Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File:                     UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier:          KsvrBvUfTHbQ6RTQswwVvwVyKSt3kNTNb7SDpAs47PY=
Subject key identifier:   04:99:BC:E2:E7:70:7F:57:3D:3E:84:B2:2D:05:16:13:EE:B3:DD:FE
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number:          7F
Signing time:             Mon 27 Jul 2026 09:56:49 +0000
Manifest this update:     Mon 27 Jul 2026 09:56:48 +0000
Manifest next update:     Mon 03 Aug 2026 09:56:48 +0000
Files and hashes:         1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: z5jhdKm1kHa6cgBWI+PDeCaJjSuHu41mIgLaHcb7EiU=)
                          2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: YGc7kv7ZZdCc5DPV66N241SwkEHthgl6Nrvhn4oZsMs=)
                          3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: Ol7o3PHS2fJcKJjNIbEjcxAgX88BdxCRDK1NBP+aiIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Jul 27 09:56:48 2026 GMT
            Not After : Aug  3 09:56:48 2026 GMT
        Subject: CN=6a672b61-41e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:ec:9c:29:39:ef:11:1b:1a:c7:04:c4:cd:
                    91:66:5b:3a:8d:37:c3:85:f9:59:28:72:79:c5:1c:
                    52:09:d2:d9:91:8c:0b:fd:9a:b7:20:68:18:e4:f4:
                    96:14:73:cb:4d:c2:6c:ee:20:2f:56:c3:a7:17:b6:
                    27:5f:86:8a:2b:64:3c:89:12:b2:a0:35:72:72:55:
                    07:29:70:c3:0f:bc:84:32:0c:4d:de:41:e6:51:28:
                    ed:39:9e:02:db:19:4a:db:d6:63:c7:41:cc:21:d7:
                    3c:39:fe:79:1e:c6:d9:7a:d3:73:c2:91:8b:34:aa:
                    1b:4c:bd:85:3c:97:2d:1b:18:2e:41:7e:0a:58:9b:
                    6c:4c:9f:3b:99:48:95:d8:3e:85:96:ee:75:b9:52:
                    fc:2b:2a:4f:2e:92:2e:a8:e6:29:dc:2e:b4:3f:96:
                    94:3b:e5:51:51:ff:eb:ed:0a:36:b7:24:63:0f:df:
                    84:7a:1e:c7:4f:07:f7:85:94:c3:33:03:8e:58:cd:
                    63:e3:27:7a:ba:81:59:f5:ec:3e:ae:a0:31:0d:b8:
                    c2:80:73:e8:d3:7f:04:04:47:d8:b6:48:6d:7f:86:
                    c3:6d:ed:c2:42:da:c6:39:ab:a0:36:52:2a:63:55:
                    48:b2:0b:5e:9e:df:e3:55:6d:f4:1d:9a:01:cc:96:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:99:BC:E2:E7:70:7F:57:3D:3E:84:B2:2D:05:16:13:EE:B3:DD:FE
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f8:34:b0:87:6b:32:c7:92:e0:91:43:26:94:b1:63:17:36:
         fd:d5:f3:f7:1a:1e:1e:17:07:b1:6b:c5:d5:b7:b6:00:1d:5c:
         a6:fd:51:02:38:0e:ce:be:7f:a8:e2:c4:ad:ba:f5:93:fd:19:
         c4:e3:f3:e4:9f:97:5c:3c:d4:49:5b:47:0b:e9:d2:9c:6f:c3:
         64:9a:84:10:d9:9c:a5:13:02:95:35:0c:9b:85:3f:e5:18:23:
         76:56:ab:0f:96:5b:84:29:12:61:f6:97:9f:32:4d:d7:57:28:
         6c:ad:77:18:61:20:6b:a9:32:1a:cb:24:a5:9c:84:a4:96:77:
         d2:fe:fb:b1:78:dd:f3:9b:30:18:5e:61:cc:2d:6a:3f:7b:e9:
         65:4d:0c:87:7e:21:b1:b9:dd:ad:03:4b:99:5a:50:03:49:7a:
         c8:dc:48:b7:b0:37:00:cd:cf:e5:ae:87:e0:52:19:c9:bc:3f:
         f7:91:3f:fb:bc:48:1a:e9:8a:0d:66:06:22:02:fa:20:77:19:
         ef:7a:1f:2d:35:39:6c:76:dd:82:9c:93:8d:f7:e2:fc:a5:cc:
         76:e5:89:c8:d7:8b:b6:eb:98:04:b0:57:18:95:22:19:db:b2:
         f1:c1:1b:46:83:e3:95:5a:8e:92:72:0e:17:e1:a2:60:d6:97:
         57:80:33:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDMzYxMTAvBgNVBAUTKDUwQUYxQUEyOTMwMjJGNzZDRDFGNTFCQTBERDU4QTVC
ODk2NjkxNUEwHhcNMjYwNzI3MDk1NjQ4WhcNMjYwODAzMDk1NjQ4WjAYMRYwFAYD
VQQDEw02YTY3MmI2MS00MWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzbsnCk57xEbGscExM2RZls6jTfDhflZKHJ5xRxSCdLZkYwL/Zq3IGgY5PSW
FHPLTcJs7iAvVsOnF7YnX4aKK2Q8iRKyoDVyclUHKXDDD7yEMgxN3kHmUSjtOZ4C
2xlK29Zjx0HMIdc8Of55HsbZetNzwpGLNKobTL2FPJctGxguQX4KWJtsTJ87mUiV
2D6Flu51uVL8KypPLpIuqOYp3C60P5aUO+VRUf/r7Qo2tyRjD9+Eeh7HTwf3hZTD
MwOOWM1j4yd6uoFZ9ew+rqAxDbjCgHPo038EBEfYtkhtf4bDbe3CQtrGOaugNlIq
Y1VIsgtent/jVW30HZoBzJYrtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASZvOLn
cH9XPT6Esi0FFhPus93+MB8GA1UdIwQYMBaAFFCvGqKTAi92zR9Rug3ViluJZpFa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUMzNi9FRDBDODFBMEND
MUIxMUYwOUFEQThGMkNDNEY5QUUwMi9VSzhhb3BNQ0wzYk5IMUc2RGRXS1c0bG1r
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VLOGFvcE1DTDNiTkgxRzZEZFdLVzRsbWtWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUMzNi9FRDBDODFBMENDMUIxMUYwOUFEQThGMkNDNEY5QUUwMi9VSzhhb3BNQ0wz
Yk5IMUc2RGRXS1c0bG1rVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtvg0sIdrMseS4JFDJpSxYxc2/dXz9xoeHhcHsWvF1be2AB1cpv1RAjgOzr5/
qOLErbr1k/0ZxOPz5J+XXDzUSVtHC+nSnG/DZJqEENmcpRMClTUMm4U/5Rgjdlar
D5ZbhCkSYfaXnzJN11cobK13GGEga6kyGsskpZyEpJZ30v77sXjd85swGF5hzC1q
P3vpZU0Mh34hsbndrQNLmVpQA0l6yNxIt7A3AM3P5a6H4FIZybw/95E/+7xIGumK
DWYGIgL6IHcZ73ofLTU5bHbdgpyTjffi/KXMduWJyNeLtuuYBLBXGJUiGduy8cEb
RoPjlVqOknIOF+GiYNaXV4Azpw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:18 2026 by rpki-client