Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          F4EWSAX6UV737XrbQxz+eYSs9vw/vmd8fX0f1m3KgAk=
Subject key identifier:   15:0E:45:F9:A6:A9:09:43:D2:97:83:C3:53:61:2F:1C:4F:A4:32:D7
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       2197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          2172
Signing time:             Sat 10 Oct 2026 15:55:04 +0000
Manifest this update:     Sat 10 Oct 2026 15:55:04 +0000
Manifest next update:     Sat 17 Oct 2026 15:55:04 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: udn1qgb/eKSVs4re3T2y2sb6DhHp8U2wocjAf1bQ7ow=)
                          2: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: H6TSFHjxceqzGmdQryqjxQpaN4ogGNNs1wmONNfXYC4=)
                          3: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: o/MzyN7ge/ypeEuVIYd4HleoRWxXy+d/s8ghiWxojiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8599 (0x2197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Oct 10 15:55:04 2026 GMT
            Not After : Oct 17 15:55:04 2026 GMT
        Subject: CN=6aca5fd8-e0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:b7:b7:9e:98:28:99:0d:7e:54:17:f9:36:
                    b0:d8:72:d0:d6:3a:9f:29:f8:26:a3:f7:bc:6e:13:
                    5a:1e:43:9c:a2:df:e9:81:09:e8:7b:40:67:34:44:
                    40:8c:a2:57:eb:69:c1:5f:f7:f8:6b:f5:6e:9f:3d:
                    60:03:84:3f:14:8a:b5:df:a2:4e:7b:b0:95:08:2f:
                    bc:66:08:e4:c7:36:ec:7e:91:da:c4:c1:56:fd:93:
                    6e:e3:e9:ad:dc:eb:ff:4e:1d:f5:8c:61:49:c3:66:
                    fe:d2:58:d3:00:ad:46:34:e3:36:a5:02:37:fe:61:
                    bb:a4:d3:25:bc:71:4a:35:c3:76:0c:e3:9b:50:cf:
                    9d:e5:83:e8:be:77:f0:50:f5:35:8b:14:cb:f1:29:
                    c2:e3:0a:68:5e:1e:79:71:7a:57:ac:bf:9e:44:a5:
                    6c:fc:b4:b8:02:1e:1d:2f:c3:60:56:12:68:16:14:
                    91:70:da:40:76:af:58:18:84:46:d7:3e:ba:ee:e5:
                    48:42:48:63:35:db:05:e0:42:c9:65:8e:69:1e:36:
                    28:72:08:a9:31:16:2c:f9:3b:a4:62:84:50:7c:cc:
                    a7:fc:ae:a8:ef:d2:be:9c:18:82:52:0d:7e:51:3f:
                    29:20:0b:95:d3:82:eb:ad:f0:a0:0e:a5:fa:87:fc:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:45:F9:A6:A9:09:43:D2:97:83:C3:53:61:2F:1C:4F:A4:32:D7
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:fe:a4:0a:8d:40:eb:be:71:80:69:64:2c:ec:a9:32:d8:
         01:de:63:1a:4c:da:c2:9b:24:fd:c9:c4:f7:ed:4f:b0:58:bc:
         9b:77:00:aa:3c:dc:b7:1d:ab:91:a6:ea:7f:4a:51:05:e9:9b:
         84:61:f5:a1:ed:95:89:32:e0:98:38:0a:d7:d4:dc:66:7a:1c:
         03:ea:c5:c3:85:0d:7e:92:d3:12:91:9b:02:40:0b:62:63:b1:
         8e:a7:54:4d:70:56:c8:5a:e6:f2:55:80:a4:87:6e:c2:af:c5:
         3d:7e:6c:29:58:04:cc:76:f5:a4:a1:2f:ba:b2:e7:74:36:a3:
         ec:c4:25:70:50:1f:a8:e1:c0:fa:26:e1:2b:ba:98:66:ed:3f:
         8e:a2:47:36:b2:70:72:4a:39:52:8f:63:25:12:27:cc:b8:2e:
         87:df:54:f4:70:da:74:97:f1:ad:72:58:2c:7f:e5:9a:3c:df:
         76:bc:ad:08:33:96:2b:39:04:45:d8:24:3b:cf:da:ed:83:9e:
         84:2d:91:74:4a:63:c3:40:96:c8:b3:17:84:c9:6a:a2:bd:3e:
         7b:d3:61:16:f7:36:44:6f:29:e5:9b:a8:c4:31:cb:16:0d:17:
         25:13:0d:c4:30:9b:fb:c8:6b:40:7e:ae:8f:61:d8:09:be:7a:
         c4:1f:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:40:37 2026 by rpki-client