Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
File:                     UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json)
Hash identifier:          3sRmHQUcYEvtIemF2WIuRYa8GJ/AQ/VXo3DVmJCa4w8=
Subject key identifier:   84:29:18:10:DD:78:F5:C2:B0:CE:F2:8B:50:7D:FC:E9:FA:BC:E6:5B
Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
Certificate issuer:       /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Certificate serial:       0A08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
Manifest number:          0A08
Signing time:             Thu 24 Sep 2026 19:43:03 +0000
Manifest this update:     Thu 24 Sep 2026 19:43:03 +0000
Manifest next update:     Thu 01 Oct 2026 19:43:03 +0000
Files and hashes:         1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: 7vyh6/Kyvc5z+gaCDqlhgz71NSplKWhl5xeOWXTgj/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
                          rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
        Validity
            Not Before: Sep 24 19:43:03 2026 GMT
            Not After : Oct  1 19:43:03 2026 GMT
        Subject: CN=6ab57d47-d6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:d1:10:e4:f0:d4:8b:cb:1e:f4:50:95:f0:
                    c7:d7:48:48:15:aa:fe:40:d2:7b:ff:ed:71:f0:ab:
                    e3:8a:2a:c4:28:41:64:3c:f2:2a:55:79:ae:e7:43:
                    80:85:28:05:51:05:bf:48:9f:f9:b6:43:75:23:73:
                    17:0d:b5:09:55:0c:5f:f4:cc:c0:7f:01:11:8e:3c:
                    f7:5a:4a:00:a5:98:7d:5b:c8:04:f1:6e:50:ea:26:
                    36:45:25:db:97:97:13:fc:35:9b:d7:0e:d5:55:77:
                    e1:9b:4d:b9:7a:cd:f5:3f:af:3c:f8:0a:1f:8e:26:
                    75:5e:00:a9:05:35:aa:b3:c8:4b:05:b0:db:49:86:
                    19:f1:69:23:2b:b3:d2:eb:e8:1e:7b:e6:c0:f8:2d:
                    60:d4:6e:28:c7:47:54:b2:70:67:95:11:a1:93:49:
                    c1:1d:9c:01:98:c6:c3:6b:26:20:e6:50:80:a4:4f:
                    3e:ec:44:46:37:74:42:bc:fa:36:99:8d:55:9d:27:
                    80:25:57:94:6c:88:c8:53:d5:c0:6e:b3:8a:f6:38:
                    d0:db:9e:3a:d2:6f:05:3a:f6:c5:0e:df:a8:d5:56:
                    77:66:8e:d4:9d:1b:c0:ff:1f:4a:76:d1:24:6e:99:
                    8a:09:2c:a0:e3:d7:10:15:aa:83:db:31:25:d3:fb:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:18:10:DD:78:F5:C2:B0:CE:F2:8B:50:7D:FC:E9:FA:BC:E6:5B
            X509v3 Authority Key Identifier:
                keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ee:08:e5:6b:67:de:a9:86:18:7e:b4:10:d1:e1:c2:ed:05:
         8e:ae:78:54:54:32:e1:45:c6:95:77:81:ce:1e:b9:ba:8a:d7:
         e3:c3:df:31:1a:40:16:0a:46:1d:1f:45:e2:eb:c9:dd:f9:35:
         71:38:af:13:3c:b5:98:ba:27:3d:6c:9c:90:be:72:92:d4:6b:
         92:9c:0d:99:ce:15:69:51:88:c3:0c:e4:e7:9c:0f:dc:ca:4d:
         45:ef:13:01:4d:8f:65:d2:42:95:6a:04:05:33:07:d3:bc:88:
         6c:14:e3:cf:e9:f6:73:70:3a:a7:5d:90:99:d5:9b:d8:09:46:
         4e:2b:7d:63:09:4b:3f:25:6d:4d:c9:33:fc:25:06:be:a1:9d:
         a4:07:4c:03:3e:cf:69:3d:31:9b:5a:43:21:7b:eb:40:7f:bb:
         b0:4f:45:eb:db:c0:fa:33:a6:85:d9:3b:4d:a8:60:7e:5b:5a:
         bb:57:69:35:b7:0f:96:43:a4:c7:fe:8a:f9:d5:fa:45:ae:05:
         08:15:e6:93:cc:ce:e6:fe:78:be:8a:af:a1:38:25:92:4f:ae:
         5f:cf:71:eb:2f:d2:47:47:5a:6b:93:26:4a:4d:fe:ed:06:c3:
         56:74:ce:7d:df:fd:88:79:47:9f:9b:6e:22:d2:17:87:4b:1f:
         45:f7:5e:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE
QTUyOUU3QzcwHhcNMjYwOTI0MTk0MzAzWhcNMjYxMDAxMTk0MzAzWjAYMRYwFAYD
VQQDEw02YWI1N2Q0Ny1kNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1u3REOTw1IvLHvRQlfDH10hIFar+QNJ7/+1x8KvjiirEKEFkPPIqVXmu50OA
hSgFUQW/SJ/5tkN1I3MXDbUJVQxf9MzAfwERjjz3WkoApZh9W8gE8W5Q6iY2RSXb
l5cT/DWb1w7VVXfhm025es31P688+AofjiZ1XgCpBTWqs8hLBbDbSYYZ8WkjK7PS
6+gee+bA+C1g1G4ox0dUsnBnlRGhk0nBHZwBmMbDayYg5lCApE8+7ERGN3RCvPo2
mY1VnSeAJVeUbIjIU9XAbrOK9jjQ25460m8FOvbFDt+o1VZ3Zo7UnRvA/x9KdtEk
bpmKCSyg49cQFaqD2zEl0/vU7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQpGBDd
ePXCsM7yi1B9/On6vOZbMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1
MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO
cmVXczNJTDAxWkxhVXA1OGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuu4I5Wtn3qmGGH60ENHhwu0Fjq54VFQy4UXGlXeBzh65uorX48PfMRpAFgpG
HR9F4uvJ3fk1cTivEzy1mLonPWyckL5yktRrkpwNmc4VaVGIwwzk55wP3MpNRe8T
AU2PZdJClWoEBTMH07yIbBTjz+n2c3A6p12QmdWb2AlGTit9YwlLPyVtTckz/CUG
vqGdpAdMAz7PaT0xm1pDIXvrQH+7sE9F69vA+jOmhdk7Tahgfltau1dpNbcPlkOk
x/6K+dX6Ra4FCBXmk8zO5v54voqvoTglkk+uX89x6y/SR0daa5MmSk3+7QbDVnTO
fd/9iHlHn5tuItIXh0sfRfdetQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:00:33 2026 by rpki-client