Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
File:                     -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json)
Hash identifier:          SXAvfpR6Dho3qwIsw5/239vxNBfg7aHbIAX4NwXmu+k=
Subject key identifier:   A0:C7:99:1B:F1:F1:20:58:CC:0D:19:BD:81:0A:55:4F:2D:8E:ED:F7
Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
Certificate issuer:       /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
Manifest number:          025A
Signing time:             Mon 27 Jul 2026 03:42:44 +0000
Manifest this update:     Mon 27 Jul 2026 03:42:43 +0000
Manifest next update:     Mon 03 Aug 2026 03:42:43 +0000
Files and hashes:         1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: pFbT5LFoWUl+AaGlGLR1Pt0Uby2CSI5hQ2YeHRU1jsA=)
                          2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: 6o/niFLDihK1K3/v4rYofrazOKed9CHeturqiQTfxB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
                          rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
        Validity
            Not Before: Jul 27 03:42:43 2026 GMT
            Not After : Aug  3 03:42:43 2026 GMT
        Subject: CN=6a66d3b4-1ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:9a:61:be:09:30:f0:24:e2:99:42:25:1e:
                    0e:76:90:83:6b:08:54:f2:2d:e6:07:bd:20:70:84:
                    c3:30:d6:30:46:2a:ae:c3:7d:a1:10:31:06:14:48:
                    44:a7:09:a5:cc:df:22:62:6f:97:bb:27:33:c1:42:
                    11:eb:3b:6f:61:ca:a3:1a:60:90:78:c7:9a:64:03:
                    80:e4:2f:ae:d0:66:77:e6:5b:40:86:cd:8e:16:6f:
                    48:6a:a4:fc:96:7d:51:f9:e3:03:b5:18:5c:f9:ed:
                    9d:34:e5:d3:99:1e:6b:eb:59:1b:07:fe:27:b7:21:
                    db:46:80:1c:02:ac:c2:90:9d:16:40:f6:70:c1:9f:
                    4f:72:5e:99:25:59:2a:36:72:0c:4e:2c:53:e3:e6:
                    2d:65:cf:e4:61:a3:88:7c:17:3c:be:90:99:62:0f:
                    7a:ec:fb:68:c6:67:47:94:ad:9a:18:cc:29:ad:ae:
                    71:18:ae:18:36:59:b1:48:f7:9b:64:07:16:16:11:
                    b6:1d:6a:f7:97:98:44:64:62:af:d0:da:f2:a3:1d:
                    29:c0:27:8d:7e:58:a8:69:87:8d:27:ef:12:92:6d:
                    f2:eb:c1:21:ab:d5:bf:33:47:7b:84:38:97:d6:b6:
                    95:82:3a:e3:f4:52:31:e2:df:b0:58:7f:79:11:87:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:99:1B:F1:F1:20:58:CC:0D:19:BD:81:0A:55:4F:2D:8E:ED:F7
            X509v3 Authority Key Identifier:
                keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:d2:f6:33:f8:c6:bf:00:79:5a:db:8e:c1:5b:18:37:78:
         3a:f4:13:0d:0a:d7:3a:9a:d9:43:ff:6f:c6:3e:d5:09:c9:95:
         26:0b:68:9b:33:35:ba:f6:63:27:a3:a7:fe:7f:f4:ff:6f:f2:
         a2:8c:fb:69:4b:a0:f8:20:ef:a2:35:22:6b:6c:98:e9:7b:ca:
         7e:fd:bb:67:e2:56:1a:a5:48:cf:a2:b0:cd:43:fe:2e:cf:53:
         41:dc:be:b8:c5:6c:82:e8:a5:49:69:43:0b:67:f8:f2:ce:92:
         c2:93:ae:dc:73:6a:18:bc:b5:52:c7:f3:1c:f5:fe:1d:10:4a:
         0a:63:73:9d:ab:11:08:90:c4:cb:e9:46:7c:fa:87:26:86:e4:
         52:0e:47:2e:cf:06:d2:78:b0:0b:5a:d6:1e:85:e9:b7:3f:6e:
         fa:67:bc:7c:8a:6d:7c:a5:d7:37:29:de:69:1c:6c:7e:09:49:
         f2:0f:87:7c:b5:98:e1:c8:28:42:e8:3b:59:70:fa:97:74:2b:
         b6:ae:06:4e:af:ef:4a:a2:c2:e3:97:5c:16:74:a8:c4:cf:86:
         10:25:ac:05:1d:ad:15:20:5a:ba:62:14:28:b5:56:a0:21:83:
         f9:51:11:59:ad:95:7d:40:18:e0:df:d8:4c:67:8e:f2:21:30:
         2f:08:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:06 2026 by rpki-client