Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
File:                     UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json)
Hash identifier:          Dn5iwZ/pticprNr3rQCeoB6kR6UOabgS8N0fZAlSizU=
Subject key identifier:   CF:9F:32:9F:C1:1E:F3:7A:82:4A:A1:CF:56:54:2E:C3:27:A4:4E:F4
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Certificate issuer:       /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
Manifest number:          DD
Signing time:             Mon 27 Jul 2026 08:55:36 +0000
Manifest this update:     Mon 27 Jul 2026 08:55:35 +0000
Manifest next update:     Mon 03 Aug 2026 08:55:35 +0000
Files and hashes:         1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: KCNxz3Ssg9VrGV0Jjm8o05NzR4O5EMKB1Aeh56+iKro=)
                          2: C577E392D0F711F0BC02385AC4F9AE02.roa (hash: u1r3Je4qZRnxg/RZHpWI2PjYiwMKESZ7cb2kwwWNTUs=)
                          3: 3B2E80F84C4C11F198B679C5B8833773.roa (hash: ygzPBbzcPNKgKBn3Takd4OFJZsQA58vlX72w9BdEaDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
        Validity
            Not Before: Jul 27 08:55:35 2026 GMT
            Not After : Aug  3 08:55:35 2026 GMT
        Subject: CN=6a671d08-ec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:e8:8e:fa:13:49:1d:c9:0b:ee:fb:96:60:
                    f3:41:07:19:85:8c:7d:a2:4b:69:83:73:a1:44:39:
                    8b:43:4a:42:f9:f2:4c:2b:8a:31:a1:f4:e7:d1:36:
                    9e:8f:2b:55:95:2d:db:17:58:64:2a:f7:bd:06:43:
                    86:8a:75:7e:40:90:18:7a:c3:7f:06:b4:73:33:be:
                    6f:af:64:13:bd:9d:17:1a:d7:86:0e:71:dc:82:c9:
                    22:2f:ef:f7:e2:dd:be:6d:30:a8:98:2a:e5:1d:56:
                    b5:ec:62:ac:fa:4d:38:c6:9f:e7:d8:3e:49:55:05:
                    12:4c:f5:0d:be:a5:8a:14:29:d9:bf:51:f6:db:fc:
                    b6:8b:ad:a5:4e:c3:c7:1f:05:51:c5:41:b5:df:27:
                    b2:8b:db:05:6c:f1:7d:62:b4:dd:fe:4a:b3:38:7e:
                    08:72:95:b4:5c:17:4a:85:5d:d5:c7:b4:51:99:24:
                    ca:61:0c:95:17:fd:b2:c8:27:19:71:3f:26:e1:22:
                    c5:d8:d9:0c:6f:d7:8a:33:4a:dd:15:55:00:07:9a:
                    d9:cc:f8:43:b7:36:e3:97:9c:ad:26:c7:38:c4:8f:
                    d7:be:23:e0:46:32:6f:11:a0:c2:dd:a7:51:d5:7b:
                    b4:e1:21:6c:dd:1f:69:98:e2:34:6e:f5:f0:ce:24:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:32:9F:C1:1E:F3:7A:82:4A:A1:CF:56:54:2E:C3:27:A4:4E:F4
            X509v3 Authority Key Identifier:
                keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:91:d0:18:f5:e2:58:c2:a7:04:40:1b:c9:ff:b5:53:89:af:
         6d:b1:67:a9:d0:6e:c9:28:2a:b7:b9:9e:c8:4c:fe:44:ae:57:
         8d:36:a9:d5:90:44:71:8e:04:fc:38:1d:0a:99:f3:5b:a6:f5:
         20:57:20:15:31:37:3e:6f:01:18:e8:a9:7a:38:29:e9:28:92:
         60:2e:97:e0:ee:72:fc:61:0f:fa:35:4b:77:02:3b:e1:df:e1:
         8e:b1:95:91:00:99:b4:da:24:66:6c:ba:3e:91:1f:61:64:62:
         05:47:09:d7:db:21:ba:c9:4a:ff:56:bb:e4:0f:57:4d:27:52:
         00:71:66:6a:ca:9b:77:96:f1:67:73:44:22:61:1a:84:86:bd:
         df:b3:97:78:64:f3:04:a8:63:ab:07:1f:fb:2e:fe:ee:81:26:
         fe:28:88:62:88:e3:58:c4:d0:22:4b:2a:d8:50:50:83:9d:a6:
         0d:8d:40:88:92:88:d7:42:94:f0:7a:12:76:ce:0d:7d:b7:59:
         05:e6:09:f0:6d:a0:d8:c8:4d:be:bf:74:72:83:f8:d3:2b:86:
         61:93:15:3f:41:8e:9a:d1:1b:99:90:42:e7:eb:fa:3f:5b:3e:
         92:0e:d4:46:27:95:c4:a5:71:2e:98:3f:61:6e:ab:38:07:81:
         fe:d8:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:33 2026 by rpki-client