Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File:                     ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier:          siIvmY33bFUS50ECUYwETScP+unHuAn3NB6iMj4tBhA=
Subject key identifier:   BF:CD:5C:A5:C3:61:7A:B3:03:E1:89:7A:AA:F8:32:E8:AB:B9:CE:7A
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer:       /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number:          79
Signing time:             Mon 27 Jul 2026 10:04:30 +0000
Manifest this update:     Mon 27 Jul 2026 10:04:30 +0000
Manifest next update:     Mon 03 Aug 2026 10:04:30 +0000
Files and hashes:         1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: mwKW7FB3S+LwC46Dbt10Qvu2xaUKoovjcjDJ2XSOGZs=)
                          2: B1921BE21D1C11F19ECA08BE103D8C67.roa (hash: OZLEAf2GlkPiBHJVIkEjy99lBk4lg8JxOM/56bdCYlo=)
                          3: B2897A041D1C11F19ECA08BE103D8C67.roa (hash: dDoq0NSsJBrU8GbMwoOGwGBt+swdNtQ2Co9Bt0cv7SU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
                          rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
        Validity
            Not Before: Jul 27 10:04:30 2026 GMT
            Not After : Aug  3 10:04:30 2026 GMT
        Subject: CN=6a672d2e-30ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:42:43:02:c6:b7:44:1f:1f:7a:66:46:fb:
                    ef:39:c2:69:1d:c0:1d:a4:5a:38:a9:e2:16:95:98:
                    85:1b:e4:d3:f1:c6:a4:8f:91:9b:e0:e8:29:df:4e:
                    3b:b2:72:30:62:8e:02:f6:73:c0:3c:fe:c8:61:00:
                    4d:4a:e4:e1:79:56:5c:5c:18:fc:5b:cc:34:9e:63:
                    63:c7:58:9c:f2:6d:f4:51:9d:c2:8b:73:bc:f7:65:
                    be:29:47:83:a6:87:7f:4e:c4:b3:7e:7d:95:5e:51:
                    cc:44:b1:89:78:30:f3:8d:5a:f3:4d:bd:03:db:85:
                    87:e9:ae:f6:53:93:23:d8:64:51:d4:0b:7d:2e:48:
                    68:13:09:dc:2b:f6:1f:8c:3d:11:32:23:de:a3:0e:
                    54:fe:5b:f2:0e:bf:67:b9:81:1f:a3:6b:d8:3e:be:
                    c8:8f:6f:56:61:bb:58:ba:bd:0d:20:56:97:4f:5f:
                    a8:9c:9d:49:a0:3d:73:54:45:fc:75:05:ec:13:27:
                    c8:a5:7c:19:67:23:76:fc:b1:7c:7b:91:67:25:a6:
                    27:eb:86:25:78:31:9d:02:99:a0:71:af:b1:45:d6:
                    ab:b3:a5:a9:0c:bd:8b:d9:e7:f0:d4:a3:1b:fa:05:
                    90:31:4a:26:64:7a:ed:d3:87:4e:e7:96:39:d2:fa:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CD:5C:A5:C3:61:7A:B3:03:E1:89:7A:AA:F8:32:E8:AB:B9:CE:7A
            X509v3 Authority Key Identifier:
                keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:e6:c4:4f:3b:24:23:23:9a:e3:c5:3e:79:ed:2c:8f:97:be:
         27:2f:00:7c:14:aa:5a:39:0f:0f:62:85:3a:60:7e:7e:ab:4e:
         b6:d2:0c:48:6c:7e:83:42:a2:b1:ab:87:ba:c7:87:7e:5e:9f:
         ec:c9:e4:66:26:91:c2:66:aa:32:70:bc:82:e9:3e:77:b8:20:
         05:50:ca:cb:59:9d:3b:a6:1c:1c:e2:38:14:6a:b7:e8:ee:fe:
         3a:d1:e2:d4:04:d0:33:6b:69:ee:40:53:1b:08:20:f6:b2:8a:
         62:f5:96:32:3d:d2:7e:75:5b:64:f2:24:ca:17:e2:93:cc:a4:
         01:25:61:56:a5:18:64:cc:4d:70:d6:fb:78:44:32:8a:f4:09:
         b6:0b:b9:92:97:1e:88:75:ce:5d:8b:28:a0:89:5b:1a:b5:4b:
         78:ac:23:01:fb:19:4e:21:38:fd:01:c3:de:38:71:33:90:c2:
         94:c0:3d:c7:0d:e1:2c:a7:c9:75:6b:d9:a4:6f:c0:d3:21:2e:
         28:7d:97:d0:13:d9:d9:f5:75:98:df:66:6e:a3:65:9d:ff:07:
         8e:fa:b2:8e:19:8e:08:9c:84:30:d0:3f:31:bf:05:51:6d:68:
         9b:2f:2e:30:0e:bc:4c:f6:9d:4a:e3:c6:84:03:9f:16:1a:97:
         52:d5:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:32:52 2026 by rpki-client