Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
File:                     uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json)
Hash identifier:          wECcgDY3DbwoHVsHChKdEwCn6YfsXDi5R9o0CuD+SGg=
Subject key identifier:   9B:BA:F4:0A:3D:38:BD:C1:30:EE:F1:53:5C:52:F5:A2:D6:4A:19:CA
Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
Certificate issuer:       /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Certificate serial:       0CF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
Manifest number:          0CED
Signing time:             Thu 24 Sep 2026 18:23:23 +0000
Manifest this update:     Thu 24 Sep 2026 18:23:22 +0000
Manifest next update:     Thu 01 Oct 2026 18:23:22 +0000
Files and hashes:         1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: kF5UvbWAs5Cvw1DazySno591GGblcYxrqIbGUMna04E=)
                          2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: 3OqTGjIgsHVDPUYnbHar2FaPmlN2uunJHFoJ3j2NcEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
        Validity
            Not Before: Sep 24 18:23:22 2026 GMT
            Not After : Oct  1 18:23:22 2026 GMT
        Subject: CN=6ab56a9a-b556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:75:ed:a9:7b:b8:78:f2:a6:90:30:e4:65:
                    6d:de:de:e9:12:c8:b1:42:c2:ce:2d:27:21:74:6a:
                    57:94:57:a6:cc:da:b1:d9:f8:7a:7b:fb:a6:60:30:
                    e6:39:38:6a:d9:63:42:7f:af:64:fb:0e:a5:49:b5:
                    fa:1f:7f:a9:b5:aa:d1:90:32:29:38:67:c8:81:cc:
                    6c:2e:a4:34:24:bd:88:95:2c:c9:9a:5b:df:43:ea:
                    4a:73:37:73:7e:3d:c9:65:3e:58:dd:66:f6:70:91:
                    1c:38:d7:1a:87:20:79:cf:bf:82:fc:75:9e:1d:89:
                    f3:c2:c5:cf:88:3f:93:85:f3:3b:01:fb:17:12:f2:
                    52:03:a0:67:db:8d:0d:ac:f9:9a:95:23:7d:c4:d9:
                    60:08:c7:c8:d9:fe:38:82:b4:e6:ec:03:fe:6c:2a:
                    c2:ef:ba:5d:92:22:de:74:0d:5b:da:a2:75:bd:ae:
                    da:8e:60:3b:11:7b:a4:49:a8:86:af:cc:d3:f0:4a:
                    20:60:07:16:3a:e0:7b:60:54:1b:d8:3b:38:ee:5b:
                    4d:4e:03:46:39:bd:49:c9:24:77:c6:e6:68:78:25:
                    b5:20:5b:40:8d:c4:4b:52:92:1a:82:71:d2:42:d1:
                    12:31:26:6b:35:f8:26:e1:40:0d:6e:db:6c:31:a7:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:F4:0A:3D:38:BD:C1:30:EE:F1:53:5C:52:F5:A2:D6:4A:19:CA
            X509v3 Authority Key Identifier:
                keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:8e:f8:ef:d1:a0:4e:b7:fc:22:99:2b:cc:b6:d7:8b:b2:
         c8:b2:41:a8:96:13:9d:b9:ca:87:66:59:cf:2a:07:49:28:cc:
         da:1b:1c:9b:ac:de:7a:ab:ae:a6:91:ef:58:0d:b1:22:5b:71:
         8d:fc:a9:11:47:45:df:75:f9:74:c1:21:37:a9:69:41:81:dc:
         51:f3:5a:47:31:79:4e:71:80:0b:bc:16:a5:b6:b7:11:d5:d1:
         4d:22:33:40:2a:5e:d9:fe:1e:97:4b:75:6b:b4:2c:23:29:67:
         40:d7:ce:26:55:fc:69:e8:4a:c9:a3:be:e4:c5:c1:08:43:66:
         d2:ff:10:f3:bf:34:86:02:af:4a:2f:01:cf:9d:25:31:8d:72:
         40:cc:8a:08:8a:c6:6b:ab:63:bf:f3:3f:ce:0f:bd:c9:bc:5d:
         2e:51:7f:69:13:d8:57:4d:da:4b:eb:b7:8d:09:70:06:e7:6d:
         cd:b8:aa:45:46:cd:6a:5c:bd:81:71:ec:5f:3c:57:a7:48:18:
         41:b4:eb:bc:2b:a2:ab:48:f2:81:dc:26:11:9d:f2:b2:9d:7a:
         e2:fc:20:cb:b1:8b:a3:4f:a8:23:b4:47:f9:b9:ab:52:a3:6c:
         08:57:77:f5:70:70:a1:33:20:3b:64:e4:78:ec:14:8a:f1:55:
         bc:8e:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:51:21 2026 by rpki-client