Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File:                     UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier:          tLvC+GC4Tp83QmK9WATLysQKZ2huyNqW0mbszVW+nos=
Subject key identifier:   52:DA:82:DA:DF:A4:08:76:D9:D3:39:8F:94:F0:2F:86:0B:0A:68:86
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number:          9C
Signing time:             Mon 21 Sep 2026 07:23:15 +0000
Manifest this update:     Mon 21 Sep 2026 07:23:14 +0000
Manifest next update:     Mon 28 Sep 2026 07:23:14 +0000
Files and hashes:         1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: Z3a7yuQzpV38ZE1xVIE0LzYyivEbv6baH6tn++IagWU=)
                          2: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: Ol7o3PHS2fJcKJjNIbEjcxAgX88BdxCRDK1NBP+aiIY=)
                          3: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: YGc7kv7ZZdCc5DPV66N241SwkEHthgl6Nrvhn4oZsMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Sep 21 07:23:14 2026 GMT
            Not After : Sep 28 07:23:14 2026 GMT
        Subject: CN=6ab0db63-72ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:39:1e:93:f2:d9:25:55:ff:7f:2d:d1:31:ed:
                    d8:aa:3a:0b:09:77:df:f4:4f:94:4c:66:7a:66:75:
                    4e:69:08:ef:3a:72:5a:d5:57:c3:4a:55:de:d3:0e:
                    08:f9:42:dc:3d:a0:86:05:09:20:dd:8c:bd:17:74:
                    ca:5e:58:b7:65:2e:cd:81:d3:dc:21:70:1b:f1:27:
                    e9:13:1b:ab:80:a3:14:4d:f0:8a:81:fb:20:5f:69:
                    a3:e5:ed:77:6f:c4:3f:06:89:da:70:05:19:07:fd:
                    e8:5c:40:d1:81:c4:8b:e4:a9:62:44:bd:f6:23:29:
                    2c:c6:cf:c8:7f:e8:6c:93:31:3a:08:4e:8f:0d:49:
                    d2:d3:3a:6d:1f:8c:b3:46:84:9a:be:f0:fe:8d:d4:
                    51:6d:ff:4b:01:ea:73:70:89:39:67:a1:d1:f7:9f:
                    7d:f7:41:aa:0a:ae:03:73:d7:62:00:4d:ba:72:be:
                    a2:95:7c:26:31:3d:30:80:28:bd:90:18:36:02:99:
                    72:1c:19:19:8a:25:a7:c3:50:f4:c3:e5:fc:f1:8d:
                    e9:36:69:2a:24:be:f5:87:4b:ab:85:15:fe:e6:98:
                    d6:b7:3d:9c:5e:5b:2e:6d:db:29:28:7c:48:c1:26:
                    68:b8:71:f5:63:e9:8d:07:d5:e9:bd:d3:d9:97:45:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DA:82:DA:DF:A4:08:76:D9:D3:39:8F:94:F0:2F:86:0B:0A:68:86
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:33:e4:d3:3f:e4:83:46:b4:60:44:e7:c2:44:7c:6a:e6:11:
         e8:49:4f:dc:86:cb:8d:d9:ac:eb:e7:9f:bd:d3:fa:73:6b:f0:
         8f:a4:a2:e8:76:2a:64:a3:45:f7:9d:d4:1f:97:ad:c7:d4:a6:
         98:1a:6a:ef:62:d5:f0:3c:58:fc:ca:c4:54:eb:9a:c9:26:a5:
         c3:24:18:e5:e5:57:83:91:68:93:25:e4:fc:b9:7c:e9:08:ba:
         33:74:b0:30:dd:04:59:7c:8c:71:04:c9:e9:20:ad:d2:80:52:
         91:74:1d:53:90:4f:e6:d4:db:e3:16:c2:ea:2a:cf:52:26:e4:
         44:fd:a1:4e:88:4e:8a:90:0f:6e:d5:64:69:6b:4c:00:57:ae:
         13:a1:d9:53:c7:ac:10:1c:3c:bb:1f:c1:49:29:e2:ed:43:a5:
         d5:65:68:1f:57:eb:bb:0e:1c:5c:ab:4d:f5:80:4b:b4:b4:32:
         77:f6:96:76:3c:58:ae:0d:dd:ed:d5:82:72:93:cb:e8:f6:39:
         57:09:06:c8:51:79:bd:96:a3:34:06:d5:3a:c4:cd:49:cd:2e:
         ea:6b:12:67:d2:dc:b0:47:0e:fe:ec:fa:9a:d0:71:aa:e4:26:
         5b:96:e2:bd:c6:f8:09:4d:1d:25:d3:6a:9e:87:ae:6c:2a:4f:
         32:4f:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:16 2026 by rpki-client