Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File:                     _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier:          ozH/ydKfLywYLi/d9rDUoUpnRQBIFDZiuypBHpsKw30=
Subject key identifier:   02:D6:C8:6A:98:B6:7B:47:39:51:7B:E6:EB:CF:E2:66:BC:D0:46:A4
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer:       /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial:       08AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number:          089A
Signing time:             Sun 26 Jul 2026 21:17:20 +0000
Manifest this update:     Sun 26 Jul 2026 21:17:20 +0000
Manifest next update:     Sun 02 Aug 2026 21:17:20 +0000
Files and hashes:         1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: yTf+6KYTwzUY0Z7cKzsoxvhjEzlrNmcWK/P36hYntkE=)
                          2: 3FA536CA38EE11F1A0707106A9833773.roa (hash: mUiOI8EcFxg0okwr3CRT18uhCpuSgMbB1bMOukLtLrw=)
                          3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: pKtga/er1/h2JIAsQEMOIlundhuuAOO6gPVgXaRRQH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
                          rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
        Validity
            Not Before: Jul 26 21:17:20 2026 GMT
            Not After : Aug  2 21:17:20 2026 GMT
        Subject: CN=6a667960-c6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:3a:c9:b4:d9:3e:ed:89:10:b2:16:5e:4e:
                    58:2f:43:ea:e3:d0:14:7f:1b:38:1f:a3:d7:5f:3a:
                    d5:14:42:76:43:eb:96:49:0c:95:00:f1:ca:c9:48:
                    90:df:43:39:a4:4c:37:ea:37:db:76:22:7e:83:8f:
                    25:ba:2c:cb:fa:56:9f:4c:d2:29:fe:4d:e9:d1:17:
                    8b:c2:29:bd:43:42:45:57:9b:33:0c:f7:6f:42:4e:
                    da:84:bc:d5:12:0e:39:79:b1:ad:ca:3f:39:c8:0e:
                    3a:e5:66:16:8e:3b:72:de:87:65:02:1c:fd:36:3d:
                    10:d8:b9:5a:2e:ae:f2:74:eb:a4:60:45:d3:da:4b:
                    28:fa:40:39:7f:17:9c:53:14:08:7b:72:57:ed:7a:
                    f6:37:88:e3:cb:ca:ec:ec:76:25:45:ab:58:75:f7:
                    ae:51:65:a2:e4:ce:3e:8c:79:ef:9d:6c:85:c2:7f:
                    b4:41:d0:39:a2:14:0f:3e:af:1c:ad:fb:55:48:76:
                    32:3a:c9:2f:ca:3b:96:d9:9d:ec:84:d9:52:03:d7:
                    9c:82:95:0e:35:cf:f2:67:12:8c:cb:f8:22:7a:a0:
                    d0:0b:2d:fd:f2:be:5f:f3:b4:15:50:e3:a0:23:78:
                    18:98:aa:8a:6a:c8:31:6a:ac:1f:1d:8f:cd:f5:16:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D6:C8:6A:98:B6:7B:47:39:51:7B:E6:EB:CF:E2:66:BC:D0:46:A4
            X509v3 Authority Key Identifier:
                keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:bf:4c:6e:1d:c3:5d:2f:96:df:10:56:79:e2:01:68:b6:
         26:a1:e1:5d:b3:6c:c3:cf:dc:3f:77:40:26:bf:1a:13:2c:44:
         62:7c:d0:76:ed:ba:03:95:80:f7:27:d2:27:39:83:c3:59:a7:
         2a:d8:0a:21:57:df:d8:b1:99:ba:ab:15:df:b0:13:2d:26:30:
         47:dd:59:2d:36:2b:e0:4f:6e:2b:eb:55:c9:d5:de:21:40:75:
         78:d1:f1:cf:b8:03:5c:17:7b:ca:b2:f0:c4:b8:2b:37:bd:f7:
         3e:31:7c:ea:33:5c:85:55:02:d5:a9:a9:f2:4a:28:84:ef:73:
         70:78:be:46:99:3f:34:02:ef:35:97:46:2d:b6:fb:d4:be:29:
         4d:46:ea:e9:73:e5:f8:2f:10:29:a9:21:04:36:16:a3:b1:d9:
         ca:4e:ac:0e:07:89:16:d7:9f:26:09:65:39:51:9c:50:e8:18:
         d4:4d:21:35:e0:56:02:45:da:c3:e6:8f:57:c1:24:a2:aa:01:
         04:dd:d7:4c:04:7d:23:ff:3c:d9:ea:b1:e6:2c:ad:59:e9:3d:
         a8:79:d9:71:69:b2:f7:4e:57:29:e4:ab:ab:f7:10:c0:1d:8e:
         41:9d:5a:75:26:89:a5:35:39:9e:c5:f0:d5:b2:38:74:73:f2:
         70:79:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:00 2026 by rpki-client