Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File:                     rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier:          rKKeH6Nj/zC369+xzhAxkXLzN0fVE1/EnPHB3Y8jFUc=
Subject key identifier:   49:AF:A1:B8:3C:4C:5A:9F:09:80:AA:E5:30:AD:EF:94:C6:BF:AB:A9
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer:       /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number:          01A0
Signing time:             Wed 23 Sep 2026 04:07:17 +0000
Manifest this update:     Wed 23 Sep 2026 04:07:17 +0000
Manifest next update:     Wed 30 Sep 2026 04:07:17 +0000
Files and hashes:         1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: mz28uaxKN3V6LMUl8uVkmD7HTry5KeL/I+lpf5BQlFE=)
                          2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: jiOqsOopgHWdylNJvQ56lnPS2twkZ7rplvNHVmhQWj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
        Validity
            Not Before: Sep 23 04:07:17 2026 GMT
            Not After : Sep 30 04:07:17 2026 GMT
        Subject: CN=6ab35075-6694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:ef:92:16:22:4f:e7:83:7a:af:7e:de:50:
                    9d:62:1e:70:b4:19:27:6c:0e:ec:a8:f4:e6:44:14:
                    57:2e:d6:90:4d:02:e3:f2:ea:b1:ad:da:53:4a:c5:
                    cf:99:5c:8e:09:1f:38:0d:4a:af:43:02:5d:eb:ff:
                    70:f5:e5:51:a3:11:fe:ba:30:5d:33:d7:9f:71:a4:
                    1b:d1:b9:24:41:ac:07:6c:ff:b7:28:c2:c0:f0:3a:
                    69:59:1a:64:b1:98:d3:56:14:ce:28:79:16:af:66:
                    69:c7:61:7c:b6:cd:58:95:65:21:2a:43:81:31:57:
                    76:29:2c:1a:67:87:23:14:f3:82:32:0c:a3:cd:81:
                    58:5f:26:45:c0:35:5d:f4:66:63:f1:d1:2c:cb:ef:
                    ac:87:6e:99:b0:e7:51:54:44:a9:7e:9e:79:7a:09:
                    08:1e:11:a7:23:83:82:98:f1:04:75:da:6f:41:2a:
                    3a:14:08:c3:0e:e0:4b:f8:2e:85:a0:73:23:1d:89:
                    22:f8:2c:24:00:d1:97:f1:9b:97:74:c9:7e:39:c4:
                    75:47:49:83:47:65:36:ac:1a:fb:11:39:53:b9:45:
                    a8:fc:98:47:f7:ba:d0:5b:54:38:03:b6:f0:81:8a:
                    1d:7c:b8:5d:33:f4:94:cc:de:dc:66:25:81:79:57:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:A1:B8:3C:4C:5A:9F:09:80:AA:E5:30:AD:EF:94:C6:BF:AB:A9
            X509v3 Authority Key Identifier:
                keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:69:a2:18:36:37:c2:a7:b6:f1:d5:56:2e:fd:26:c1:3f:fe:
         f3:b1:e7:40:88:aa:d4:19:00:db:52:5d:22:9c:8c:cd:7f:da:
         56:76:8f:ce:cd:e9:70:fc:a4:9b:d9:a9:d6:05:13:7b:ba:6c:
         cd:b0:1d:df:a1:b1:b6:0a:be:96:e4:28:47:4b:2e:5a:df:5a:
         d9:ba:0f:82:15:08:95:43:f6:21:10:bb:02:d1:43:1f:a9:34:
         18:14:c0:de:22:c9:ff:fa:7f:d7:2c:13:46:15:20:63:98:ea:
         1b:fe:03:a0:f7:4a:0f:47:2b:17:10:11:d4:7b:a4:8a:a4:c8:
         a9:eb:09:b2:0f:23:8c:0a:af:c2:bb:f1:31:10:ae:4b:22:cf:
         3b:a6:ab:c9:00:6b:ab:a0:8d:28:42:a9:08:94:c2:22:d8:8c:
         4e:3b:ef:1a:76:42:8f:2b:f7:f4:2a:c0:ca:21:98:4e:8c:20:
         f1:c1:b8:13:78:f6:ed:6c:b1:2c:76:8c:75:d4:57:3f:8a:79:
         fe:68:34:05:12:72:5b:da:ee:96:72:94:4b:29:d5:a7:1f:d5:
         c8:e2:48:cf:b0:cb:b7:d4:c7:f8:04:d2:38:e6:18:85:b5:ee:
         0e:5f:2e:7c:e1:62:eb:cb:ba:d2:76:d7:23:80:a8:d5:7b:26:
         5f:38:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:42:50 2026 by rpki-client