Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          b/lIOp4sKFD2HlkjOajZ5iAYH8XCQG4rSmgscU0//hs=
Subject key identifier:   53:95:E6:45:D4:FD:09:7E:54:74:0E:EE:F0:73:93:DE:FA:A3:05:01
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1B2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1A4D
Signing time:             Tue 28 Jul 2026 16:29:00 +0000
Manifest this update:     Tue 28 Jul 2026 16:28:59 +0000
Manifest next update:     Tue 04 Aug 2026 16:28:59 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: ZLtESg9W4UjmNCpI2iIBiS40NwCD1oHLbDHONaKeuRk=)
                          2: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: m4cHchahu0FcuRzlm+r74ocShlfFVkLmN+v6ll48l84=)
                          3: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: YM8lkpFLkO4Bbr1IWWoMC4SWTHYqIxyd5W0ltmh5jmM=)
                          4: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: xHGcoIaGOzKJwv6w3Z8rV5SCo2Gj6ECIx8o45Fg7/Kc=)
                          5: 5F772210686E11F1A894041EA247A888.roa (hash: jeM1sInENzzOwooe0TdILcq2FZyE0Gco+KBm7E50BXU=)
                          6: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: vjNJ7t/fR8gZHZFW7rS7pSPlSs4z2F/aS/JSQ3DxuPA=)
                          7: 21730760B3A411F0B1142735C4F9AE02.roa (hash: im8eNEl51/Iajj6nEj+0v7DWapzv6w3ygAcW7Tm2EYY=)
                          8: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: /eEZUKJWpNpZ2mR8oMJuCWCGAOo81sPu7UrR35Q+2rI=)
                          9: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: Er3lL/S505EsaOt1uacROwj0JQEQVjW8R9dfPP8sfHo=)
                          10: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: wsW3aqGjxehyBgpTwS7HywIwph1+NVgxAvtD2hhF8FE=)
                          11: 3003BB4EB3A411F0B8845739C4F9AE02.roa (hash: q3+0RvyBcQSDs31h5oUAJEuBBb+krJVhu7azGw9ivnw=)
                          12: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: LOzTCKrMgLJq0MdRVFDlgehNk6Muqpflj11oEgLrLuo=)
                          13: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (hash: fJeofbejPwgoBFxccMJL6GqQ1vbTTiokcD4pCAjOPqs=)
                          14: A3A8BCC0848C11F185E8F6A483A30FBC.roa (hash: hqGlc/K4gPudZqx+R0HrayMg06oXLJ1YOFYAXKXIwhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6954 (0x1b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Jul 28 16:28:59 2026 GMT
            Not After : Aug  4 16:28:59 2026 GMT
        Subject: CN=6a68d8cc-a2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ee:17:9c:e3:b3:55:e1:4c:be:4b:b9:d4:e0:
                    cc:d0:93:b3:fa:e0:9f:71:72:54:f5:f2:1b:5e:96:
                    1d:fb:c1:7b:22:88:1e:f1:92:fb:d5:c9:47:a4:96:
                    29:5b:a1:9e:50:ec:88:a2:31:79:d8:ce:ae:31:2f:
                    4b:e9:3f:bf:97:fc:ae:d0:0e:67:66:af:e1:6f:8a:
                    d7:b3:df:ca:59:94:6f:b2:e6:8e:5e:41:9b:3c:91:
                    58:77:09:b5:3c:b9:81:02:29:a3:fb:8d:9e:77:43:
                    b1:23:61:2e:b5:f1:0a:86:49:38:3c:31:61:b6:2c:
                    c9:ae:68:e2:ef:be:9e:de:fd:2b:20:df:f7:b7:cf:
                    0a:0b:c5:a2:6a:91:24:7f:f5:bc:0d:18:8e:f4:3f:
                    7a:17:8b:61:33:88:c5:d2:c1:a9:2a:dc:bc:60:33:
                    ed:df:02:a6:4f:ee:0c:c9:5b:eb:f9:b9:15:64:c7:
                    46:76:ff:9a:b4:06:e8:16:53:8d:c8:97:a3:93:0f:
                    4c:21:c2:b8:49:18:89:aa:61:5c:b0:5e:a4:7c:87:
                    e2:f6:65:98:aa:e1:a1:2c:c2:34:95:76:34:e4:e2:
                    37:e8:ce:ba:19:f9:2d:6e:6b:9a:16:22:d1:fe:82:
                    2f:63:9f:99:1d:a8:3d:9c:f9:d2:bc:65:2a:48:3d:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:95:E6:45:D4:FD:09:7E:54:74:0E:EE:F0:73:93:DE:FA:A3:05:01
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:14:46:74:a0:c6:92:a1:5b:4d:12:94:e9:4c:47:21:ff:92:
         31:14:18:61:75:8b:87:0b:44:c4:b0:fe:ea:42:59:2a:21:85:
         5d:71:fa:7d:19:bd:fd:de:f3:ed:9a:0f:1a:ee:4b:4e:a7:ce:
         92:35:ee:7e:79:0d:ab:e9:29:70:e4:52:a7:78:af:ab:96:c8:
         3a:47:7c:cb:65:32:34:2d:7a:4c:96:51:f6:4a:60:d8:c9:df:
         b2:ec:52:2d:c1:be:e1:8c:cc:9d:af:70:f8:24:fc:6c:01:00:
         ae:99:aa:54:80:a3:72:76:59:4d:b8:4b:4c:33:d4:48:46:0e:
         84:3d:d4:d1:8a:ea:bb:fd:e5:c3:5c:60:4e:11:03:89:6f:de:
         76:0a:cb:ed:c8:db:75:12:4b:a3:0e:14:25:89:d6:0d:47:06:
         00:84:91:7f:d5:be:e9:fe:5a:39:2a:9c:a6:a0:27:bf:33:19:
         19:d6:8d:46:be:b8:e9:62:6f:3e:e2:8c:2d:38:f0:07:50:2a:
         b3:39:d5:96:15:f2:d6:26:c0:09:b8:79:6a:3e:c1:c5:72:96:
         f7:5b:43:c1:1a:e1:40:69:0c:28:1c:18:81:08:d4:9e:10:4e:
         1a:48:f0:c5:49:cc:cd:08:ff:2a:84:a7:aa:ca:cf:06:10:4a:
         c1:4f:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:00 2026 by rpki-client