Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
File:                     UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json)
Hash identifier:          tBeabYGbzNdBmm1zDOkHbBATIaGSZHjgX7xauWcx4nk=
Subject key identifier:   2D:5C:F2:73:58:DF:87:A2:82:69:94:06:2F:F4:C1:1C:64:3D:B4:92
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Certificate issuer:       /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
Manifest number:          02B6
Signing time:             Fri 25 Sep 2026 01:47:34 +0000
Manifest this update:     Fri 25 Sep 2026 01:47:34 +0000
Manifest next update:     Fri 02 Oct 2026 01:47:34 +0000
Files and hashes:         1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: GHTNJ37QZu4rZJUubqPfMgvhRl8k6PoLlroCcZ8yRU8=)
                          2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: 74jq6ZEh6iqV+58fBJr/9zAa1XDAf9e6FWi0Lze9+iQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
                          rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
        Validity
            Not Before: Sep 25 01:47:34 2026 GMT
            Not After : Oct  2 01:47:34 2026 GMT
        Subject: CN=6ab5d2b6-4707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:de:bf:0b:ea:2a:05:fa:2b:b0:75:b2:fb:
                    4b:8e:1a:c8:ed:f2:03:62:0b:66:a6:0e:42:70:f1:
                    a3:df:03:11:45:c9:5d:78:80:d5:49:ac:8c:64:b3:
                    bf:0b:eb:25:a7:59:58:d3:9b:88:f2:7a:c4:e5:a3:
                    40:d5:e2:b1:92:47:90:5c:c5:9c:0d:f7:90:06:08:
                    d3:22:2c:4d:52:f2:4e:3b:ea:2a:ab:4e:f6:a2:24:
                    99:7a:61:b9:83:21:73:9e:51:76:ee:3f:8e:e3:c1:
                    81:0a:22:32:5e:3b:a8:d8:ea:66:8b:fb:19:c8:c0:
                    76:7d:3c:fd:78:92:4c:f0:6b:0e:f2:22:66:f2:a8:
                    e5:e9:7b:c5:36:a9:67:e2:21:8d:73:a4:75:71:eb:
                    a2:a8:6a:18:4e:05:05:c4:d8:8f:d4:aa:ed:53:d5:
                    1f:53:4e:99:88:2b:64:8b:2f:89:df:6e:ed:bb:6c:
                    02:49:b5:fc:5d:9f:09:8f:0c:f0:6b:9d:25:b9:7e:
                    74:9e:06:0a:93:56:ce:cf:e3:e2:a3:da:3b:ec:b4:
                    c3:30:cb:3c:05:b3:e2:6e:c3:81:ec:13:22:6f:56:
                    31:c0:2d:1d:ef:12:0f:84:83:54:5c:58:fe:d6:ba:
                    6a:ee:ad:6d:22:64:08:5d:d9:3c:42:e2:d9:7a:3e:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5C:F2:73:58:DF:87:A2:82:69:94:06:2F:F4:C1:1C:64:3D:B4:92
            X509v3 Authority Key Identifier:
                keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:30:f5:d6:d4:07:3c:55:73:2e:92:2b:6f:15:2b:0a:95:
         15:61:78:cd:37:93:eb:c8:cc:64:9b:c4:66:cf:5b:2a:44:6b:
         29:cd:36:8b:55:9c:da:bc:9b:44:5e:96:62:c6:7f:61:c0:60:
         4e:e7:a0:15:a0:6b:04:d3:e9:4e:21:9f:91:9c:cf:fd:36:f0:
         a0:95:08:c9:35:82:42:69:96:f6:47:c5:e3:a0:a7:30:ae:e4:
         4d:8d:fd:13:74:1e:44:f7:01:a7:24:98:94:45:a9:9c:b7:77:
         6c:73:57:b6:21:b0:26:2b:80:24:91:e3:20:56:a5:de:e6:26:
         9a:2f:bc:ae:78:e8:b2:38:a5:9f:28:d2:6e:4a:2b:91:0a:3c:
         9c:c4:4d:7b:a0:64:bf:b6:70:32:8b:30:a8:fd:2f:00:93:6a:
         c3:46:06:9b:d6:6c:fe:fd:37:3c:d6:00:8e:dc:c6:32:da:24:
         0c:4f:2d:1c:9c:d0:8f:43:0b:d6:d5:cd:56:92:cf:97:6b:a1:
         3e:e7:97:51:bf:97:5f:41:83:9c:a8:13:70:ae:15:98:09:60:
         df:59:d7:ef:1c:8d:7b:5b:ee:58:3a:59:3c:1c:85:d0:d7:bd:
         e2:a8:5d:64:52:73:ff:73:70:34:3e:14:ed:7f:07:e3:d8:6b:
         e2:05:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:16 2026 by rpki-client