Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
File:                     uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json)
Hash identifier:          dU97xiV2Edm7UyqOSeXrDCLDFosOjef3yjKTG60jH0s=
Subject key identifier:   D0:B6:E9:00:A2:AD:CA:3D:D5:43:03:50:8F:44:25:E0:D2:A3:5E:02
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Certificate issuer:       /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
Manifest number:          A9
Signing time:             Mon 27 Jul 2026 09:19:04 +0000
Manifest this update:     Mon 27 Jul 2026 09:19:03 +0000
Manifest next update:     Mon 03 Aug 2026 09:19:03 +0000
Files and hashes:         1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: 0uqnWThiydGIRoJWI5KH3G+MZ8uFG4Y4lIimoxVFFXo=)
                          2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: /PEfcsPOZLF1b+5hUz53HClo8QR/oPzgzlje9Rn4Axc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
                          rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
        Validity
            Not Before: Jul 27 09:19:03 2026 GMT
            Not After : Aug  3 09:19:03 2026 GMT
        Subject: CN=6a672288-3399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:27:5b:cf:5e:d9:38:fc:90:f8:15:cb:e4:
                    40:27:b3:51:c6:4f:87:6d:24:5e:bd:b4:3d:65:c4:
                    62:ae:01:f4:c4:21:48:74:c9:3f:7b:75:18:96:4d:
                    c0:46:cf:73:bb:05:bf:fd:9a:39:08:61:4a:d7:12:
                    f4:72:e6:95:f5:d4:cf:54:49:a4:19:b8:a4:de:b8:
                    a5:0a:95:60:9d:5a:07:87:32:d8:7d:f0:b4:36:50:
                    0d:1b:58:9d:eb:d1:b7:2f:10:36:38:d9:87:95:d6:
                    dc:21:d7:8f:ee:c3:e9:65:3a:a8:34:dc:06:ba:1f:
                    bb:45:e5:08:41:fd:03:41:39:dd:5c:98:b8:97:c5:
                    79:08:e4:06:d0:42:4a:80:70:82:22:35:a6:ee:9c:
                    7b:fc:72:0d:68:11:9c:f8:aa:4c:e9:39:8e:e0:a1:
                    70:2d:c2:70:c4:df:6b:c3:b4:dd:9c:d9:93:36:a8:
                    dd:29:90:da:f3:99:d4:75:c3:90:d5:1f:99:fd:e9:
                    ee:80:3b:54:c7:fc:6f:f2:8c:3b:80:e1:31:a6:4d:
                    c1:99:c2:d5:59:93:6e:0f:87:e6:f3:a0:c0:af:da:
                    4a:64:32:60:6c:71:34:06:db:95:c7:3d:b2:e5:61:
                    9e:f3:a7:92:34:5a:43:5b:8a:81:f9:63:03:21:3c:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:E9:00:A2:AD:CA:3D:D5:43:03:50:8F:44:25:E0:D2:A3:5E:02
            X509v3 Authority Key Identifier:
                keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:87:03:b8:24:2a:36:a6:cf:46:36:58:f4:24:43:de:30:a2:
         ff:08:55:b4:3e:3e:20:d5:7a:db:9c:9e:5b:bb:a4:1e:7a:96:
         88:87:95:60:8c:a2:af:89:c3:95:15:ae:ca:bd:a8:b7:13:70:
         89:ce:3a:f2:08:fd:b6:d3:02:bd:e1:66:eb:56:7d:89:00:c2:
         8e:9a:49:e3:1b:32:2a:2d:2c:d1:b8:e2:48:9f:3a:06:28:fa:
         64:e8:f9:d3:1e:04:d0:9c:ff:58:b7:23:38:ba:57:b3:72:d6:
         94:62:21:96:1e:ac:e7:c1:61:2f:ac:0b:db:6a:e6:b3:27:58:
         25:29:dd:a1:25:6c:04:38:bf:e5:d2:13:6c:12:bd:c0:ab:e7:
         b1:e1:78:c9:d1:eb:9b:c7:c0:f4:2d:de:6e:7b:f5:36:ef:20:
         ee:b8:f1:7f:6b:d7:3d:95:0c:5e:33:5b:6c:ca:25:fd:6a:32:
         e6:b1:8f:e7:ab:62:45:c6:de:5f:79:84:6e:31:d1:97:a8:bf:
         b8:51:df:5e:37:f0:61:5c:63:d9:16:6e:b2:82:78:d6:10:60:
         ac:70:1a:80:0e:96:14:44:76:2e:d6:51:95:92:63:27:19:6d:
         94:20:9a:1d:f0:61:04:3e:ef:45:81:f4:98:a3:2e:16:da:20:
         9b:91:cc:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY5MkExMTAvBgNVBAUTKEI4MkE5Q0Y2RjlDQzgwM0M2QTZCNzA2NjJEODA3RUM1
MUQ4MkRCREQwHhcNMjYwNzI3MDkxOTAzWhcNMjYwODAzMDkxOTAzWjAYMRYwFAYD
VQQDEw02YTY3MjI4OC0zMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwW8nW89e2Tj8kPgVy+RAJ7NRxk+HbSRevbQ9ZcRirgH0xCFIdMk/e3UYlk3A
Rs9zuwW//Zo5CGFK1xL0cuaV9dTPVEmkGbik3rilCpVgnVoHhzLYffC0NlANG1id
69G3LxA2ONmHldbcIdeP7sPpZTqoNNwGuh+7ReUIQf0DQTndXJi4l8V5COQG0EJK
gHCCIjWm7px7/HINaBGc+KpM6TmO4KFwLcJwxN9rw7TdnNmTNqjdKZDa85nUdcOQ
1R+Z/enugDtUx/xv8ow7gOExpk3BmcLVWZNuD4fm86DAr9pKZDJgbHE0BtuVxz2y
5WGe86eSNFpDW4qB+WMDITxNbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNC26QCi
rco91UMDUI9EJeDSo14CMB8GA1UdIwQYMBaAFLgqnPb5zIA8amtwZi2AfsUdgtvd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjkyQS8yNjYwMzc4Mjg2
QzkxMUYwODcyRjlEMkZDNEY5QUUwMi91Q3FjOXZuTWdEeHFhM0JtTFlCLXhSMkMy
OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VDcWM5dm5NZ0R4cWEzQm1MWUIteFIyQzI5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjkyQS8yNjYwMzc4Mjg2QzkxMUYwODcyRjlEMkZDNEY5QUUwMi91Q3FjOXZuTWdE
eHFhM0JtTFlCLXhSMkMyOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgYcDuCQqNqbPRjZY9CRD3jCi/whVtD4+INV625yeW7ukHnqWiIeVYIyir4nD
lRWuyr2otxNwic468gj9ttMCveFm61Z9iQDCjppJ4xsyKi0s0bjiSJ86Bij6ZOj5
0x4E0Jz/WLcjOLpXs3LWlGIhlh6s58FhL6wL22rmsydYJSndoSVsBDi/5dITbBK9
wKvnseF4ydHrm8fA9C3ebnv1Nu8g7rjxf2vXPZUMXjNbbMol/Woy5rGP56tiRcbe
X3mEbjHRl6i/uFHfXjfwYVxj2RZusoJ41hBgrHAagA6WFER2LtZRlZJjJxltlCCa
HfBhBD7vRYH0mKMuFtogm5HMXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:03 2026 by rpki-client