Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File:                     uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier:          Ug8zin5rzjUljk/VcDOufcBmmn2HxuACbwYdZXzSzkc=
Subject key identifier:   62:17:A8:85:AC:4B:48:4B:C6:FA:3C:AC:7B:2D:45:B2:5F:05:0D:0C
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number:          0199
Signing time:             Mon 27 Jul 2026 06:07:29 +0000
Manifest this update:     Mon 27 Jul 2026 06:07:29 +0000
Manifest next update:     Mon 03 Aug 2026 06:07:29 +0000
Files and hashes:         1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: wylZ17wwgurpMvQBOZ3hYwhvmt7Q/kJ14UyDG8Me58k=)
                          2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: bFWyMjM59KpMl2IdJ0Vj6yC7NnD6EqeOW3IYGS46pNA=)
                          3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: fhAGA7U+T9cLvdjqCVwOeUhhQP8Fkcx/sUcd0jEHT6k=)
                          4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: Oq52N/ekiWeIII4g9u3Cj+mGMLq4I3r8aDPxQbni/Mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Jul 27 06:07:29 2026 GMT
            Not After : Aug  3 06:07:29 2026 GMT
        Subject: CN=6a66f5a1-82ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:bd:71:0f:f0:7f:e7:fc:41:d7:54:9d:db:
                    c2:ba:82:9e:60:00:88:09:11:6a:f7:c3:3d:74:da:
                    1c:b8:b0:ee:d3:0a:95:49:26:f4:e9:2b:75:07:db:
                    36:a6:ac:51:8c:68:ab:64:b7:c4:a2:32:d9:af:8d:
                    2f:89:21:88:46:02:47:2c:d2:5e:01:48:34:81:5e:
                    4e:99:73:99:a0:a5:eb:22:61:d0:f5:8a:bc:cb:55:
                    92:63:56:61:41:d3:21:be:3e:94:e7:52:49:0d:46:
                    ee:6b:99:06:30:8f:a3:2b:51:b4:ab:84:c0:8d:d6:
                    07:aa:6d:4e:a4:a1:a0:8c:89:7b:04:87:51:42:f2:
                    f5:d5:75:c3:9f:87:4c:82:8c:48:73:2f:db:63:f3:
                    a4:bf:5a:f8:39:ae:24:eb:08:4e:95:42:08:0a:b8:
                    79:c2:8a:d6:ee:4d:55:17:ff:04:01:aa:85:df:16:
                    ce:22:1b:0b:90:bd:51:9e:b2:7a:87:6f:23:fc:c0:
                    13:58:67:da:6e:0f:27:ad:d0:cb:ca:ec:a8:cb:8b:
                    ab:c9:45:c1:fa:7c:8b:02:7d:d8:34:1c:38:1c:c8:
                    21:f2:a8:01:ac:a4:3e:09:76:ab:93:8e:c8:11:b3:
                    ae:b1:d2:e0:2b:09:f4:47:46:f3:bd:0b:dd:06:00:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:A8:85:AC:4B:48:4B:C6:FA:3C:AC:7B:2D:45:B2:5F:05:0D:0C
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:b6:ec:bf:40:aa:fd:14:78:c5:a0:6b:c5:a3:a4:a3:01:
         75:bd:87:f5:73:8a:17:cf:d5:17:47:34:89:e7:89:31:a8:ef:
         e1:a7:e9:ab:22:8c:81:13:39:1e:aa:dd:2b:f6:a2:18:cb:b5:
         ab:cc:79:24:b8:8c:c6:db:44:d8:29:2e:6d:47:a6:57:a5:71:
         56:14:19:a5:ea:f1:17:3b:bc:d0:08:13:c7:eb:1a:97:7e:82:
         9a:10:aa:e8:ba:3f:ae:90:b4:a1:a2:4c:5a:24:cd:4b:ad:03:
         ca:5b:97:e4:db:19:ea:cb:8b:03:8a:86:d3:f4:49:dc:63:c9:
         d5:9c:6a:e0:1e:0b:c7:a3:b1:b3:e6:e0:78:93:b5:78:70:8e:
         4c:1b:57:34:87:37:b7:aa:bf:77:5a:dc:c3:6f:d1:7a:5e:8e:
         a9:fe:6e:66:de:34:40:5e:ab:b3:43:43:60:8c:cc:3a:06:97:
         35:5a:c9:21:94:67:a4:c7:30:b0:04:3f:d4:27:b0:7f:02:ea:
         ef:7c:c9:10:da:ef:30:97:f1:f7:aa:1b:74:c8:21:dc:d6:99:
         03:db:ad:0c:3c:4c:a3:a3:cc:ea:13:0f:ad:ae:05:e9:46:b6:
         6a:ca:85:3a:08:a0:44:6e:b4:61:33:bb:61:af:73:59:be:34:
         a7:1d:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:13:22 2026 by rpki-client