Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          N5QaB2hbf+rdZlxfFxoyJsO5W4Twbpc9u/JT/bWx04E=
Subject key identifier:   92:FA:AB:8D:6E:04:F5:D8:B1:EC:82:F6:4F:70:FB:24:9B:F0:D3:6D
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0C41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0C35
Signing time:             Sat 14 Nov 2026 18:40:45 +0000
Manifest this update:     Sat 14 Nov 2026 18:40:44 +0000
Manifest next update:     Sat 21 Nov 2026 18:40:44 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: fTuyX7tDqWhlImz03m9RtccX/2yiG+KtMJeyld18sFU=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: 9vdbZGWI4WbWk19ZKHaxpuc4iKT7cExMtnmI4PUcPIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 18:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3137 (0xc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: Nov 14 18:40:44 2026 GMT
            Not After : Nov 21 18:40:44 2026 GMT
        Subject: CN=6af8ab2d-5941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:94:5d:e8:36:a2:35:b7:16:29:9e:2c:82:
                    28:7b:da:c2:9c:3a:0b:e3:da:6f:71:31:a0:27:0d:
                    7d:c4:59:e6:14:54:fc:5f:0b:68:bc:22:13:99:8b:
                    5c:83:ce:a6:08:dd:97:bd:e8:18:2b:c8:fd:f6:9a:
                    ff:08:7c:ba:27:a8:35:c6:91:29:46:75:41:1a:33:
                    a6:c1:01:7d:16:ad:aa:45:cb:a4:09:42:a6:7a:49:
                    1d:a5:43:71:49:c1:d9:d4:9d:be:dc:d5:f6:d0:5d:
                    1b:32:95:ed:c6:4f:c7:74:b6:05:58:3c:bf:cd:9e:
                    22:e1:28:4c:4c:1e:aa:f5:97:eb:ec:95:75:04:31:
                    e2:f7:4f:3e:76:4e:88:17:07:8b:49:fb:5a:69:ab:
                    cf:f6:dc:d7:34:c1:72:3c:96:69:bb:2b:b7:9c:e6:
                    f4:45:d6:3d:52:de:37:e8:38:76:67:4b:b5:d9:2a:
                    3b:10:a2:0d:42:09:1b:f4:b6:f9:e0:72:ed:8a:32:
                    fa:e9:b2:17:44:20:24:90:00:f5:1e:df:62:ac:2c:
                    b3:ff:75:72:47:ed:54:c6:28:e5:52:f5:bc:2f:71:
                    1d:4f:cb:1e:8f:b7:9a:c1:09:1c:9b:50:5f:d9:05:
                    be:f3:fe:6d:84:75:47:46:18:49:17:a9:2b:7d:93:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FA:AB:8D:6E:04:F5:D8:B1:EC:82:F6:4F:70:FB:24:9B:F0:D3:6D
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:d8:ec:bc:5d:e5:b8:6c:74:ba:05:c6:77:81:60:6f:9c:
         8c:22:f6:9c:ee:87:20:42:fd:26:fe:fb:14:65:38:6c:f6:40:
         31:2b:4f:36:3b:d8:9b:c9:e9:fc:72:63:b5:f5:ad:28:49:fd:
         c6:9a:48:aa:38:1f:d0:f1:ca:bb:8c:27:97:50:0c:e7:b0:b7:
         be:fa:20:08:d1:14:d2:6f:96:21:45:3b:73:0b:aa:8a:e3:53:
         32:50:86:db:f1:3d:66:44:ba:04:f9:6f:a3:92:64:01:4b:51:
         3f:d8:20:4e:81:e9:38:3c:43:6b:93:23:64:8c:b6:68:a9:f1:
         91:05:66:76:7a:06:ac:60:4c:61:03:13:ad:2f:53:52:ef:07:
         b7:64:4b:eb:e6:29:4a:b7:10:4d:3c:25:77:b8:1d:c0:55:d8:
         3c:60:13:33:87:30:96:87:99:47:64:53:b0:a5:e2:f1:70:06:
         ff:98:0c:ce:c8:78:ba:92:9d:87:fb:63:63:97:45:8f:1a:2a:
         68:40:44:f3:46:56:b6:93:f7:e2:15:02:7f:8b:1e:2d:10:f5:
         65:e3:6c:c8:28:5b:b1:79:6d:af:f7:f4:a3:ea:99:a9:05:0e:
         2c:be:5a:b7:6a:40:ae:ee:89:51:68:c3:69:cb:ca:e5:f7:9b:
         e2:52:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:13 2026 by rpki-client