Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          SUy0SOkOn9JbMoCYBFDPAiL+Mz2VwdJb7o5jnD1P5K8=
Subject key identifier:   11:8E:CB:90:FB:1E:61:53:97:84:13:39:53:EE:D7:24:72:40:E4:E8
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          0193
Signing time:             Wed 23 Sep 2026 04:18:19 +0000
Manifest this update:     Wed 23 Sep 2026 04:18:18 +0000
Manifest next update:     Wed 30 Sep 2026 04:18:18 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: udgaKDy6qEY8OEeM++LN1Hrj64J1RmO4Fat4OqkxsQo=)
                          2: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=)
                          3: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=)
                          4: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: QYDMiyLsJUluSn0j67IjTBM2ewHLlzSGUigM47qc2ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Sep 23 04:18:18 2026 GMT
            Not After : Sep 30 04:18:18 2026 GMT
        Subject: CN=6ab3530a-c775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:48:62:2b:8b:40:38:f0:aa:fb:6c:fb:ad:
                    4e:31:d2:48:82:69:6d:82:20:da:76:d2:53:f5:62:
                    96:4c:d9:e8:2f:60:d1:eb:ed:79:b6:df:07:0c:d7:
                    2b:f2:79:ea:f2:8a:e0:c7:03:14:da:87:13:c9:7d:
                    51:97:4c:73:6c:8f:ed:22:86:ad:09:b5:9c:83:26:
                    78:4e:72:de:26:04:de:7e:e8:0b:c1:75:b3:7e:6f:
                    b2:bc:52:8d:78:21:02:4f:1f:7f:d4:d9:1b:a8:d4:
                    37:d8:4e:e0:fa:f6:20:ac:f5:ac:1a:69:09:d4:56:
                    b1:e0:f0:75:18:f2:8d:ae:87:4f:2b:ab:97:ef:6d:
                    e4:4a:51:ac:94:19:21:60:09:20:14:4e:cd:de:9d:
                    8a:fa:19:11:92:0a:f9:2d:fe:5d:4c:5c:cd:e1:12:
                    f9:0c:1f:f9:d2:ad:98:d2:5c:65:93:3f:b5:b4:43:
                    dd:b5:f1:ef:da:0a:9d:4a:97:40:3e:e9:5f:4f:8c:
                    ac:e0:54:1e:24:14:f3:f2:cc:50:52:39:4f:c3:bf:
                    30:23:97:a4:a7:09:48:a9:9a:f3:ad:d3:42:d3:51:
                    20:52:c0:96:e1:63:ae:93:6e:85:eb:6c:1d:dc:96:
                    5a:6f:83:1a:85:3f:27:aa:e4:f3:9b:ba:5f:c8:1c:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8E:CB:90:FB:1E:61:53:97:84:13:39:53:EE:D7:24:72:40:E4:E8
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:1c:9a:c1:3b:24:27:c7:02:23:f0:74:7c:8f:ef:5e:8e:
         d2:f6:e3:01:70:23:0b:be:8e:0a:84:74:ae:ce:c3:ec:50:27:
         33:2d:22:28:c1:4e:40:cd:8e:63:8d:34:cb:ca:ba:4b:09:0f:
         ef:c0:76:03:81:96:51:e9:b2:a6:c0:78:e5:fd:72:29:06:6e:
         84:fd:a2:91:f9:a1:a1:1b:a9:5d:e9:64:f3:e1:e0:eb:c8:3a:
         ad:8a:58:85:59:0b:dc:2f:c7:6e:fe:67:05:c1:01:a7:a7:1e:
         aa:7d:47:8c:db:f9:6e:b1:40:7c:08:52:33:51:28:ee:87:97:
         9e:6d:0a:68:2d:74:fb:3e:2e:e9:fe:eb:86:79:6a:3c:d7:f3:
         b1:7c:6f:49:5d:5a:8d:68:97:10:26:8a:ed:6b:4f:83:00:c0:
         cd:08:11:ce:4e:d1:8d:0b:fb:6d:f2:a8:bb:04:1c:e5:04:fa:
         cf:f9:53:dc:4c:d1:90:7c:d4:21:6e:02:42:97:f0:57:25:8b:
         7c:f0:e4:16:4e:78:23:92:0d:e1:d5:44:99:c4:7d:e4:79:07:
         9a:85:0c:97:66:ab:8e:dd:19:0b:cc:a8:6c:e2:75:6f:29:ef:
         4a:1d:c9:d6:84:77:1e:12:aa:a3:0b:81:8f:54:e4:de:1d:9d:
         c8:70:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:53 2026 by rpki-client