manifest number:          AF
Signing time:             Fri 09 Oct 2026 07:56:14 +0000
Manifest this update:     Fri 09 Oct 2026 07:56:13 +0000
Manifest next update:     Fri 16 Oct 2026 07:56:13 +0000
Files and hashes:         1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: xzeG+dof2GRO4S2xn71q8RYv9WzQAgTFMlahf3mz3t8=)
                          2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: KEGvw0LXKESxsRGXGpqRarxyJiuFRS3eT9MoueaYdN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl
                          rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
        Validity
            Not Before: Oct  9 07:56:13 2026 GMT
            Not After : Oct 16 07:56:13 2026 GMT
        Subject: CN=6ac89e1e-8c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:1f:56:ad:9d:06:3a:e2:dd:05:92:68:92:
                    08:66:44:eb:ed:5d:21:56:89:18:09:7b:a8:6d:da:
                    4b:54:1e:24:51:25:04:c8:8b:a7:8e:07:d5:0d:2a:
                    05:f5:70:d1:12:62:62:64:ed:23:06:6d:0a:97:c9:
                    34:40:b9:85:cf:9a:82:fb:68:72:b9:9b:04:4a:be:
                    01:e6:31:2d:f8:ca:ba:11:51:1c:8b:25:0c:aa:89:
                    43:9a:2c:04:2f:2e:c8:cb:d0:33:4f:e4:3d:b8:e6:
                    b4:75:a1:1c:be:79:31:0a:97:22:04:0b:73:08:0a:
                    4f:b8:63:fb:d1:1f:d1:c6:63:be:9b:57:fb:23:63:
                    8d:a9:aa:8a:1e:17:15:e9:c0:a0:ac:17:66:74:72:
                    8f:8f:e2:6f:03:fb:5b:cc:6d:d2:a4:8f:67:f9:a9:
                    31:a2:ce:9f:aa:6b:de:9e:6f:c1:64:39:30:64:4d:
                    d1:d1:d4:66:f9:99:89:50:16:c6:92:1e:a5:97:9e:
                    6c:e9:69:ef:9f:1d:42:86:7a:2a:bb:6d:e3:a6:33:
                    49:dd:d3:03:31:6f:36:fc:91:41:7e:36:f5:ab:44:
                    6b:12:ba:e4:a3:1a:af:a8:21:59:cf:2f:49:d7:f7:
                    16:32:8a:a7:b9:60:90:be:67:3e:a9:c8:06:4e:6a:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F2:EC:E9:26:03:43:1E:BC:12:B6:D1:70:BA:FB:82:BF:53:44:37
            X509v3 Authority Key Identifier:
                keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:d9:64:13:56:ed:d5:d5:97:ca:fd:01:ea:55:f1:93:11:
         03:9c:bf:d9:b0:c2:b5:2d:32:be:33:32:e7:ea:47:1d:63:63:
         2f:c4:46:4d:fa:c8:a1:ce:40:3e:76:1d:ba:ab:4e:14:d8:d5:
         86:ab:64:66:63:8b:da:60:e6:ac:f6:96:14:37:d5:6a:d9:3f:
         c3:54:49:87:75:6f:9e:5c:1d:75:6f:36:94:8f:93:b7:1e:e1:
         96:39:2a:3a:4b:1b:fb:23:b0:8b:14:41:fd:e0:2f:09:2b:66:
         f7:d0:5f:53:8b:47:b0:54:67:34:eb:48:79:e8:f8:8e:13:56:
         88:f9:31:39:3c:b4:fd:18:61:ae:15:cd:a6:7d:eb:5a:a9:dd:
         f6:c2:04:2b:2d:bb:47:a8:5f:bc:c6:47:e3:db:8e:f7:4a:60:
         45:9f:bb:a9:f2:03:64:9f:d9:f7:6a:e8:6a:f0:de:e2:4d:bf:
         56:1c:12:fe:92:bf:59:5c:7e:f3:e5:03:e2:da:7e:54:f8:8b:
         2b:f9:be:99:84:73:60:4d:a5:45:54:7c:3e:3c:7e:20:62:14:
         3e:23:7b:c2:ac:d5:28:d8:b3:ba:b7:c9:9c:43:7f:7f:3c:3b:
         af:d9:ae:09:e3:fe:8e:d3:c1:39:26:f7:5f:32:6b:8c:4a:a8:
         89:95:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:37:37 2026 by rpki-client