Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          KOtSYdfaUmUAMd9CSrqx4s8XXB/sQTfLS3HvRsYo2kM=
Subject key identifier:   EA:F0:1B:6F:0A:EE:8D:E7:D7:1D:7B:1A:B8:BD:35:0D:4B:37:A0:87
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1B52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 16:21:31 +0000
Manifest this update:     Thu 24 Sep 2026 16:21:31 +0000
Manifest next update:     Thu 01 Oct 2026 16:21:31 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: 4iyHASr6XANwsxYvkS7MFSRnpH5GVbWInBNBc0p+jis=)
                          2: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: Er3lL/S505EsaOt1uacROwj0JQEQVjW8R9dfPP8sfHo=)
                          3: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: m4cHchahu0FcuRzlm+r74ocShlfFVkLmN+v6ll48l84=)
                          4: 5F772210686E11F1A894041EA247A888.roa (hash: jeM1sInENzzOwooe0TdILcq2FZyE0Gco+KBm7E50BXU=)
                          5: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: wsW3aqGjxehyBgpTwS7HywIwph1+NVgxAvtD2hhF8FE=)
                          6: 3003BB4EB3A411F0B8845739C4F9AE02.roa (hash: r94n/IiHAPutl0l3j/KlAHM/eVbebGPKooP9sB2e3Zw=)
                          7: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: LOzTCKrMgLJq0MdRVFDlgehNk6Muqpflj11oEgLrLuo=)
                          8: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (hash: 3+iWkZdc7utUPzIZSryLQMGfnk3Kyvl1BniS4UN5CJY=)
                          9: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: vjNJ7t/fR8gZHZFW7rS7pSPlSs4z2F/aS/JSQ3DxuPA=)
                          10: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: xHGcoIaGOzKJwv6w3Z8rV5SCo2Gj6ECIx8o45Fg7/Kc=)
                          11: 21730760B3A411F0B1142735C4F9AE02.roa (hash: im8eNEl51/Iajj6nEj+0v7DWapzv6w3ygAcW7Tm2EYY=)
                          12: A3A8BCC0848C11F185E8F6A483A30FBC.roa (hash: hqGlc/K4gPudZqx+R0HrayMg06oXLJ1YOFYAXKXIwhY=)
                          13: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: YM8lkpFLkO4Bbr1IWWoMC4SWTHYqIxyd5W0ltmh5jmM=)
                          14: 7BC3290E9CEA11F197F53AEC3211F970.roa (hash: z1RqV05AbVoae8OdZTcRSinQNhmkFt8NpWWY9cI3ywM=)
                          15: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: /eEZUKJWpNpZ2mR8oMJuCWCGAOo81sPu7UrR35Q+2rI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6994 (0x1b52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Sep 24 16:21:31 2026 GMT
            Not After : Oct  1 16:21:31 2026 GMT
        Subject: CN=6ab54e0b-ae68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:55:26:ad:c7:78:11:ac:7c:5b:d1:b3:03:
                    82:fe:a3:41:d7:a0:8b:da:c1:88:08:01:b8:d8:ad:
                    80:5d:f3:ea:28:2e:51:0f:36:76:a5:6f:d2:15:02:
                    af:57:7d:52:f8:a5:e4:14:01:2b:5a:c5:35:08:e0:
                    c6:55:e3:01:5b:a8:3a:d5:c7:f3:ed:f1:9d:2b:67:
                    e2:07:1e:0c:03:21:9b:26:0e:36:33:97:6e:ca:d9:
                    2c:9e:6b:a6:1f:2a:18:6d:47:57:16:81:ae:0e:68:
                    a9:88:87:59:fe:b5:a3:04:f0:e6:09:8d:fb:04:ea:
                    f6:3e:19:f8:8b:d4:a3:5c:eb:95:94:06:28:dd:92:
                    83:57:56:4d:71:4f:da:27:dc:9d:55:2c:0a:4e:0f:
                    e0:ce:1d:c2:bb:80:be:30:99:63:66:4a:ed:54:22:
                    8f:01:c6:23:45:ba:93:8b:56:03:d3:25:8c:43:ed:
                    2a:f1:5f:23:69:f0:2b:24:49:89:cf:94:ae:74:fe:
                    10:8e:ce:9f:11:e2:da:26:7d:86:b3:21:e9:a5:44:
                    d0:68:35:cf:f2:fc:41:ed:ff:e0:de:5b:8e:aa:3b:
                    b1:0a:60:32:8f:85:e7:de:16:bf:5d:44:5e:4d:2b:
                    eb:57:bc:29:e5:fb:35:dd:74:48:52:ee:47:86:e3:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:1B:6F:0A:EE:8D:E7:D7:1D:7B:1A:B8:BD:35:0D:4B:37:A0:87
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:41:14:cd:50:43:ef:59:6e:1f:98:a5:66:18:a1:91:3f:
         93:19:e1:39:a3:79:ad:ca:d2:b8:32:f3:b4:bd:9b:4e:0e:55:
         51:2c:87:6b:bc:00:a1:18:d8:b4:43:b5:9f:b6:d1:6a:d5:29:
         29:00:8e:bd:95:5d:02:9e:98:d8:3c:00:95:ce:f9:de:12:ac:
         2a:63:1a:9d:22:28:2a:17:f3:a5:63:c0:ed:aa:93:9c:62:30:
         0e:14:c8:fc:7d:70:1e:12:04:dc:9e:7a:a4:1d:fa:c2:52:36:
         37:5e:e1:36:1e:2e:66:4e:1b:b8:a6:f6:b3:19:c4:42:28:8b:
         ca:65:a6:9f:5b:49:65:95:07:82:4f:5b:19:c7:b1:a6:81:04:
         ab:19:da:f8:cd:fd:f4:2e:2d:c8:2d:cb:2e:7b:e9:42:0f:c2:
         fe:9c:4f:40:08:8a:28:00:75:ae:16:b1:d9:f0:9e:cd:99:d5:
         4a:c7:de:8a:70:74:45:a9:ba:b2:ea:90:d3:41:86:f6:c9:90:
         e5:14:55:42:18:1e:70:17:06:95:c5:47:ff:ca:f9:0d:6c:50:
         79:52:65:8a:be:3f:94:3e:42:0a:54:81:e3:cb:df:28:2d:78:
         f4:b5:c1:67:ef:9e:20:4b:1b:2e:90:b9:b2:80:73:92:74:39:
         f6:57:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:19:53 2026 by rpki-client