Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
File:                     UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json)
Hash identifier:          Y3RpXsSsZdKL6DYxgGKbeS7Wae0ru6Un/mdyIORB4zk=
Subject key identifier:   AD:76:2A:69:4B:D4:43:00:32:52:F4:C6:2C:9D:C8:E3:4C:E8:BD:A5
Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30
Certificate issuer:       /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30
Certificate serial:       0B36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
Manifest number:          0B26
Signing time:             Thu 24 Sep 2026 19:15:40 +0000
Manifest this update:     Thu 24 Sep 2026 19:15:39 +0000
Manifest next update:     Thu 01 Oct 2026 19:15:39 +0000
Files and hashes:         1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: hV+80rIfbO009GJtSBBEqwV7voKuqoSxfuN6rP1fbVM=)
                          2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: pof99iHFZVJvBPp5es+zXJPZBFEWOms9hdolCrdlEWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl
                          rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30
        Validity
            Not Before: Sep 24 19:15:39 2026 GMT
            Not After : Oct  1 19:15:39 2026 GMT
        Subject: CN=6ab576db-fe56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:fa:49:98:fc:4f:75:c7:1e:5f:74:47:8e:
                    02:b9:9e:86:48:2e:20:2d:06:c7:7e:a7:0f:6c:bb:
                    75:e3:2d:c2:1c:ee:31:c5:dc:fb:2a:eb:c1:59:92:
                    8a:a5:e7:d7:5e:17:ec:48:89:05:07:d7:e1:f2:83:
                    41:2c:3b:b9:87:d8:a1:4b:06:f5:bb:b8:a5:dc:48:
                    b2:b4:16:e5:10:22:ab:e7:1e:8b:2e:7a:fe:4a:b4:
                    f0:70:08:78:f2:e3:fe:8a:0f:35:e0:07:81:c3:bb:
                    df:59:42:0c:de:b8:aa:bd:25:4a:56:f8:11:bd:38:
                    0f:d3:30:8b:d2:b0:78:89:14:41:a2:73:28:64:4c:
                    67:db:93:4a:cb:72:4e:19:22:b6:57:42:c7:32:3d:
                    b5:50:19:90:84:23:af:ad:e4:64:62:3f:1c:e0:66:
                    fd:30:8f:ec:aa:4f:f3:76:c4:f0:ae:59:6c:03:11:
                    51:77:78:9a:d7:62:5f:88:99:82:01:6d:0d:e8:67:
                    e8:a6:5b:2c:18:ce:17:45:4a:a2:05:dc:f2:69:1e:
                    dc:37:81:06:19:08:7d:b0:83:ec:26:47:fe:81:30:
                    80:fc:cf:e2:f6:51:61:00:7f:61:08:2f:54:7b:a4:
                    fe:e8:ad:8d:df:64:ac:b1:92:06:47:9b:ec:ba:73:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:2A:69:4B:D4:43:00:32:52:F4:C6:2C:9D:C8:E3:4C:E8:BD:A5
            X509v3 Authority Key Identifier:
                keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:ea:4a:40:b4:2b:16:db:06:e2:2e:04:bb:77:2d:d8:8e:
         56:49:f4:54:c9:01:73:6c:50:2c:2d:16:17:3d:99:df:e4:39:
         e8:a0:e8:68:70:6e:f9:d7:2f:47:f3:c3:44:c7:98:4f:9b:c8:
         5f:6c:56:a2:dd:04:5f:79:9e:33:6c:20:d3:e8:d9:94:aa:a0:
         a4:ff:73:e8:23:ad:96:09:ed:4b:0e:b7:70:a9:24:f0:e5:66:
         7d:f3:1d:07:95:11:35:14:80:0f:05:6d:93:18:ce:5b:70:79:
         f4:51:dd:9b:4e:79:82:19:ea:27:35:a0:2d:e3:d5:ac:09:52:
         00:bf:a6:05:ba:d2:54:1b:4f:45:fc:d3:db:e9:4d:b1:c1:9f:
         8e:10:2e:7c:30:63:14:fd:a8:0a:48:28:ce:cc:1c:81:9b:45:
         62:a5:59:9e:16:b4:5c:9b:dc:8b:55:a5:d8:0c:0d:3b:2f:8c:
         a0:b7:11:a8:de:e7:ec:de:43:93:3f:fe:34:45:f8:fc:25:47:
         81:08:27:46:fb:34:47:02:39:bc:e5:97:3d:32:bc:15:d3:3a:
         b9:93:ea:28:c9:61:63:7c:3c:b3:04:fd:c9:90:40:7b:08:a0:
         a8:9f:04:0f:62:34:62:5c:b2:c6:6f:11:cc:ac:45:cc:ac:b1:
         6b:57:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:12:28 2026 by rpki-client