Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
File:                     uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json)
Hash identifier:          7f3GI+E4us2tlY88939WpyNhB6Q58p7WRsva20RNUrQ=
Subject key identifier:   FD:A4:72:91:A2:67:14:8C:43:B5:05:B8:C2:59:56:98:A1:A1:38:E9
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Certificate issuer:       /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
Manifest number:          034D
Signing time:             Tue 29 Sep 2026 01:06:03 +0000
Manifest this update:     Tue 29 Sep 2026 01:06:02 +0000
Manifest next update:     Tue 06 Oct 2026 01:06:02 +0000
Files and hashes:         1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: PrUePn7/e54a1vBi29tEwc590N42oEG6WlCRLw63bGY=)
                          2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: FwO40S+xjulf9/jOcYKw9vVREBioLQw+tNB6AZvia7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
                          rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
        Validity
            Not Before: Sep 29 01:06:02 2026 GMT
            Not After : Oct  6 01:06:02 2026 GMT
        Subject: CN=6abb0efb-e9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:8c:7a:a1:06:7c:70:77:63:4c:ae:e2:ce:
                    87:1d:45:3c:a2:a8:79:7c:00:4c:10:6c:dd:18:1c:
                    f2:35:8a:ff:df:50:26:e1:bb:25:7c:98:5e:dc:19:
                    e5:f5:df:d0:cb:a4:0b:f9:f8:44:af:35:d9:fa:cf:
                    e1:55:e6:b3:f3:79:9e:b8:bd:bf:dc:41:c9:64:80:
                    86:61:56:d7:a6:ff:0a:88:06:3a:0c:bd:29:5c:81:
                    2e:8a:07:73:ab:e8:cf:b1:ad:c4:73:41:eb:a4:b1:
                    21:38:0e:b5:37:fa:47:20:f2:a9:9d:95:e9:78:db:
                    c8:d7:8a:1c:36:f7:1e:71:16:1b:6b:4e:97:cc:31:
                    e3:c4:6e:f5:6d:dd:a8:04:10:89:ae:f9:02:20:cd:
                    23:e0:06:f4:ff:9d:1a:36:af:09:c8:8c:b1:28:b4:
                    a1:1f:09:22:73:ab:ca:eb:19:2e:ee:34:d0:60:0d:
                    51:fb:4e:01:5f:af:a0:5d:9e:08:32:57:c1:ed:83:
                    45:90:0b:98:59:cc:f0:ce:06:2d:8d:8f:08:db:d1:
                    df:6f:cf:36:63:31:40:5c:a2:42:5d:c9:0d:d2:fc:
                    69:c3:a3:0d:d0:78:a3:3f:90:26:5e:15:14:00:05:
                    0b:3d:c0:e5:b0:1f:1c:b5:c4:3b:a3:88:d1:90:56:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:72:91:A2:67:14:8C:43:B5:05:B8:C2:59:56:98:A1:A1:38:E9
            X509v3 Authority Key Identifier:
                keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:a9:a1:14:2d:24:20:39:50:81:8d:52:a4:1c:ad:71:05:
         d2:16:bf:d3:d6:9d:5d:85:c0:59:66:0e:d5:8b:ce:99:c5:5e:
         0c:99:91:42:aa:09:bf:ba:82:9b:d8:19:c2:78:57:11:82:e2:
         47:2e:8a:a5:87:6e:f6:c7:de:6b:c6:37:8a:ab:fb:ef:c1:32:
         76:4d:74:e2:bf:d9:f7:29:c1:73:d2:ea:50:03:29:1a:a9:b7:
         f9:2b:c7:ca:d9:24:a3:b6:ae:fe:86:18:3f:56:22:03:4b:bb:
         3d:3d:d7:b7:09:b1:00:bd:f2:1c:b0:08:52:26:45:d4:01:92:
         ac:46:d3:bc:73:3a:aa:6b:30:ed:28:74:a2:9b:ee:84:ca:c4:
         33:c7:57:4a:43:4b:d9:df:5b:3f:db:62:ec:fa:26:96:34:7f:
         d6:e4:f4:8d:db:5a:37:a6:df:44:67:0e:03:34:d0:b5:b0:f8:
         06:d2:fa:4c:87:be:fd:27:85:e7:59:40:af:48:34:7d:8c:58:
         34:7b:c0:51:04:82:1b:5a:4a:66:93:03:68:a9:a2:4f:93:bb:
         43:f0:f0:dd:75:65:0a:45:ae:20:ce:13:5e:f6:ec:d7:ab:b2:
         30:b9:05:60:66:57:07:41:bc:23:e9:b9:9f:60:3b:b9:dd:cc:
         41:24:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:07:40 2026 by rpki-client