Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
File:                     UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json)
Hash identifier:          tsrNYE+FfHspURZrjgzINmd+OPT9v44Y/B+L3NEpUEQ=
Subject key identifier:   CB:EA:C2:6F:E4:34:A7:09:08:6C:4C:E2:F6:7A:91:D9:62:1A:5A:B2
Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
Certificate issuer:       /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
Manifest number:          0223
Signing time:             Fri 25 Sep 2026 02:50:29 +0000
Manifest this update:     Fri 25 Sep 2026 02:50:29 +0000
Manifest next update:     Fri 02 Oct 2026 02:50:29 +0000
Files and hashes:         1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: k2c+Di+UxhHsBmvZEt7Bg1DEiBkloFCFweK16FMulfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
                          rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
        Validity
            Not Before: Sep 25 02:50:29 2026 GMT
            Not After : Oct  2 02:50:29 2026 GMT
        Subject: CN=6ab5e175-79e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:90:c6:a6:c3:03:d7:16:22:5f:eb:ce:33:
                    dc:1c:89:53:1c:90:51:46:01:4f:62:39:23:e5:4f:
                    95:82:54:11:84:bc:30:ca:7b:99:b1:de:41:ad:91:
                    0c:16:96:8f:b4:f3:d4:6c:d8:d5:ab:11:90:02:10:
                    9b:12:4b:a6:3a:8c:9d:59:4d:8a:f5:d1:ce:8a:b0:
                    6d:96:f1:8c:cc:93:fa:b7:01:d8:6e:e3:e7:99:b5:
                    d5:1f:d7:b2:5b:2f:54:1e:3e:3a:ab:4d:c5:ea:8e:
                    52:78:a2:ab:15:65:3d:e2:62:be:25:cc:27:1b:44:
                    95:ed:63:fe:95:19:ae:4c:20:8a:0e:d0:90:fc:f9:
                    9c:c2:5d:55:f2:7f:80:02:57:34:8f:1b:f9:ee:9d:
                    7e:bd:d0:2f:4e:d0:a8:d0:99:11:66:3b:cd:52:a8:
                    75:01:69:33:8e:84:cc:9e:5d:fe:7f:20:ff:01:d3:
                    49:92:f2:41:83:2c:9f:1b:fa:76:f5:be:86:8c:ae:
                    88:22:e6:26:7a:73:7b:6c:7f:23:e1:49:2a:b2:22:
                    38:85:1a:a2:c8:40:b1:1e:9c:8f:69:86:e0:ec:76:
                    63:71:51:9c:c6:4e:1a:02:ca:bf:ec:4f:94:5b:93:
                    47:fa:f6:4a:a9:ad:06:b0:10:27:c2:19:af:04:b1:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EA:C2:6F:E4:34:A7:09:08:6C:4C:E2:F6:7A:91:D9:62:1A:5A:B2
            X509v3 Authority Key Identifier:
                keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:9b:c7:bd:ec:47:3b:9e:b2:98:d2:5c:ec:af:98:9a:e8:
         73:a6:32:93:4f:88:26:47:ee:fd:91:a2:86:a8:6c:f8:b9:50:
         cb:bc:22:b5:d5:bf:4b:cf:08:ff:29:3a:a4:9d:ad:76:32:f3:
         28:19:f5:8c:87:51:96:8e:4b:69:14:8a:f3:0b:14:60:ef:10:
         33:ec:7b:d5:70:ba:e3:65:1b:b6:61:4d:18:61:e9:e5:26:9f:
         81:f7:63:10:73:b7:47:dd:97:e8:46:5e:11:ca:70:82:44:3a:
         ca:e6:e8:6f:02:d6:65:ab:e6:6a:dd:2a:e0:99:8f:a1:9e:d0:
         9d:9a:91:67:5b:61:36:c8:f0:09:55:ac:69:52:98:2b:28:76:
         2f:20:0e:82:89:bb:01:fd:5e:98:3b:35:be:fa:9e:b6:e6:8c:
         0e:7b:98:7b:d0:c5:34:cd:5a:8c:c8:68:5d:79:0a:53:91:73:
         4f:5e:e9:10:37:60:6c:81:1b:69:8e:5d:ad:71:56:8b:60:5c:
         8f:8b:de:7f:d6:b1:59:aa:4a:c7:57:3d:a8:53:90:6a:5b:e7:
         72:54:bd:6d:eb:8a:0d:db:c6:0c:51:7c:40:80:2c:e2:f3:ff:
         cf:3d:ca:da:44:a3:8c:a2:dc:3a:ac:c5:86:aa:ea:d7:c2:3b:
         de:f7:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:43:25 2026 by rpki-client