Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
File:                     umDC9ghXfO5rvRSTcht6rsoodis.mft (raw, json)
Hash identifier:          mxhCqMoj7URr4zI/r/+CEE9BHkV90j2l0Wlt/dz/hWc=
Subject key identifier:   86:EF:28:59:EF:F0:9E:61:BA:45:29:A0:BC:7B:66:73:20:65:DB:27
Authority key identifier: BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B
Certificate issuer:       /CN=A91326FF/serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
Manifest number:          016B
Signing time:             Mon 27 Jul 2026 06:42:08 +0000
Manifest this update:     Mon 27 Jul 2026 06:42:08 +0000
Manifest next update:     Mon 03 Aug 2026 06:42:08 +0000
Files and hashes:         1: umDC9ghXfO5rvRSTcht6rsoodis.crl (hash: /9KneXACVFRSDd/X5jRC6nL+uQJHTwhzNqGA9rUqxrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl
                          rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326FF, serialNumber=BA60C2F608577CEE6BBD1493721B7AAECA28762B
        Validity
            Not Before: Jul 27 06:42:08 2026 GMT
            Not After : Aug  3 06:42:08 2026 GMT
        Subject: CN=6a66fdc0-97c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:50:08:51:8e:bf:42:60:36:58:d0:86:e7:
                    f1:5c:f5:26:41:01:ac:4e:de:35:82:9a:4f:0c:86:
                    8a:08:88:c4:99:bf:d1:f4:e2:64:fd:1f:94:b2:dc:
                    6a:09:c8:b0:26:ec:25:a1:e5:20:75:7e:f7:40:16:
                    a6:7d:24:85:dd:ee:f2:a9:bc:f9:3b:41:1c:9e:f9:
                    42:8e:3d:c1:f6:bd:11:53:6a:72:b5:d0:d2:1d:99:
                    e4:5a:cd:99:75:9a:5b:f5:89:1b:37:78:f0:c7:f3:
                    66:90:f9:c6:88:80:5e:56:9b:dd:9f:4c:1d:c5:43:
                    60:1e:4f:b7:ce:79:02:0f:d0:43:56:00:28:3f:25:
                    3c:c9:66:2a:09:e5:59:61:01:a6:93:3b:ab:4d:42:
                    e0:a8:ab:14:96:d8:49:7d:07:b9:09:1b:16:6c:e2:
                    cd:d8:2c:df:86:1f:bb:cd:6b:45:ba:14:26:bd:14:
                    ed:b0:73:d3:b0:e9:0c:2f:5f:32:e7:7f:d2:04:d2:
                    2f:b0:f0:a4:2b:0d:a8:57:fa:a2:9a:61:59:42:ec:
                    7b:43:db:ed:31:38:13:1d:27:59:b2:46:e7:c4:7f:
                    28:62:6e:5b:98:4d:64:18:a7:5f:82:22:9e:45:7e:
                    51:ed:a4:49:d3:9f:70:28:3e:51:c5:43:27:cc:2b:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:28:59:EF:F0:9E:61:BA:45:29:A0:BC:7B:66:73:20:65:DB:27
            X509v3 Authority Key Identifier:
                keyid:BA:60:C2:F6:08:57:7C:EE:6B:BD:14:93:72:1B:7A:AE:CA:28:76:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umDC9ghXfO5rvRSTcht6rsoodis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/9CF04D3C5F8E11EFB23E7945C4F9AE02/umDC9ghXfO5rvRSTcht6rsoodis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:c8:9c:c3:da:79:5b:26:10:22:6c:3e:28:8a:40:8a:08:
         f1:dc:d1:2e:26:5e:34:bc:da:8f:99:fd:75:77:2b:c8:92:df:
         8f:04:44:60:17:c0:a6:02:01:2c:21:aa:68:2f:7c:24:f5:be:
         28:49:8d:a3:a1:5d:ee:94:07:e0:90:f4:bd:ef:19:1d:54:26:
         28:dd:f8:f0:d2:18:d8:a4:85:be:fb:65:c3:58:b0:c0:e4:73:
         8d:0b:9a:e5:50:9c:7b:26:2c:2b:98:3c:57:00:ce:32:e0:de:
         93:e9:0d:e8:60:1a:13:22:6c:7d:6f:35:67:a6:cd:05:8e:e7:
         f7:12:32:d4:96:a0:74:8b:33:74:8b:7a:e1:b0:d1:d5:41:96:
         c4:e2:5d:9a:29:cf:50:6f:f5:e3:eb:23:df:55:db:b1:f4:9b:
         13:05:70:8c:87:2b:68:ad:8b:f2:73:e3:ff:d5:10:02:b1:26:
         a9:7c:65:52:64:da:d7:94:0a:4f:85:28:e6:69:a2:58:f5:f3:
         f1:fe:ed:d8:15:69:96:01:8f:bd:12:12:96:3b:4d:3b:09:a6:
         58:fb:1e:46:49:59:1c:5d:f9:91:49:1f:70:6b:32:9a:fd:2a:
         b9:94:22:ff:65:62:08:31:08:18:aa:8f:76:75:00:fb:87:f4:
         1e:4e:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:30 2026 by rpki-client