Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          5EdDLrF2VYnWsdTH2RRWl6v64XqKYQYdgfOIEEOOvD8=
Subject key identifier:   04:41:68:A3:84:EF:32:C4:94:76:87:D3:3E:B5:4E:BC:3C:E8:A0:A1
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          01A1
Signing time:             Wed 23 Sep 2026 04:07:33 +0000
Manifest this update:     Wed 23 Sep 2026 04:07:32 +0000
Manifest next update:     Wed 30 Sep 2026 04:07:32 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: hOXkFR45s5C+z5tjPpv9yebINuaaNwCbwhzdKBE+zNY=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: ObDEmQtG1k/lwRkpOy9F2JW1dUiE7e1eGbOxUKu27dQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Sep 23 04:07:32 2026 GMT
            Not After : Sep 30 04:07:32 2026 GMT
        Subject: CN=6ab35084-d428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:de:ed:91:96:48:ae:ba:2a:3e:b8:2f:20:
                    30:0c:cd:ed:11:5e:74:af:e4:71:f9:9d:d8:48:ed:
                    a5:b4:1f:a1:a9:6b:f1:43:20:91:33:88:da:87:de:
                    c9:a7:9b:c1:e4:77:cb:a8:4b:7c:04:b4:90:bc:30:
                    71:f6:37:23:13:46:f5:c6:94:25:d0:77:91:e9:bc:
                    76:69:3c:ef:92:fd:07:dd:e7:5d:ca:cb:62:59:35:
                    04:ec:44:01:e2:bf:92:dd:08:98:9f:3e:79:c2:c5:
                    3b:86:31:f7:4f:cf:58:95:9f:42:7b:60:03:6c:37:
                    13:35:f2:4f:4d:01:8f:13:c9:df:64:dc:74:c7:e6:
                    10:c6:96:bd:d6:f3:1a:b5:f1:41:2e:40:96:e6:32:
                    77:e6:47:30:f2:77:6c:6b:96:69:95:48:90:76:92:
                    56:c3:ee:ba:28:86:bd:d8:7c:d0:df:96:e5:a0:12:
                    f9:4a:1b:76:75:84:a0:80:82:c5:4e:a4:ec:21:84:
                    1a:81:d8:6d:9f:6d:44:fe:6f:8a:89:8f:f5:46:37:
                    ba:31:a8:a5:3c:9e:2d:c1:e4:74:ef:d2:e9:99:ba:
                    d0:c1:db:4d:ed:0d:20:f6:3b:11:a8:41:5f:e0:39:
                    5d:61:0e:e1:8f:e4:92:40:0f:ab:89:92:dc:1d:97:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:68:A3:84:EF:32:C4:94:76:87:D3:3E:B5:4E:BC:3C:E8:A0:A1
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:9d:21:37:f3:38:3c:45:c4:6c:44:45:79:b9:1c:89:bb:
         bc:8a:3b:df:fb:29:cb:a9:14:80:6e:3d:ee:e3:d6:64:22:3a:
         63:74:01:df:9d:fa:92:6e:5f:38:b0:8f:33:dd:c0:9b:92:e6:
         82:82:59:03:dc:72:1e:78:97:cd:20:4e:32:9f:2d:d8:7d:17:
         ff:0e:83:ce:78:ad:2f:01:c3:89:a4:4b:e5:62:19:0a:4b:75:
         9b:44:63:ff:fa:76:a3:89:f8:5a:4d:30:03:a1:2a:f0:61:fe:
         80:ba:1a:6b:79:db:e3:a7:32:21:56:d4:fd:ed:ae:28:a8:1b:
         f0:32:e4:a1:b7:68:1b:42:52:1e:a5:21:4b:b9:ba:52:58:ed:
         d5:1a:07:60:a7:22:1c:dc:c5:fa:24:41:98:20:a0:7e:0b:27:
         c0:60:47:8a:43:b4:08:1b:74:e3:0a:82:0b:9e:b9:a4:0e:32:
         6d:6d:7f:e9:52:16:d8:d0:2c:18:76:f7:91:2b:94:8f:f5:ab:
         21:84:d6:8f:a0:8e:c6:13:2c:ae:3c:b6:0d:a0:19:1b:01:1a:
         2e:c9:17:bc:5f:b6:1e:9c:06:cb:d9:11:cd:1c:92:c0:a9:93:
         b3:99:b7:fe:94:53:a1:8f:01:2c:23:89:6b:a9:14:2d:c8:1a:
         44:7e:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:28:04 2026 by rpki-client