Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
File:                     UaPqilmxE10_cJKFLMv2DJnGPPc.mft (raw, json)
Hash identifier:          XCMI0uA1KPgd9w9zF/Iq+RIO0uw6YmDH+yn1HHaTfRk=
Subject key identifier:   48:BF:3F:C0:1B:59:8E:97:37:5C:6C:1F:4F:A8:B8:CA:CD:A1:D8:42
Authority key identifier: 51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
Certificate issuer:       /CN=A918664E/serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
Manifest number:          02EC
Signing time:             Fri 25 Sep 2026 01:49:20 +0000
Manifest this update:     Fri 25 Sep 2026 01:49:19 +0000
Manifest next update:     Fri 02 Oct 2026 01:49:19 +0000
Files and hashes:         1: UaPqilmxE10_cJKFLMv2DJnGPPc.crl (hash: ZDfpOLyD7+BqSs6uDxZEAqJVfZ3yMRvzIuFbwCPil/4=)
                          2: 7A589EF8896E11F18F7B77C7B0EE528E.roa (hash: CjLnWx3hegNLEh6qavFW6U4qSjFRrE7dm1RuHpN16xc=)
                          3: 7D6A7846896E11F18F7B77C7B0EE528E.roa (hash: jtt7/cokc6qY66koRXVzUGIb6vysQNiFUV7wJDxMxT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
        Validity
            Not Before: Sep 25 01:49:19 2026 GMT
            Not After : Oct  2 01:49:19 2026 GMT
        Subject: CN=6ab5d320-0b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:ae:06:d8:c5:4d:aa:29:25:64:14:a8:04:
                    37:de:3a:47:da:a5:02:78:ed:93:52:18:3c:4a:37:
                    6c:01:0a:4c:51:05:39:d4:4b:9e:50:11:30:af:d3:
                    6d:ed:4d:57:8c:30:97:d5:38:e8:51:e5:5d:98:1b:
                    d7:90:98:d6:75:b3:aa:0d:8e:82:9f:f7:21:90:60:
                    32:16:b8:bc:9d:d4:d1:42:b3:d6:e4:28:0c:37:07:
                    9e:2e:6b:53:72:ae:06:01:54:66:ec:f2:0e:bf:a3:
                    d9:d5:4c:50:75:c2:6f:9e:4c:6e:5a:9b:14:47:4d:
                    1f:bb:1c:e7:aa:ce:8a:f7:11:2a:8c:58:cc:ed:f4:
                    34:6f:6a:92:0c:e9:b2:9b:d3:ef:a2:ba:da:d1:9a:
                    e3:86:70:40:17:29:8a:4d:d9:fd:2a:d3:cc:9c:2e:
                    7c:6c:58:8d:8d:b9:4e:44:20:a4:96:da:f2:53:de:
                    51:a9:0b:92:31:92:5b:2d:b7:c4:b3:ac:f1:87:7a:
                    54:17:f0:4e:3a:47:da:ae:e9:9e:95:1a:a0:80:63:
                    d2:18:fe:c7:e0:67:b4:73:0c:1c:70:fa:e4:dc:18:
                    a2:59:27:1f:73:72:a0:b0:38:c3:1d:26:47:a2:c7:
                    67:75:ab:f1:4d:34:66:ef:2f:55:6a:65:a7:78:6c:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:3F:C0:1B:59:8E:97:37:5C:6C:1F:4F:A8:B8:CA:CD:A1:D8:42
            X509v3 Authority Key Identifier:
                keyid:51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6f:8f:94:43:72:a1:d7:29:f2:43:f4:c6:26:b1:05:fd:d8:
         90:36:3f:b0:5e:cc:98:88:f3:c4:ec:b7:dc:33:9f:ce:a1:85:
         e9:28:e4:60:58:49:ce:d9:68:00:ca:ee:ec:52:f0:8b:c1:5a:
         82:d2:8f:d4:ec:b1:82:04:4f:b7:00:ce:93:a5:b6:56:20:50:
         e5:3b:67:b7:f5:8c:b7:d0:90:2f:7b:77:f7:c3:ef:b0:29:e7:
         49:52:38:25:bb:a5:ab:8e:ec:6c:95:32:a6:99:32:06:48:99:
         13:e1:75:44:b4:27:bf:77:93:fc:34:30:93:81:73:61:2f:ae:
         a4:e7:d7:3f:fa:49:6e:c8:be:52:24:be:e2:66:c2:97:c5:7b:
         84:fc:bb:dd:b3:65:1c:79:90:2f:7b:73:79:59:d8:45:92:27:
         aa:d5:c5:a6:a1:a3:78:f0:af:b8:eb:6d:51:04:5a:02:ee:71:
         07:0c:5b:39:ba:bc:c1:d4:07:f3:03:24:5e:0a:df:3a:69:62:
         b3:2e:18:a1:95:60:06:00:81:d8:00:23:d1:51:f6:e8:77:df:
         f7:22:ce:29:2f:21:31:13:4e:94:fe:27:7b:dc:6c:65:03:4b:
         68:3f:75:09:3a:5b:cf:2c:b4:93:1c:74:21:81:23:f2:dc:8e:
         c1:f7:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:03:40 2026 by rpki-client