Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          vA8ORPMeO2D45UQ+n24GL/3v01c/03XOcFeX6KaUlEQ=
Subject key identifier:   CA:47:F6:77:D9:A1:B5:7E:2F:02:BD:CA:4C:C8:F2:0F:16:03:BB:C3
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0CDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0CC2
Signing time:             Tue 28 Jul 2026 18:43:43 +0000
Manifest this update:     Tue 28 Jul 2026 18:43:43 +0000
Manifest next update:     Tue 04 Aug 2026 18:43:43 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: kN1QafaUNyq9hwpGjKHExuufqiIMV/Fjsua82sLxpwQ=)
                          2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Jul 28 18:43:43 2026 GMT
            Not After : Aug  4 18:43:43 2026 GMT
        Subject: CN=6a68f85f-fcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:b2:00:6d:33:58:5e:db:7e:d4:80:93:dc:
                    f4:db:22:d2:86:0b:d8:8c:8e:c8:34:d6:a3:5d:c5:
                    78:e2:49:eb:9d:c2:15:02:b9:7b:3b:6e:ef:9c:c0:
                    78:27:cb:a2:e0:34:03:b4:c5:0b:2a:c5:ac:24:d3:
                    47:62:a5:06:06:f8:6d:44:7a:a0:20:ec:6c:64:d4:
                    7b:9d:b7:1b:d3:e3:24:10:73:9f:ea:b7:0c:0b:cc:
                    ec:37:bb:21:98:fa:6e:b1:b9:8a:3b:64:23:b0:b2:
                    45:b2:e8:6b:23:d9:34:10:49:36:fe:56:3b:2d:ff:
                    8c:fe:64:83:c7:b8:d7:07:ae:40:8c:f1:fa:a2:f4:
                    c7:2a:7f:9d:f0:38:99:27:dd:0e:8b:7b:7c:85:e8:
                    af:5b:c4:43:7e:76:29:21:b7:6c:b0:f4:ed:2c:d6:
                    2a:f1:ae:5c:0b:e5:0d:f5:32:bf:71:bf:9e:d7:1b:
                    6f:ca:09:4d:d2:18:cd:1c:80:88:e1:d5:15:1d:29:
                    7e:6f:04:99:96:5d:39:71:fe:84:35:59:2c:87:5f:
                    92:c5:6b:47:da:90:30:7b:e0:9a:35:7d:6c:01:22:
                    b1:66:6f:bb:ce:dc:3b:97:4f:0f:33:1a:30:a5:18:
                    44:55:fa:67:28:da:f0:24:cc:24:7b:15:00:43:61:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:F6:77:D9:A1:B5:7E:2F:02:BD:CA:4C:C8:F2:0F:16:03:BB:C3
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:f0:3b:be:3a:82:8e:62:93:97:39:28:49:f7:a4:cc:60:
         43:e7:65:8d:d2:e2:df:ec:f5:9c:90:80:68:79:f1:c4:0b:ab:
         d2:d2:f2:24:f0:c7:21:ab:14:04:92:7e:4b:ae:53:e8:f2:bc:
         69:a1:0f:dc:1e:e1:83:e0:93:09:68:81:d1:d1:7e:fb:7e:59:
         3d:04:4d:c5:9c:b6:15:80:80:c7:89:65:7e:3e:5d:d8:41:a6:
         36:e4:5d:e3:c2:00:fb:ff:c3:b1:1c:d7:c2:4f:6e:27:7c:c1:
         02:ef:6a:93:51:a2:f0:ca:68:fa:e3:5b:ee:96:e8:d3:c4:6c:
         7e:e3:ad:44:39:d9:19:de:3e:ec:4d:9b:b3:78:1c:90:6f:cc:
         57:22:0e:5b:e8:45:85:61:bf:e7:5b:3f:95:d5:f3:10:97:a5:
         05:d4:d8:ec:1f:cd:7d:ea:b7:54:d5:aa:40:f2:6a:8d:5a:e8:
         69:25:5f:ea:2d:eb:84:05:8c:98:05:91:a0:d1:51:5e:c5:55:
         4b:4c:15:d6:ff:61:c5:a1:ea:8b:1c:5a:e3:4a:e5:ee:c6:77:
         29:5c:15:dd:5a:92:98:62:0b:18:17:a8:4f:9c:af:d6:c1:5b:
         30:65:a2:5a:0e:b0:81:ed:4f:ee:a2:1c:0e:bf:17:d0:9f:33:
         4c:3f:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:41 2026 by rpki-client