Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File:                     R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier:          q6fLaJ4EOtkF5t9PvLOU0zAQ8DeeZ0Bem5ln/UzL3YM=
Subject key identifier:   BB:31:36:5B:98:FB:36:CE:B4:B8:13:FA:CC:13:37:41:8D:8F:20:50
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number:          01E9
Signing time:             Sun 27 Sep 2026 03:50:50 +0000
Manifest this update:     Sun 27 Sep 2026 03:50:50 +0000
Manifest next update:     Sun 04 Oct 2026 03:50:50 +0000
Files and hashes:         1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: XQZydt3+CP/NSjugE6IwEPPH0Q7oTI9yD+XwvaCV/fw=)
                          2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
                          3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: Sep 27 03:50:50 2026 GMT
            Not After : Oct  4 03:50:50 2026 GMT
        Subject: CN=6ab8929a-f6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:fc:75:02:f5:41:24:29:ae:4f:ff:e7:7f:
                    7a:04:9a:ad:d1:62:15:f6:a1:82:11:5a:8d:d5:04:
                    25:1e:8d:db:43:ed:60:3a:04:ba:04:2e:17:24:ee:
                    82:67:fb:c0:f1:28:3c:5a:ab:28:17:55:f1:86:28:
                    f9:c3:9a:b4:35:d8:97:fe:30:28:af:c2:58:2c:9b:
                    f9:80:0f:c8:82:00:19:95:8b:fc:58:24:b1:f6:3f:
                    64:2a:40:eb:4f:c2:44:0a:72:4d:de:0a:c0:9b:7b:
                    33:21:c6:fc:b9:e2:c2:06:c1:50:14:f2:4b:a0:db:
                    ca:15:81:78:f2:b8:30:f9:90:db:ab:cc:fc:ea:19:
                    b5:73:ce:4c:c1:6b:37:68:c0:46:0f:bf:a4:df:9d:
                    88:97:cf:ec:2c:48:4f:32:74:cb:11:ac:b7:80:ef:
                    52:17:4c:70:5d:e2:78:aa:3d:6c:19:12:54:5f:bb:
                    c7:ca:b8:05:30:c4:32:ee:79:b3:b4:26:8d:ac:d9:
                    dc:d6:98:8e:1c:98:c4:e5:6f:b8:12:4a:39:b1:b6:
                    32:c0:da:9b:ac:5f:77:63:2c:db:13:a3:a0:18:a7:
                    ea:df:92:25:66:07:01:cd:dc:79:62:e0:24:6e:93:
                    c8:0b:d2:3d:56:19:68:24:b3:06:d7:d2:18:9a:f7:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:36:5B:98:FB:36:CE:B4:B8:13:FA:CC:13:37:41:8D:8F:20:50
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:00:54:4d:61:74:ac:cd:69:fa:f9:a2:8b:1a:a3:85:b3:
         a9:ec:d9:34:3e:f5:15:57:55:ae:13:da:88:14:4e:28:a6:30:
         ee:d8:67:05:df:ec:73:b0:22:47:a0:54:cd:db:8c:f6:db:7b:
         f1:d2:9e:c4:c4:4d:d8:b7:d9:9f:10:2a:14:2a:b2:2f:f1:10:
         5e:48:7e:22:d7:49:44:44:ba:24:43:f7:78:e8:23:34:e8:13:
         34:28:36:54:61:ff:7e:32:30:b7:c9:0c:36:1b:02:ab:7e:d1:
         4e:7a:63:72:d0:64:94:05:9a:a2:c1:82:44:a7:54:1a:25:fd:
         94:90:5c:ef:7b:f7:78:2b:89:f0:dc:1a:3b:96:f6:6e:ba:06:
         ed:83:16:ec:3b:ee:ed:d2:cb:82:26:50:12:63:ba:0c:d1:41:
         4c:77:83:17:21:59:99:72:a0:e1:88:74:f1:c5:8f:c3:82:99:
         e7:34:0f:40:91:e5:43:ee:af:bc:9e:1a:c0:07:c4:b8:6c:d7:
         6b:f4:64:1f:ec:67:ba:3e:a7:d0:57:4e:04:3d:4b:fb:ff:6b:
         cc:ce:b3:94:20:ed:51:5b:5f:cf:66:c1:f0:0b:18:7b:7a:56:
         50:b2:58:25:22:0b:f8:29:5c:79:59:a9:3f:49:27:bc:4b:b0:
         2a:86:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:31:33 2026 by rpki-client