Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File:                     Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier:          WZBKcclHiHyqtyaFyYnpi1CxqealT0bHYMUZLcd2ztM=
Subject key identifier:   24:B3:11:03:AD:41:2F:92:0D:E2:57:11:9A:E2:8C:29:43:FB:A8:B3
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer:       /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number:          84
Signing time:             Mon 27 Jul 2026 09:55:38 +0000
Manifest this update:     Mon 27 Jul 2026 09:55:38 +0000
Manifest next update:     Mon 03 Aug 2026 09:55:38 +0000
Files and hashes:         1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: KBOA8FowYFwwiwUNQxH4TsOXnb45W+luMCshFCEZZBo=)
                          2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
        Validity
            Not Before: Jul 27 09:55:38 2026 GMT
            Not After : Aug  3 09:55:38 2026 GMT
        Subject: CN=6a672b1a-8a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:59:0f:c9:83:ee:0c:44:37:85:05:ad:d8:
                    48:c4:30:3e:52:61:69:a8:4d:64:90:a7:46:83:1c:
                    03:5f:ea:02:22:de:9d:35:3d:8f:84:cb:a0:18:83:
                    47:ef:50:71:3e:e9:2b:92:58:68:7f:cd:77:92:d2:
                    b5:50:24:b5:6d:cf:8f:94:7c:86:6d:6b:77:eb:e4:
                    42:13:00:c4:92:cb:c3:ef:1f:8e:f5:20:ac:3d:78:
                    32:54:07:86:7e:c1:1c:2d:da:8f:e8:85:74:8d:b3:
                    0b:58:95:97:c7:e7:0d:78:5d:32:2b:5e:d7:d2:27:
                    9f:ca:8f:cc:bc:82:1f:ac:63:d4:5c:60:37:3d:8a:
                    01:38:7e:60:ca:15:df:40:be:ed:fe:69:65:34:56:
                    70:24:a9:08:e6:0c:df:36:32:d2:de:5e:4a:ae:e9:
                    b0:c4:48:eb:ac:a6:3a:b0:12:81:5e:84:88:ed:94:
                    64:29:fd:23:95:95:69:6a:8b:62:71:16:10:5e:bf:
                    e4:b0:07:7d:37:c7:86:9e:cc:97:60:fc:0e:c4:09:
                    e1:bc:21:33:60:82:cf:7b:ec:6d:de:b5:c6:24:61:
                    8e:f9:76:9d:88:92:61:d9:82:27:7b:c7:c7:21:41:
                    79:42:eb:aa:49:bf:fd:8b:3b:02:b3:41:49:e2:64:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B3:11:03:AD:41:2F:92:0D:E2:57:11:9A:E2:8C:29:43:FB:A8:B3
            X509v3 Authority Key Identifier:
                keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:10:2e:ce:1b:78:a5:bf:5b:25:12:5d:30:88:2a:b8:79:
         5f:12:41:37:f1:bf:60:5f:00:66:cb:7e:21:e9:f2:b2:47:06:
         74:9f:dc:ca:0e:1d:76:4b:dd:b3:6d:7e:3f:a2:34:15:60:12:
         85:6a:2f:df:f0:7b:ae:fb:2a:6f:a5:38:88:5b:f6:51:f8:d1:
         28:02:f7:e7:52:32:01:d2:c7:5f:ea:1f:23:6f:af:c9:74:a6:
         6b:f1:55:f9:61:d7:17:64:76:30:48:21:e9:47:5b:84:b0:f4:
         52:c6:8b:cd:b8:ad:9d:3f:8b:da:65:08:51:74:af:5b:74:81:
         b8:43:42:24:27:99:56:fb:71:8d:f0:48:dc:b1:b3:96:5a:24:
         b3:9b:e4:b6:d2:a4:03:85:cd:84:8e:19:58:83:dc:bc:56:3c:
         78:f7:a0:7a:c4:dc:4c:2f:89:17:ec:bb:ca:88:5b:43:37:ad:
         f4:9d:e1:39:e9:d6:dc:96:29:ee:fb:ef:8b:8c:40:4f:8a:36:
         44:9a:45:81:ac:f7:2b:ec:dd:41:ae:f7:50:0f:2f:8a:50:8b:
         f4:42:06:d1:c6:49:32:ae:66:c5:59:2f:45:b2:bb:a6:b8:f4:
         1a:89:f2:1f:c2:ad:39:e8:6b:bf:e1:9d:09:05:a9:b6:88:7d:
         1f:ea:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:13 2026 by rpki-client