Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
File:                     U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json)
Hash identifier:          R577LQyfOmtRQG4nBKNyJsTEu7ycC3EX+5IB81d5xuc=
Subject key identifier:   7B:A0:D4:1E:57:60:0B:7F:02:80:30:FA:AD:7D:5B:E2:56:FB:7D:85
Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
Certificate issuer:       /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
Manifest number:          015D
Signing time:             Wed 23 Sep 2026 04:58:02 +0000
Manifest this update:     Wed 23 Sep 2026 04:58:02 +0000
Manifest next update:     Wed 30 Sep 2026 04:58:02 +0000
Files and hashes:         1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: RikbiPKvHAVUFYoBCsALCHNHDf2r+ex/Hv3ZOiIEG7c=)
                          2: 30BF0192D5B411F0BA49041CC4F9AE02.roa (hash: 7Xq/xrlaF1i6pCbhVMnZT3OZ5U9fhM3Ebdid2BeEwH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl
                          rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
        Validity
            Not Before: Sep 23 04:58:02 2026 GMT
            Not After : Sep 30 04:58:02 2026 GMT
        Subject: CN=6ab35c5a-2963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:5f:23:62:28:32:ff:a0:f7:91:17:23:7e:
                    87:3e:cb:e1:23:47:45:5e:75:1c:84:e9:c9:23:19:
                    b2:87:ef:97:f3:36:ee:32:08:2d:3b:85:f3:13:c3:
                    16:c0:96:62:71:89:64:aa:9e:70:d8:ee:ac:02:3c:
                    a3:25:21:05:49:7b:7c:bb:5a:f1:36:14:ae:66:bd:
                    9b:ba:5c:32:42:d3:22:29:79:2a:06:33:89:70:6f:
                    78:8f:cb:51:a7:31:5a:5f:79:62:24:e0:a0:0c:03:
                    30:f1:e3:45:41:bd:f5:fd:e9:0e:85:79:82:7f:48:
                    b3:a6:96:74:4c:76:0b:a7:37:bf:dd:9c:b6:3c:71:
                    25:55:dc:d0:0e:c3:b5:94:b5:23:0a:77:8e:74:c7:
                    29:28:cd:fa:8e:a7:39:de:90:9b:1f:dd:a5:ac:39:
                    6c:8f:07:1f:af:2d:55:e9:e8:99:3b:27:77:22:ff:
                    b5:94:7e:23:71:48:51:87:5c:88:68:c1:42:92:14:
                    aa:91:09:2f:fe:a8:7c:1b:c0:6e:e4:d2:f2:6d:db:
                    d3:7f:08:3d:92:7b:b5:fc:4e:13:25:1c:c7:be:23:
                    09:c5:cc:b4:48:43:04:78:7b:01:7b:bf:dd:e5:d3:
                    f3:9e:c0:59:da:2f:f1:02:69:70:72:ac:8a:6f:95:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:D4:1E:57:60:0B:7F:02:80:30:FA:AD:7D:5B:E2:56:FB:7D:85
            X509v3 Authority Key Identifier:
                keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:bb:1a:36:07:b8:e9:ea:eb:f5:dd:de:5f:54:15:70:46:9d:
         33:0d:ac:db:71:02:a1:67:2c:c9:31:6d:07:f0:7b:49:38:29:
         b7:76:b7:fc:75:ad:e1:fc:b1:25:2f:3e:b3:21:7e:d8:2e:61:
         82:31:ae:8c:5e:5c:11:95:84:e8:c8:d9:ca:e5:d0:fa:eb:61:
         50:f8:cd:78:ce:de:ce:0d:fa:60:f5:38:43:32:0d:20:7e:5d:
         13:78:e1:39:c8:54:9e:ca:04:ac:b2:85:10:3b:d2:fe:c6:24:
         2c:15:32:2a:22:29:c7:29:b9:cc:31:c7:22:cf:ee:85:56:3f:
         84:51:d4:e3:04:db:fd:e7:ff:07:fc:6b:96:e2:20:dd:ed:05:
         a7:31:68:73:42:6b:39:c6:d0:08:f8:43:2f:3f:c7:65:03:95:
         06:47:98:6b:58:64:a2:ae:01:03:87:ff:c7:60:51:76:c4:6c:
         73:0a:9f:9c:08:1f:b1:b6:e0:1d:51:b4:41:8f:77:85:39:02:
         ed:7d:f5:60:cd:3b:2a:0b:cf:c4:0f:90:04:46:d5:08:82:9a:
         b9:56:dd:1f:2d:6a:1b:37:57:a0:05:1b:d2:36:6e:bd:f2:52:
         5a:30:20:76:6b:10:26:d4:75:42:9e:99:d9:57:70:ea:b9:29:
         4c:2a:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:52:49 2026 by rpki-client