Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
File:                     uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json)
Hash identifier:          h61I8WaZhcp4WSxipXewqSQLv7I8ZWgNRqCbiUMyl5U=
Subject key identifier:   94:0B:14:D3:C0:3B:F1:59:DD:36:58:37:B8:92:1F:C4:BA:2C:68:7C
Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8
Certificate issuer:       /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
Manifest number:          040D
Signing time:             Mon 27 Jul 2026 01:25:52 +0000
Manifest this update:     Mon 27 Jul 2026 01:25:52 +0000
Manifest next update:     Mon 03 Aug 2026 01:25:52 +0000
Files and hashes:         1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: 2TLK+KudWxeCrWocc4k+6zcBTBrtx5vc29iWO0/fc6E=)
                          2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: v0duyXrCqBjTImOPXg/jRu5Eda4FNDXKiiyW1J3+wcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
        Validity
            Not Before: Jul 27 01:25:52 2026 GMT
            Not After : Aug  3 01:25:52 2026 GMT
        Subject: CN=6a66b3a0-0438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:fe:b8:73:67:c8:49:ac:b1:81:9c:53:58:
                    c0:8f:6d:f9:d7:61:fe:60:a8:57:50:46:ab:3f:16:
                    0b:de:58:bb:b6:f7:a7:d2:72:b5:6c:14:45:64:fa:
                    1a:d5:79:52:d8:a5:1d:04:85:ec:d8:ea:3e:0c:15:
                    12:62:ce:09:39:eb:3c:60:84:ad:89:b4:92:48:54:
                    f9:3f:1c:ab:9d:09:29:a9:24:d2:e2:3f:a0:81:05:
                    2b:19:9b:93:05:d9:68:dc:fd:cd:4d:0e:6d:87:10:
                    92:56:c0:1a:a7:9d:ba:bc:55:c0:b6:05:1b:d4:fc:
                    a2:f2:09:3b:9e:2e:0c:26:bc:ac:20:bd:1c:79:82:
                    1a:8f:5c:3e:60:86:c8:33:27:84:60:ce:6f:b8:95:
                    5f:38:eb:13:4a:22:7a:3b:7b:ce:be:0d:35:f3:24:
                    6e:6c:05:e9:72:18:0e:85:c5:48:38:7e:a1:a7:8b:
                    64:55:5c:83:7b:0b:71:b4:c0:31:76:3a:51:32:ab:
                    27:39:8a:3a:41:b4:6e:09:a1:32:60:d3:95:e6:de:
                    8f:79:75:fa:4e:b8:1a:f7:72:d8:10:4e:0c:c3:93:
                    cf:03:a2:c8:f3:f3:7a:c6:1d:6b:be:42:43:7a:1c:
                    c3:0b:11:db:53:ea:12:94:47:3f:93:19:26:a9:fc:
                    1b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:14:D3:C0:3B:F1:59:DD:36:58:37:B8:92:1F:C4:BA:2C:68:7C
            X509v3 Authority Key Identifier:
                keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:15:e0:07:82:70:f5:35:60:70:2b:97:a6:d2:4f:de:d5:5c:
         42:14:76:51:80:b1:dc:55:df:f2:89:50:ce:2d:34:2e:ca:92:
         a7:21:48:64:53:4b:69:fc:1f:6a:19:db:34:1e:a3:46:81:9a:
         bc:d4:29:fd:b9:c5:7c:d4:14:25:40:3d:97:9c:15:d3:c4:ab:
         94:c5:d5:84:84:3a:bb:f8:c3:ec:63:00:7f:46:03:57:47:74:
         18:01:09:83:72:0a:a5:45:e5:e6:42:b9:f9:93:e9:7b:66:63:
         64:6b:ba:13:80:8b:7b:6b:cf:78:c2:67:32:55:51:16:25:47:
         05:76:27:da:94:84:14:87:6c:84:72:b8:cb:c7:53:ed:44:55:
         40:5b:6d:1b:eb:ab:ce:95:c4:e0:7e:b7:ed:0e:bc:c0:ff:73:
         17:e2:bc:4c:1a:e6:44:74:4c:bd:c9:61:d1:36:41:ed:bf:8d:
         85:67:31:d0:08:48:b5:90:36:c5:ce:80:64:e0:b2:62:e6:12:
         3e:e6:5a:a1:bf:53:5e:dd:92:7f:c1:74:bc:1d:14:1a:7b:4c:
         5e:b2:fb:77:fd:32:64:d4:40:8a:ad:77:53:9f:71:b0:ca:cd:
         c2:98:b3:99:d1:91:72:5a:c5:dd:3a:cc:b1:d2:fa:37:1f:b7:
         be:03:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:37 2026 by rpki-client