Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
File:                     uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft (raw, json)
Hash identifier:          TbNWu6veP/WigTn2kD0n5aHd/+d3Sn73IsMOrS04ieQ=
Subject key identifier:   60:C7:3D:04:38:75:88:47:AE:D1:54:E7:62:84:16:DD:E0:19:10:32
Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8
Certificate issuer:       /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
Certificate serial:       050F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
Manifest number:          0507
Signing time:             Thu 24 Sep 2026 23:29:35 +0000
Manifest this update:     Thu 24 Sep 2026 23:29:35 +0000
Manifest next update:     Thu 01 Oct 2026 23:29:35 +0000
Files and hashes:         1: uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl (hash: z5N3UBnefihsth24u78pmHsnuaIggOsyVEVqwXghwnI=)
                          2: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (hash: /QT547/+dXOmTE2fY9OgGfm3FPSy5zUw++zInuMxxu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl
                          rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A3D, serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
        Validity
            Not Before: Sep 24 23:29:35 2026 GMT
            Not After : Oct  1 23:29:35 2026 GMT
        Subject: CN=6ab5b25f-0ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:49:d3:96:97:35:00:6e:c2:2c:50:c9:5e:
                    25:e3:eb:c5:81:bb:75:ae:0e:ef:b8:48:9c:8a:61:
                    56:af:a4:66:f6:52:7c:64:f8:f2:8d:e1:29:3b:9f:
                    b8:d5:50:0e:df:d3:21:7d:3d:56:1e:3a:3e:e9:a7:
                    94:6a:1e:64:30:07:52:fb:45:e2:ec:0a:c2:80:a2:
                    70:a8:6a:d4:8b:8c:20:a2:2e:3d:7c:61:bc:c0:05:
                    b2:e7:1d:39:f7:9c:db:40:c0:56:eb:fc:7f:4d:85:
                    35:06:fb:42:34:dd:a5:4a:51:a5:72:a1:28:59:70:
                    dd:d6:73:9b:56:66:3b:ad:85:46:dd:76:fe:62:03:
                    46:e5:df:09:80:b6:92:ca:1f:ca:7a:0a:bb:9e:91:
                    d7:7b:aa:e0:7b:25:76:03:5c:5b:92:45:19:f0:d2:
                    c8:fc:29:72:4e:59:7b:bf:17:5a:f5:ae:be:38:b2:
                    c1:d4:46:00:be:5f:26:10:ec:6b:d4:18:d5:a7:c5:
                    50:cb:af:1a:0c:82:ba:cd:1d:fc:c5:ec:3d:e5:73:
                    98:a0:8e:67:c3:e6:75:25:f9:ba:04:8c:e9:cb:c6:
                    1b:68:48:8d:d7:a1:de:c8:f1:82:57:2f:db:e1:df:
                    2c:83:99:f8:3b:89:9e:dc:2a:09:a9:7f:bf:1b:f9:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:3D:04:38:75:88:47:AE:D1:54:E7:62:84:16:DD:E0:19:10:32
            X509v3 Authority Key Identifier:
                keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:f3:9d:16:d2:37:6e:c6:fd:bd:8d:40:69:27:35:94:b5:
         10:58:07:8e:f1:08:db:a3:99:ad:dd:04:f0:d0:e2:7f:d3:36:
         4e:34:81:51:59:da:67:f9:e6:15:da:ba:ed:7d:61:ae:65:e7:
         a8:d0:9a:d4:59:21:4f:8d:a2:d3:ad:cc:11:61:31:f6:1e:c3:
         cf:e5:db:09:d4:81:5b:23:47:1d:57:0c:d9:2e:a6:0e:69:01:
         e5:54:4e:9b:93:d0:5e:29:b9:b7:07:a8:9d:fd:2d:61:e5:22:
         86:ba:73:48:2e:1a:9e:ee:a5:19:fd:d4:fa:e7:33:14:c4:7f:
         51:e2:0b:5f:98:62:96:39:9d:59:f8:c2:c3:85:51:08:c2:37:
         66:a6:4f:de:d4:ed:6f:cc:ce:a1:88:79:d1:13:c8:e8:af:63:
         ec:2a:3a:b2:68:16:c9:4c:1b:89:81:54:c9:99:3d:08:14:0b:
         ad:4b:17:71:50:d1:5e:c2:e8:81:fe:15:95:bd:42:4f:f6:40:
         d8:50:b9:b9:6b:50:01:83:e2:a9:bd:42:9d:23:6a:b2:58:55:
         b8:f4:da:d2:b9:7a:16:b7:50:e0:c9:24:fe:de:18:5e:bc:a6:
         d4:1a:34:44:bc:91:2f:e0:6b:cc:98:71:44:fb:86:93:16:f9:
         e6:7d:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:50:25 2026 by rpki-client