Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File:                     UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier:          SQkD1MGR7Ey+sfdjloA0nbauyAelXRNY+G3Q7CyIC78=
Subject key identifier:   1F:5E:EB:88:FB:58:E7:64:B0:0F:25:B8:02:13:82:68:3D:81:3E:0F
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number:          CD
Signing time:             Sun 15 Nov 2026 07:17:06 +0000
Manifest this update:     Sun 15 Nov 2026 07:17:06 +0000
Manifest next update:     Sun 22 Nov 2026 07:17:06 +0000
Files and hashes:         1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: 7VDv+yl4l1JvD/8n/mRSrL/eloNlBQ05MxDS5Ur4lVU=)
                          2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
                          3: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
                          4: cXUNIwo4cKFrtp6l6pxbySTUUFc.asa (hash: 9g4PRM0AOVhfEIc476c3aqwxMWkUaOspQ/sL3QlohCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
        Validity
            Not Before: Nov 15 07:17:06 2026 GMT
            Not After : Nov 22 07:17:06 2026 GMT
        Subject: CN=6af95c72-1b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fd:6e:2f:fa:07:bf:5f:2a:e3:39:95:6c:f1:
                    2c:40:f4:55:76:23:14:de:b7:3b:1e:1b:38:a1:cb:
                    b8:1f:17:a0:89:88:d7:69:3d:52:89:53:c3:62:01:
                    39:87:9e:03:f8:4e:50:ea:3e:a0:83:74:29:2e:0a:
                    03:5e:e2:6e:b2:8c:0a:0d:ff:8c:0d:62:e5:45:2b:
                    72:02:ad:d3:89:fe:f9:b3:af:49:86:14:6a:ff:58:
                    b0:32:3f:42:47:94:2b:89:48:c7:d8:21:2e:32:9c:
                    fc:3e:9a:4a:7c:c2:05:da:21:22:c2:35:05:e7:f5:
                    da:a9:56:c7:e2:ce:62:ef:26:d4:82:72:06:83:be:
                    9d:58:30:79:71:e8:bb:78:d1:5f:9f:01:90:3d:71:
                    65:64:c0:b5:d3:d2:46:bc:08:57:72:9e:6b:43:26:
                    cc:7a:eb:07:2c:77:8e:72:38:25:2f:6a:65:a8:29:
                    67:15:74:4a:15:ce:a5:5c:6f:48:d6:66:86:a5:7f:
                    0e:c5:90:a1:6a:e4:0f:3e:1d:e4:78:e5:c3:81:8d:
                    6c:d0:97:9a:19:11:d5:cb:8a:8c:97:0a:d2:3c:a2:
                    d3:e1:01:ae:15:f2:e6:73:18:44:92:f2:b4:9b:6e:
                    c1:55:d2:c0:34:25:1a:52:68:18:67:5d:b3:03:be:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5E:EB:88:FB:58:E7:64:B0:0F:25:B8:02:13:82:68:3D:81:3E:0F
            X509v3 Authority Key Identifier:
                keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:df:24:02:6c:58:08:a8:4f:1e:43:b8:21:8c:13:aa:7e:
         3f:59:5f:0e:d4:8a:16:59:5d:32:69:f2:20:cc:68:f5:42:bd:
         81:43:d3:3c:7e:14:2f:db:45:3c:ce:cd:c6:73:ac:d5:7d:53:
         7e:c3:33:55:11:10:76:79:d9:31:ad:a5:d7:c8:bf:91:42:7c:
         1a:a7:78:3e:37:0f:5c:c9:2d:97:60:33:7d:8a:6c:34:c1:0c:
         ad:62:00:26:85:65:0c:7b:2f:24:c7:62:1b:c8:1f:f1:e4:13:
         2d:d2:85:2d:25:fd:3e:f3:e0:4f:6e:7b:81:10:6d:ab:cd:ad:
         90:05:69:07:b9:82:c2:ad:75:6d:64:06:de:93:b4:da:8e:41:
         a9:e9:a6:76:d9:0e:ee:ec:b5:04:44:ab:a1:8e:a2:2d:a8:5d:
         c9:2d:d0:09:e9:96:af:e3:18:5d:95:eb:cd:10:5a:09:d4:4d:
         d9:35:9b:b3:45:d9:36:07:2e:79:fa:af:3d:ac:b9:09:32:f3:
         6e:18:45:71:c4:ff:27:8b:7d:b2:90:c5:fe:d5:87:e0:91:ad:
         6b:6a:3d:5f:8c:40:77:eb:ea:c1:21:7b:ed:67:29:52:9f:c3:
         01:c3:1e:a8:67:d5:4f:18:97:25:a7:d0:b0:f9:49:20:c0:76:
         9f:34:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:01 2026 by rpki-client