Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File:                     uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier:          MuzRRiO+KiqjWKE628uD0pIKw+dBalf4hy7fjr4uffI=
Subject key identifier:   4B:2D:84:F7:52:2D:78:71:8E:85:3B:72:DA:D2:7F:1B:3E:2B:14:F5
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number:          0118
Signing time:             Wed 23 Sep 2026 05:46:19 +0000
Manifest this update:     Wed 23 Sep 2026 05:46:18 +0000
Manifest next update:     Wed 30 Sep 2026 05:46:18 +0000
Files and hashes:         1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: e0eaPirdwT1t5iwT/KAuUTsIsWRkKAWzsX8DbX2bXfw=)
                          2: 3A6DC4F4829C11F1A9F8AFE869A30FBC.roa (hash: WUHe+xm2s7KQRGDEn1dhB4Wm51SPdg0ugPZNxSGnrGQ=)
                          3: 8601959679DF11F193D499DB65A30FBC.roa (hash: dJ72wAJA0nbSV+h9SeoXcj3siEq/Cclo9TYNDcphMSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Sep 23 05:46:18 2026 GMT
            Not After : Sep 30 05:46:18 2026 GMT
        Subject: CN=6ab367ab-74a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:06:04:bf:3e:13:71:59:e9:42:98:c2:df:
                    a2:0e:b8:c2:a1:84:8c:30:d3:b6:ee:9b:a2:0b:ea:
                    3c:fd:a2:1b:21:8b:5b:0d:e9:0e:76:fd:08:b0:65:
                    6d:db:02:eb:2d:ac:42:b0:c2:50:15:90:cd:3b:4b:
                    b3:5f:bc:f1:9d:46:73:48:48:4a:33:99:84:cf:a5:
                    29:cf:e2:c4:a2:82:75:83:d6:4d:04:62:71:c0:c0:
                    9b:8f:12:2c:f9:c9:08:fc:76:4c:1a:47:ab:aa:1b:
                    b3:1c:ae:30:d9:33:1a:ae:b0:64:c2:52:d2:5b:84:
                    81:df:1b:f0:aa:02:93:cd:4f:64:f2:0c:f7:b6:3c:
                    48:26:96:8c:2e:7e:6c:5a:89:cc:a3:35:f0:4f:36:
                    59:f3:94:44:e6:ee:1b:f0:39:3d:6d:27:69:61:12:
                    43:53:a1:dd:4b:d5:0b:f3:ff:0d:ba:9d:a7:d5:5f:
                    f0:90:c5:09:4e:ba:48:3c:17:b8:d9:2e:95:39:9c:
                    8c:a5:cc:8d:4f:6d:ba:4d:72:f2:54:ec:ac:8a:16:
                    ed:29:f5:88:8d:7d:b7:f1:7f:a1:a7:40:99:e5:df:
                    8d:db:e3:23:48:73:9b:38:83:3f:f4:3d:05:92:a3:
                    9d:b5:64:a5:67:74:89:08:93:08:4d:f2:25:79:68:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2D:84:F7:52:2D:78:71:8E:85:3B:72:DA:D2:7F:1B:3E:2B:14:F5
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:09:9f:47:4d:84:54:59:04:c4:f0:a5:a8:d3:37:40:ae:
         ff:88:eb:ca:79:19:37:72:f4:02:84:27:b7:2f:ff:c6:f3:91:
         7b:fa:fd:42:f1:04:8c:a5:d0:2d:44:7e:be:09:53:e0:8d:9f:
         c1:56:b5:06:43:5f:a1:26:8c:c6:f5:29:9f:7d:cb:94:2f:75:
         2f:2d:13:1d:01:cc:36:cd:0d:f4:9d:ad:44:68:71:4a:d9:bb:
         22:78:d8:c3:23:38:a4:ed:10:b4:b5:39:8a:8e:8d:b6:3b:36:
         8b:85:c4:d0:cc:ce:28:d4:de:1b:4a:65:55:59:06:47:4c:d1:
         0c:4b:d1:d6:b8:8a:02:ee:8b:dc:a1:b2:01:a3:3b:88:43:a2:
         9c:cb:19:37:a5:cc:f3:6a:62:45:7c:45:5b:9f:d5:b6:d6:1b:
         b7:21:fd:49:9f:d2:c3:6b:3a:4f:42:63:50:a1:58:8b:d7:83:
         7d:57:9d:91:60:77:01:ad:cc:ce:a4:35:b8:52:d5:a1:55:0b:
         a7:53:a4:66:82:a1:53:ff:cf:34:a5:97:a6:5f:50:f5:ae:fd:
         e0:ab:f9:11:78:29:6f:44:47:61:39:64:81:66:70:6c:d8:3f:
         6f:96:05:9a:47:dd:61:fc:8c:37:8e:cd:77:5e:15:40:30:f8:
         51:31:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:00 2026 by rpki-client