Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
File:                     uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json)
Hash identifier:          o/OejKBz1RQ9Gjz+Nq8ra1rM+spGy5hcqRBbxGssW2U=
Subject key identifier:   28:55:96:92:B1:5F:C4:15:F5:6E:34:98:35:7C:82:B7:A4:1F:31:3B
Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
Certificate issuer:       /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Certificate serial:       0F57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
Manifest number:          0F4B
Signing time:             Sat 26 Sep 2026 17:37:26 +0000
Manifest this update:     Sat 26 Sep 2026 17:37:26 +0000
Manifest next update:     Sat 03 Oct 2026 17:37:26 +0000
Files and hashes:         1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: LqrR4EpQ7pS+owyQG8Xw2UjvGQKc/yZ8leDVnXNeQoc=)
                          2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: /lp2Z8VQhDI00l+o4slVgOYMfv7oLB/2J79jG65CBNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
                          rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3927 (0xf57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
        Validity
            Not Before: Sep 26 17:37:26 2026 GMT
            Not After : Oct  3 17:37:26 2026 GMT
        Subject: CN=6ab802d6-190c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:1c:c0:e3:11:10:5f:70:ab:8c:de:3e:14:
                    5b:67:57:7a:4f:21:21:7d:99:11:1f:b1:9f:1a:4d:
                    01:53:bb:46:05:73:80:50:7a:93:07:98:ff:70:28:
                    67:47:6c:46:25:c0:c0:70:41:fc:3d:27:f5:d9:ac:
                    4a:fd:c1:f0:45:4a:cb:c4:80:92:fc:fd:42:b4:0c:
                    3c:fc:38:82:c2:d1:c2:bf:fc:0a:a7:db:f7:4f:c6:
                    ed:ed:ba:9b:61:76:71:ad:46:28:29:34:2f:fe:6d:
                    de:c2:c4:74:fb:04:7e:8e:40:3a:9d:e4:c7:2f:12:
                    94:0a:bf:02:a5:d3:38:e5:71:e7:ea:e2:be:a3:c2:
                    d2:e0:79:67:f1:9c:f6:71:a6:5c:4c:b8:db:7b:6c:
                    83:e9:84:7b:e8:6f:bc:d2:9b:79:79:24:05:8d:af:
                    b6:ee:19:9f:db:bc:26:bf:93:fb:0f:87:7e:e7:7e:
                    fd:4e:9a:de:b4:41:45:10:90:a0:00:18:8e:08:43:
                    b7:60:26:aa:04:43:aa:68:5b:53:dc:f2:74:0e:a8:
                    37:f9:f0:8a:04:e6:b9:1d:16:07:65:c0:47:90:50:
                    ac:9a:a9:41:ef:3f:7a:11:f5:57:fd:15:08:94:b5:
                    15:44:39:48:94:81:32:ac:00:8d:13:70:58:ac:9a:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:55:96:92:B1:5F:C4:15:F5:6E:34:98:35:7C:82:B7:A4:1F:31:3B
            X509v3 Authority Key Identifier:
                keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:23:34:65:a8:b2:50:0c:cf:f7:9b:ee:2c:0d:c2:4e:d7:e1:
         5c:55:d8:3f:b8:25:db:41:9f:19:7c:24:0c:44:77:f6:bd:60:
         2f:b5:d5:64:fc:2c:f2:7d:f0:35:4c:71:76:4a:67:4a:5c:d3:
         ce:0d:90:75:c7:65:ee:af:22:2a:d8:9a:09:2c:d9:01:4b:b3:
         ca:05:cb:3a:ff:7b:50:b7:6a:65:11:a7:81:35:2f:63:eb:26:
         5f:f9:db:26:c4:c3:ba:43:bb:a9:31:23:6b:7d:1f:00:bf:15:
         b8:00:1a:c8:03:e8:da:65:f7:18:14:9a:61:7e:ef:e2:17:6f:
         89:1b:3c:63:a0:2e:bf:6b:79:0a:cb:a4:c7:2d:d0:f1:be:29:
         8d:87:aa:8b:44:48:63:00:9b:5d:b4:69:6c:1d:25:47:7e:07:
         e3:36:48:91:0f:a6:39:86:f8:70:5b:23:67:0d:94:7e:e6:80:
         4d:7e:3b:51:05:7b:bf:dd:c0:14:6d:95:de:29:d9:c1:b6:99:
         42:73:42:1e:ff:00:76:cf:2e:89:58:cb:e6:2a:9b:7e:e2:e1:
         c0:16:47:64:e5:98:5c:82:55:7d:ae:bb:c4:ac:bd:9a:17:c9:
         8c:7a:14:1a:63:4f:4e:15:3c:c0:40:61:d6:a8:ec:67:84:cb:
         bb:dc:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:36:05 2026 by rpki-client