Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
File:                     uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json)
Hash identifier:          QUfAI4pIpoFFHbDaN/Ay+qZ9cFcc+mxi3+/zXzW0/xI=
Subject key identifier:   9E:D6:2B:22:1D:A0:DC:1A:CE:23:76:8B:EA:0B:80:E5:E4:C7:5A:CC
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       0A8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
Manifest number:          0A68
Signing time:             Tue 28 Jul 2026 20:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:38 +0000
Manifest next update:     Tue 04 Aug 2026 20:00:38 +0000
Files and hashes:         1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: GvzJOuneZy9EzprIlmhwG/RjM3hJDfuR9Pxc9CfT0f8=)
                          2: 927EC59C44C311F19F7AC93DBC833773.roa (hash: Q2pzbTsRFWgaAZue/uEXnUI4Gz6eIodBj3nr5/fu5yU=)
                          3: 3B625598744911F192D208506BA30FBC.roa (hash: gsUb4LpBKkVh7fBOvN3DnzotYhhZNhuDikxtUfc/JMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
                          rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: Jul 28 20:00:38 2026 GMT
            Not After : Aug  4 20:00:38 2026 GMT
        Subject: CN=6a690a66-6693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7f:62:62:76:ad:47:c6:ec:75:c0:04:2a:2e:
                    8b:d3:12:c9:62:65:c5:c9:f2:4e:5b:89:1d:be:f1:
                    d1:30:19:a3:38:78:ab:a5:8e:48:ed:ef:8b:1f:e9:
                    de:9e:c3:20:12:5b:ad:24:00:be:77:bb:59:50:b8:
                    fb:9d:25:8d:6b:dd:6e:fa:24:47:f5:31:e2:fc:37:
                    8a:bf:c7:4a:76:9c:91:00:a8:ea:6f:96:3c:0c:73:
                    54:7a:94:07:48:b3:76:47:24:e0:50:1e:c0:32:53:
                    5d:9d:f3:91:b9:95:c0:ab:31:9a:80:48:b6:70:45:
                    8d:00:4d:fb:6c:c2:c6:e9:dd:85:17:3f:29:ee:74:
                    03:90:45:c1:8e:ce:e4:29:cc:07:49:b9:d4:df:48:
                    1b:38:9b:cd:b1:65:7e:55:6a:e1:72:79:de:f6:5e:
                    0e:93:e9:aa:cf:6e:83:85:63:af:03:60:0b:16:93:
                    57:bf:4a:ae:0d:34:e7:ca:13:64:0d:47:5c:04:93:
                    65:95:f2:72:29:fd:6b:98:14:2e:92:19:a5:73:4c:
                    dd:be:5d:68:bb:24:ce:6a:2d:6d:b0:e7:9f:3f:14:
                    22:79:83:5d:f5:a9:6f:e6:5b:ce:c7:e6:2d:41:0c:
                    2d:0e:e4:ad:6c:65:ba:ee:3b:49:5d:3d:d3:c7:35:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:2B:22:1D:A0:DC:1A:CE:23:76:8B:EA:0B:80:E5:E4:C7:5A:CC
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:59:0c:9c:a7:f9:ae:dc:d7:34:fe:d3:fa:74:3b:c9:c2:21:
         58:6f:c2:eb:3b:bd:e6:83:49:e4:0c:e7:ed:83:c0:ad:2f:27:
         d0:8d:91:c8:30:25:8c:81:1d:a7:b6:b5:b6:e3:62:55:a8:f8:
         a8:28:b1:64:85:c5:a2:9c:36:64:e2:ed:c2:fe:57:7c:10:bd:
         d3:22:b7:0e:90:d9:9f:5a:da:9e:06:0a:ac:9a:ad:bd:c0:12:
         60:28:7a:59:cd:80:6a:71:d8:c1:bd:c4:93:c0:60:e6:06:bd:
         6a:79:4e:bf:ab:63:a3:d3:67:95:53:28:c2:f6:f0:e9:da:4f:
         6f:e9:06:98:78:5b:14:50:e5:73:4d:05:65:81:fc:dd:f2:eb:
         a6:2d:ce:ea:66:86:0b:5e:59:2a:ef:79:d7:eb:aa:a6:91:1f:
         c6:66:14:ad:89:b0:5f:7c:53:d2:35:ac:cd:a5:38:76:f2:f8:
         7b:67:7b:34:d8:29:e6:40:69:f4:ad:b8:cb:b6:9d:5c:a2:3c:
         fc:a0:42:b9:25:94:81:b1:32:b8:3b:f9:94:31:9a:2c:c7:a3:
         a7:ce:5a:4d:c9:4f:61:0c:3c:5a:2e:dc:56:f3:0d:4e:db:68:
         4a:50:1a:12:4c:14:be:7e:00:b4:41:ee:0c:b9:cc:c9:37:33:
         a0:24:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:11 2026 by rpki-client