Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File:                     xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier:          QQKT6KJzWpxE1oiuuBExBOcpz2f9ysF+ARh7LLH/JEE=
Subject key identifier:   0E:72:0A:E4:55:E8:03:46:94:E3:95:4F:92:D8:91:48:0E:A3:57:39
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer:       /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial:       059F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number:          0597
Signing time:             Tue 22 Sep 2026 22:53:04 +0000
Manifest this update:     Tue 22 Sep 2026 22:53:03 +0000
Manifest next update:     Tue 29 Sep 2026 22:53:03 +0000
Files and hashes:         1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: zqmdb26IDlXjlHZ4URfS81b6jkUv1r1gok/+QO2xjRw=)
                          2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: H74pxewpIAfUm8/FUa/m3c/v+hEej5T/CVejW+xMk8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
                          rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
        Validity
            Not Before: Sep 22 22:53:03 2026 GMT
            Not After : Sep 29 22:53:03 2026 GMT
        Subject: CN=6ab306d0-205b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:af:23:ce:e8:d7:53:ba:4c:cc:c6:4f:4c:
                    e7:49:e8:ca:b3:f1:72:d1:21:a8:33:4b:18:50:b5:
                    de:c8:25:ad:62:d5:c6:1f:4f:a5:ca:b5:c8:cd:ee:
                    62:da:b0:7c:c9:0d:3a:43:e6:fa:06:54:91:db:cd:
                    ef:40:5e:ce:9f:8b:ca:9a:ef:75:64:67:6a:1d:04:
                    9f:9e:7e:67:65:f3:f4:ba:f5:99:07:cb:84:5b:cf:
                    a3:f8:8b:7f:0e:91:9e:7b:22:9b:11:31:1e:a5:33:
                    12:a5:77:1f:3f:46:5b:97:d0:93:c0:0f:63:f6:0e:
                    1b:17:00:20:39:95:30:fb:98:df:3e:fa:23:04:45:
                    cc:a9:d2:95:c7:a6:b4:74:c8:4e:32:87:12:b7:09:
                    30:4d:63:8a:17:2c:bf:bb:e3:c1:d9:ef:2d:7c:ab:
                    23:b9:0f:5e:18:a9:ca:2a:80:af:62:49:d6:bc:23:
                    83:f5:16:b9:57:34:89:50:d2:d5:64:b8:0a:a4:74:
                    59:b2:38:57:12:7a:fb:76:5d:b9:54:fc:eb:48:fb:
                    9e:fa:10:50:fc:d2:69:5f:2f:18:7f:a2:db:da:bd:
                    5c:34:6f:6e:d4:1f:fb:0a:92:44:c6:20:4b:02:15:
                    dc:a2:d3:a3:4f:57:e5:77:6d:2c:c4:5d:de:6f:ba:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:72:0A:E4:55:E8:03:46:94:E3:95:4F:92:D8:91:48:0E:A3:57:39
            X509v3 Authority Key Identifier:
                keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:05:a6:e2:bb:ad:bb:95:c4:dc:a4:c0:a0:0e:84:f0:ee:
         0b:8c:c6:5c:81:3d:f6:bf:49:18:ac:e1:9a:7b:45:f0:f8:a8:
         60:3a:07:26:33:3d:ea:d6:22:c5:9a:ff:ca:6a:ea:5d:33:b3:
         ef:6b:d5:b4:e4:4f:fc:cd:16:5e:db:95:46:bd:3b:ce:49:5b:
         07:94:9b:3a:2b:87:2f:24:2d:f0:19:94:1b:b2:f1:25:d3:3d:
         92:42:fd:28:c6:cc:25:ce:a3:bc:1a:61:29:56:48:30:2d:70:
         86:4b:d9:ed:4c:13:d4:c2:9c:77:4f:64:6a:d0:fe:99:2a:53:
         32:fc:79:1a:13:87:6f:58:24:7f:b8:71:f2:c8:76:b1:29:06:
         5f:40:a2:44:bb:9f:fc:0f:52:5e:8d:13:b3:e2:21:d7:38:22:
         e7:c5:a4:06:b8:31:12:81:10:ec:8a:d2:58:8c:2c:da:eb:b7:
         88:b5:64:e9:f1:13:e0:81:1b:ae:c9:e0:34:3f:15:bc:70:7a:
         a2:12:b5:70:ab:24:f9:29:21:10:83:28:8a:de:17:ec:bd:15:
         b2:8d:1e:9e:b4:38:4d:0c:a0:ed:a2:11:a7:c3:f4:34:a7:ee:
         25:7e:4e:1e:ed:40:04:95:62:89:32:25:39:e2:fc:f6:68:3a:
         46:7c:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:18:45 2026 by rpki-client