Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File:                     _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier:          HvNOtYB86hkG55peW2V3RGwJOaaJR+1Qs+GrU3Ss7AA=
Subject key identifier:   70:19:BF:04:C7:26:B7:5F:36:57:66:2B:48:12:A2:AE:BB:64:F4:11
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer:       /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number:          87
Signing time:             Wed 29 Jul 2026 09:06:19 +0000
Manifest this update:     Wed 29 Jul 2026 09:06:18 +0000
Manifest next update:     Wed 05 Aug 2026 09:06:18 +0000
Files and hashes:         1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: 1wh6M0KldOOYFPhCGlFHW+DMTqSOw8zmwDE61DDS3Jc=)
                          2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
        Validity
            Not Before: Jul 29 09:06:18 2026 GMT
            Not After : Aug  5 09:06:18 2026 GMT
        Subject: CN=6a69c28b-7761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:2a:6c:84:18:a7:46:7a:a0:e3:37:4e:3e:
                    c6:f6:c6:a6:2a:88:5a:79:cb:85:87:93:d8:d1:9c:
                    78:53:c6:cb:2a:d5:60:cb:04:65:1e:ec:02:c5:84:
                    83:ef:bb:46:26:28:7b:91:4c:b6:b4:26:53:61:64:
                    09:41:64:1e:b8:f9:c6:80:90:e6:20:37:a4:1e:84:
                    c0:93:e9:68:76:7b:45:4f:a8:1f:99:43:d9:51:e0:
                    d7:8f:7d:b0:fe:b8:a8:53:eb:02:ca:f8:92:54:2d:
                    05:64:04:0a:f0:f9:83:1d:ef:c3:78:9e:0a:6a:c9:
                    45:56:20:f8:05:96:c4:fb:cd:20:b3:34:cb:88:5d:
                    67:2f:08:10:36:4b:ad:a5:71:29:4a:8d:35:e0:23:
                    40:be:07:85:33:86:a8:a2:16:57:8f:71:6b:80:7c:
                    29:ea:47:ad:f2:cf:88:b2:d7:89:ff:e0:20:1b:fa:
                    12:71:f1:a9:69:d6:60:1c:1d:38:4b:ad:61:2d:0b:
                    3a:68:ef:68:10:86:11:f0:89:95:a4:ac:a0:8c:bd:
                    05:81:82:a8:e9:2f:4e:9b:e0:da:2e:41:58:4e:e2:
                    6e:22:da:78:98:25:5d:43:1c:17:a0:1c:34:1d:bf:
                    40:ec:9d:b5:18:69:ba:65:6c:ae:a0:fe:2b:21:a1:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:BF:04:C7:26:B7:5F:36:57:66:2B:48:12:A2:AE:BB:64:F4:11
            X509v3 Authority Key Identifier:
                keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:6a:7a:18:97:24:af:03:b2:d3:1e:45:99:a9:2f:84:9c:
         03:a6:ff:5a:1c:d5:98:c4:86:eb:56:2c:17:99:d0:25:e8:d1:
         28:d0:58:ed:59:98:4b:be:bf:29:35:f2:da:95:04:72:26:dd:
         07:12:db:09:d6:ab:08:ea:dd:35:d7:e7:79:d4:81:92:f0:7b:
         27:e2:09:cb:0d:ea:46:27:be:e4:a5:5a:d8:b5:e6:07:df:28:
         cd:4a:32:61:5d:e0:b9:6c:18:da:b3:ec:aa:cc:73:97:74:05:
         69:45:d1:78:88:50:08:65:9f:89:87:54:2d:6a:23:61:cf:d7:
         90:0c:c0:d4:9e:6d:c2:68:2d:c7:fc:3b:c7:51:64:56:8d:5d:
         49:5d:4f:aa:03:60:dc:98:a8:c6:2c:47:be:3e:75:39:24:66:
         63:31:bf:4f:6d:5f:e9:f7:7c:ea:28:9e:82:aa:d3:30:48:78:
         93:d9:d7:56:aa:df:42:c3:3e:f8:54:e5:5d:a6:0b:fe:6d:a3:
         74:54:84:9b:07:a0:f9:c9:d9:60:8e:a6:38:ee:e0:6e:70:8f:
         b9:53:eb:87:81:86:cb:cd:1c:99:e1:3f:73:5e:2a:59:52:2c:
         a6:24:e0:1c:59:0a:fa:6b:79:3e:96:26:9f:79:11:b3:e4:b9:
         d2:08:53:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyQjUxMTAvBgNVBAUTKEZENDlBNTEzNDZBMkY3QUM4MTFCMDBBRDYyRUJFRjBF
OTRBMkExQjIwHhcNMjYwNzI5MDkwNjE4WhcNMjYwODA1MDkwNjE4WjAYMRYwFAYD
VQQDEw02YTY5YzI4Yi03NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlGAqbIQYp0Z6oOM3Tj7G9samKohaecuFh5PY0Zx4U8bLKtVgywRlHuwCxYSD
77tGJih7kUy2tCZTYWQJQWQeuPnGgJDmIDekHoTAk+lodntFT6gfmUPZUeDXj32w
/rioU+sCyviSVC0FZAQK8PmDHe/DeJ4KaslFViD4BZbE+80gszTLiF1nLwgQNkut
pXEpSo014CNAvgeFM4aoohZXj3FrgHwp6ket8s+IsteJ/+AgG/oScfGpadZgHB04
S61hLQs6aO9oEIYR8ImVpKygjL0FgYKo6S9Om+DaLkFYTuJuItp4mCVdQxwXoBw0
Hb9A7J21GGm6ZWyuoP4rIaHCcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAZvwTH
JrdfNldmK0gSoq67ZPQRMB8GA1UdIwQYMBaAFP1JpRNGovesgRsArWLr7w6UoqGy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJCNS82Njc5RDhCRUM1
QjIxMUYwODYyMjc5MkJDNEY5QUUwMi9fVW1sRTBhaTk2eUJHd0N0WXV2dkRwU2lv
YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19VbWxFMGFpOTZ5Qkd3Q3RZdXZ2RHBTaW9iSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTJCNS82Njc5RDhCRUM1QjIxMUYwODYyMjc5MkJDNEY5QUUwMi9fVW1sRTBhaTk2
eUJHd0N0WXV2dkRwU2lvYkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbHRqehiXJK8DstMeRZmpL4ScA6b/WhzVmMSG61YsF5nQJejRKNBY7VmYS76/
KTXy2pUEcibdBxLbCdarCOrdNdfnedSBkvB7J+IJyw3qRie+5KVa2LXmB98ozUoy
YV3guWwY2rPsqsxzl3QFaUXReIhQCGWfiYdULWojYc/XkAzA1J5twmgtx/w7x1Fk
Vo1dSV1PqgNg3JioxixHvj51OSRmYzG/T21f6fd86iiegqrTMEh4k9nXVqrfQsM+
+FTlXaYL/m2jdFSEmweg+cnZYI6mOO7gbnCPuVPrh4GGy80cmeE/c14qWVIspiTg
HFkK+mt5PpYmn3kRs+S50ghT9A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:32 2026 by rpki-client