Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File:                     UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier:          SmMsUQ9SldUa7f5zKZcLnfsWuC3oHku+bVr6TgEKnZk=
Subject key identifier:   13:89:2B:2D:15:F9:A7:62:91:19:AF:54:4B:3C:9F:39:3D:6C:14:8D
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number:          AF
Signing time:             Mon 21 Sep 2026 07:25:36 +0000
Manifest this update:     Mon 21 Sep 2026 07:25:36 +0000
Manifest next update:     Mon 28 Sep 2026 07:25:36 +0000
Files and hashes:         1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: OhH1yeI+k4RLTWQtHrC8rIG034cbqAX6VFrLwbMFJBY=)
                          2: 7mRDPXJ3h9zSWWgVoEcL_6biO0M.asa (hash: iaCcz//xEDdHcY1+4RgESK7U52cR8FCEpOlePKcZHDg=)
                          3: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
                          4: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
        Validity
            Not Before: Sep 21 07:25:36 2026 GMT
            Not After : Sep 28 07:25:36 2026 GMT
        Subject: CN=6ab0dbf0-5405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:dc:df:9a:41:a4:8e:90:66:1c:6c:c1:f8:
                    8b:56:0e:c4:fb:bc:c0:bd:77:60:a3:cc:6e:e6:ec:
                    32:80:3d:f1:cb:a2:6c:d5:d8:26:f4:83:4d:83:7a:
                    a1:15:0c:67:db:55:c3:82:b2:a9:c4:a8:59:b0:f0:
                    8e:27:8a:b5:98:20:74:f4:59:1a:bd:06:da:64:a2:
                    1b:ec:c7:03:43:d5:4d:c7:77:3d:b4:9f:46:b4:c3:
                    78:64:5a:9c:aa:35:7c:a3:d0:cd:82:56:5a:af:74:
                    df:53:a7:30:88:4b:c4:ca:f5:bd:57:7a:17:64:22:
                    43:d2:9d:f4:21:02:a7:e8:8b:62:a3:91:80:db:a7:
                    5a:fa:61:e1:d0:7f:86:05:e1:40:6b:35:2a:c7:f2:
                    78:2d:af:73:27:0b:54:45:12:09:30:5e:3f:7c:72:
                    6b:0a:63:b6:8b:b6:fa:df:16:b3:7f:d5:67:61:17:
                    90:8d:81:ea:47:15:0f:99:e3:49:7e:4e:83:6b:0b:
                    45:67:2b:84:36:f4:3f:c2:d3:ac:b9:81:00:fd:9a:
                    01:94:05:0e:6f:e1:d3:bd:7d:c1:d5:f3:a8:1f:99:
                    25:00:92:84:7b:1f:75:a4:b7:6f:c7:be:28:1a:3a:
                    12:85:ff:c2:f9:34:6e:1d:41:70:4d:41:2b:2b:f1:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:89:2B:2D:15:F9:A7:62:91:19:AF:54:4B:3C:9F:39:3D:6C:14:8D
            X509v3 Authority Key Identifier:
                keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:15:39:90:14:24:d9:17:f6:7d:9a:da:90:82:b3:c6:eb:
         73:72:78:8d:b1:5d:15:64:e9:2f:c7:ba:70:a0:4e:9f:9f:bf:
         a6:f4:d5:d2:c4:72:6a:7b:2b:6a:b0:f3:35:e2:9f:34:44:37:
         77:10:78:c4:6a:91:a3:af:e7:7e:b9:0c:52:b0:42:86:50:48:
         03:68:d6:c5:6e:1d:94:ea:c1:d8:f4:e5:c9:07:d8:2b:c0:e9:
         ba:1d:55:d5:69:75:22:88:07:61:fa:d7:7d:de:54:05:e0:fa:
         53:5c:a0:03:7e:2c:21:59:b7:c9:42:17:d7:e7:b2:65:48:6f:
         7e:db:20:1b:04:6a:fa:3c:f8:33:5a:31:6f:03:4e:1f:04:7a:
         11:32:e1:bf:9a:8c:ec:20:bc:97:1f:13:00:72:65:d5:b2:2f:
         c3:c4:34:e7:c0:97:70:8c:90:5a:40:1a:81:ca:44:ae:5a:fb:
         55:d4:26:67:08:25:01:f2:9b:b8:9a:b0:fc:99:24:d9:f4:a5:
         2f:01:fc:4a:36:9a:55:6e:d4:fd:ff:2f:41:44:65:2b:34:2a:
         b6:10:74:d5:64:0e:72:02:24:07:06:f0:27:18:8b:b1:dd:f0:
         c7:9a:34:1e:ad:c7:95:56:9a:f9:47:7e:dc:7a:fa:56:09:f6:
         5d:ab:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:10:06 2026 by rpki-client