Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
File:                     UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json)
Hash identifier:          37WCrREhS4h/VPRmxz4APOha7lh8bMM6R2xHasqvqGE=
Subject key identifier:   8D:B6:CB:CA:74:DF:7E:9F:34:56:12:73:45:05:68:B9:84:C7:4D:B7
Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
Certificate issuer:       /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
Certificate serial:       1E0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
Manifest number:          1DFD
Signing time:             Tue 22 Sep 2026 16:02:31 +0000
Manifest this update:     Tue 22 Sep 2026 16:02:31 +0000
Manifest next update:     Tue 29 Sep 2026 16:02:31 +0000
Files and hashes:         1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: 5TSqzfg7gPf/4RFiIgNUmaQR6FKJlDN12LpH/wE6BPY=)
                          2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 93wp2YI5n78cTk9dSb9dKf64IstzTNAT7tMeQkp2bC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl
                          rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7692 (0x1e0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
        Validity
            Not Before: Sep 22 16:02:31 2026 GMT
            Not After : Sep 29 16:02:31 2026 GMT
        Subject: CN=6ab2a697-9603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:55:3b:b6:8c:d9:95:23:3b:f6:15:d3:4d:
                    c6:51:5e:91:d8:86:04:b3:06:76:0c:cd:fa:63:b0:
                    f7:34:f4:97:ee:45:fe:a7:13:f2:a8:ef:07:39:6d:
                    20:71:9d:aa:44:22:eb:24:45:70:06:7f:c6:77:81:
                    15:c4:6f:7d:b1:c7:d7:07:ca:0e:7b:b8:90:b3:4d:
                    9a:01:29:16:a1:fa:2b:21:d0:02:23:74:50:11:d5:
                    ab:29:a1:e0:e5:6c:6c:e5:62:f7:8d:02:39:e8:b1:
                    ad:99:9d:2e:d7:bf:70:8f:9b:38:5b:34:c6:fd:77:
                    09:09:ac:73:5b:94:de:45:00:f1:dd:42:05:a9:33:
                    11:c6:41:60:5e:7a:f5:07:43:0e:82:90:37:68:52:
                    7d:42:be:26:e7:87:10:17:a6:97:d3:29:3a:b9:f3:
                    09:81:08:72:63:41:ce:7b:56:1b:d0:86:e3:20:76:
                    c8:ec:25:69:65:a5:8f:57:a0:2d:f2:a0:aa:e7:57:
                    c3:6f:93:9d:b7:50:1e:32:c8:ff:da:d3:a8:91:ad:
                    2e:1d:ef:23:f2:11:a2:6e:d8:60:78:35:a8:b4:fb:
                    63:1b:87:db:d2:71:1c:01:ff:37:1c:cd:8e:ff:e3:
                    2d:91:3f:1b:00:02:43:e0:2a:e4:3f:87:f6:be:32:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:CB:CA:74:DF:7E:9F:34:56:12:73:45:05:68:B9:84:C7:4D:B7
            X509v3 Authority Key Identifier:
                keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:93:cd:ba:91:bf:97:d8:7e:a9:d4:d6:1b:06:fd:9e:f3:
         2f:61:3d:1b:1f:bd:04:74:9a:0e:c2:c1:7f:a9:0b:11:ac:42:
         ff:c0:e5:88:08:06:a5:16:77:83:85:c4:eb:8c:b5:27:1c:92:
         0b:5e:8f:0e:ab:f3:34:94:96:0d:c6:fd:2e:9f:de:45:dc:f5:
         06:df:83:e6:f1:aa:5e:4c:57:fb:e2:49:cd:47:5f:d5:02:ba:
         03:30:ac:d3:31:b5:63:d8:23:73:92:78:bd:f0:79:e6:50:4d:
         bd:f9:b4:c8:e7:aa:ef:38:a4:bf:3d:ef:87:d1:46:eb:f3:e4:
         46:83:2d:e2:9a:f1:75:d8:d4:e9:7d:e4:6e:d3:bd:6a:22:80:
         21:81:e7:5f:fb:8f:4d:76:52:38:a8:ee:af:ad:75:f5:ba:96:
         8a:36:1f:e8:66:aa:e1:dc:7c:b0:09:c8:a7:c5:fa:a7:a6:4f:
         77:80:41:5d:71:e1:7a:dc:12:87:f5:3e:b8:39:83:ad:d8:88:
         81:bd:96:ad:85:95:45:f5:94:47:5c:c7:eb:93:af:13:2a:7f:
         ea:3a:19:e8:db:9f:d2:f0:dd:01:35:8b:3e:80:0a:da:bc:14:
         eb:b5:da:3f:e8:6d:2b:8b:1d:3b:22:2d:1e:ed:12:98:f9:18:
         fa:85:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:32:42 2026 by rpki-client