Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
File:                     uIC429cILNkYtiF73qCXWEWR290.mft (raw, json)
Hash identifier:          2nRLmH3s95JK8DwaWoGDvYp8oCW0N0vgPOAt9YPlhck=
Subject key identifier:   99:32:FE:F0:A6:70:25:EC:F8:AC:69:D7:2F:F6:C0:86:E3:20:C4:D3
Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD
Certificate issuer:       /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
Manifest number:          0140
Signing time:             Wed 23 Sep 2026 05:17:56 +0000
Manifest this update:     Wed 23 Sep 2026 05:17:56 +0000
Manifest next update:     Wed 30 Sep 2026 05:17:56 +0000
Files and hashes:         1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: M8NBj9lFDrjHbYvcUG7bhz5cVMP9jN+l82h5UGa5mE4=)
                          2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: kB84pKyx8bpCK91KFQ/GpOuFFKtpC4+c+BC5HprgaaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
        Validity
            Not Before: Sep 23 05:17:56 2026 GMT
            Not After : Sep 30 05:17:56 2026 GMT
        Subject: CN=6ab36104-a82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:2a:28:d6:88:51:e6:f8:75:96:f5:a5:4d:
                    24:5c:f6:58:5c:8c:bf:3f:7d:83:17:22:61:60:cc:
                    57:b0:d1:dd:59:cc:78:83:97:55:cc:0f:5e:82:91:
                    45:2c:ab:fd:c3:40:10:a0:f2:18:83:f4:7d:40:1b:
                    c0:7f:6e:28:8d:12:61:a6:4a:7d:ee:fc:12:7b:80:
                    c0:a2:61:df:83:88:db:42:c4:4a:e5:4a:74:1e:8c:
                    b6:ac:60:3d:0e:74:cc:76:4e:cb:9e:e5:46:1f:85:
                    8a:28:ca:06:e6:1c:2f:ec:f4:e2:e6:d1:08:68:c0:
                    c3:3d:5d:8c:97:e5:52:77:03:83:d9:5f:1d:0c:46:
                    b6:4a:15:64:0b:b3:82:7a:df:be:a8:60:4b:d2:76:
                    af:cc:7f:81:32:22:a0:a9:c5:5f:8a:91:7c:9a:99:
                    c3:b4:ee:da:c5:67:8b:45:79:8f:61:f9:68:01:c2:
                    5d:31:b5:7c:a4:ee:69:91:22:fa:67:3d:f5:af:e4:
                    82:15:1e:0c:5a:15:44:fa:15:db:19:c2:5e:df:dd:
                    04:2e:66:ba:35:33:12:62:db:55:d3:54:01:44:b1:
                    0b:48:e0:73:cf:38:c6:a5:28:2d:86:c6:e7:6d:e9:
                    81:ab:9f:2b:b8:fd:c3:fa:4d:66:22:cd:18:91:87:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:32:FE:F0:A6:70:25:EC:F8:AC:69:D7:2F:F6:C0:86:E3:20:C4:D3
            X509v3 Authority Key Identifier:
                keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:e4:99:bc:d8:a9:7f:bd:bd:7f:b3:55:16:e1:79:6a:03:
         db:8b:4a:be:8a:35:84:d9:09:24:0a:ec:a1:35:ab:6e:c7:39:
         f6:03:60:29:82:d7:1f:ee:47:14:a9:f3:90:c5:2a:61:22:ed:
         ce:bd:c4:41:2b:73:81:35:c9:81:34:a2:6d:a1:3e:c8:e0:d6:
         5f:3f:ac:99:49:dd:49:b7:1e:f2:71:bd:af:77:d5:99:f9:4a:
         66:c0:6f:0c:87:2e:8d:d9:e2:8d:3c:17:7d:99:82:09:b7:6f:
         29:1b:cc:f0:d2:e1:b8:6f:98:c5:e9:f2:0e:30:75:7e:0a:16:
         ca:f9:1f:6f:7d:6b:7c:59:f5:ce:b4:c2:b5:80:87:eb:85:31:
         af:63:d1:0a:4e:0f:21:8e:3b:52:cd:ea:42:ba:64:cd:eb:f8:
         86:64:f0:44:d9:86:e1:da:6d:cd:48:45:dd:5e:ac:0d:b8:8b:
         1f:82:05:70:4a:18:2c:bd:7d:30:6b:9c:93:04:ca:db:5b:5c:
         39:01:cb:9e:af:9e:94:93:c7:46:58:7f:ce:b8:02:ef:1a:bc:
         04:72:ce:7a:97:61:79:23:49:fa:6b:1c:e8:1d:98:f3:2f:76:
         e3:0f:cb:df:d5:7b:74:1a:31:98:f7:72:aa:74:2b:b0:a7:ad:
         bc:56:d5:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGOUMxMTAvBgNVBAUTKEI4ODBCOERCRDcwODJDRDkxOEI2MjE3QkRFQTA5NzU4
NDU5MURCREQwHhcNMjYwOTIzMDUxNzU2WhcNMjYwOTMwMDUxNzU2WjAYMRYwFAYD
VQQDEw02YWIzNjEwNC1hODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrcqKNaIUeb4dZb1pU0kXPZYXIy/P32DFyJhYMxXsNHdWcx4g5dVzA9egpFF
LKv9w0AQoPIYg/R9QBvAf24ojRJhpkp97vwSe4DAomHfg4jbQsRK5Up0Hoy2rGA9
DnTMdk7LnuVGH4WKKMoG5hwv7PTi5tEIaMDDPV2Ml+VSdwOD2V8dDEa2ShVkC7OC
et++qGBL0navzH+BMiKgqcVfipF8mpnDtO7axWeLRXmPYfloAcJdMbV8pO5pkSL6
Zz31r+SCFR4MWhVE+hXbGcJe390ELma6NTMSYttV01QBRLELSOBzzzjGpSgthsbn
bemBq58ruP3D+k1mIs0YkYcaRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJky/vCm
cCXs+Kxp1y/2wIbjIMTTMB8GA1UdIwQYMBaAFLiAuNvXCCzZGLYhe96gl1hFkdvd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY5Qy9DNEZFQzI4OEQz
RUExMUVGQTY2QzQ3NjBDNEY5QUUwMi91SUM0MjljSUxOa1l0aUY3M3FDWFdFV1Iy
OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VJQzQyOWNJTE5rWXRpRjczcUNYV0VXUjI5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUY5Qy9DNEZFQzI4OEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi91SUM0MjljSUxO
a1l0aUY3M3FDWFdFV1IyOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiwDkmbzYqX+9vX+zVRbheWoD24tKvoo1hNkJJArsoTWrbsc59gNgKYLXH+5H
FKnzkMUqYSLtzr3EQStzgTXJgTSibaE+yODWXz+smUndSbce8nG9r3fVmflKZsBv
DIcujdnijTwXfZmCCbdvKRvM8NLhuG+YxenyDjB1fgoWyvkfb31rfFn1zrTCtYCH
64Uxr2PRCk4PIY47Us3qQrpkzev4hmTwRNmG4dptzUhF3V6sDbiLH4IFcEoYLL19
MGuckwTK21tcOQHLnq+elJPHRlh/zrgC7xq8BHLOepdheSNJ+msc6B2Y8y924w/L
39V7dBoxmPdyqnQrsKetvFbVrg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:12:04 2026 by rpki-client