Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File:                     UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier:          7TfXeZE+8xK6eVN8RpWG+fuViRBc7tr0mThrFBJFA1g=
Subject key identifier:   C5:0B:E0:6B:CC:CC:5A:F9:0E:CE:9D:AE:24:4C:78:70:6E:1E:38:E1
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer:       /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number:          B0
Signing time:             Mon 27 Jul 2026 09:14:50 +0000
Manifest this update:     Mon 27 Jul 2026 09:14:49 +0000
Manifest next update:     Mon 03 Aug 2026 09:14:49 +0000
Files and hashes:         1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: g+OLrWL0UuhciKzaViC0t3j6Y0h6IelyvUYUoqN2/Eg=)
                          2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: VRMri+JmyP84ggb4uS0Bz/xwX6nfPL1abCeEWonYac4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
                          rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
        Validity
            Not Before: Jul 27 09:14:49 2026 GMT
            Not After : Aug  3 09:14:49 2026 GMT
        Subject: CN=6a67218a-1aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:99:09:37:7a:b1:c3:83:aa:b5:52:61:49:
                    b6:ad:a0:99:41:a9:df:9c:7d:ae:5e:5e:54:4e:46:
                    ae:9a:17:09:b5:d3:13:f5:4a:3a:0b:d0:36:05:2c:
                    0a:4d:b5:43:16:9e:b0:bf:e3:96:9b:47:c3:3c:01:
                    df:c3:29:38:7e:15:dc:c2:45:5a:ae:d8:55:79:52:
                    87:95:7e:24:fe:37:1e:08:06:9c:f2:21:af:b6:af:
                    7d:3b:78:42:f1:f7:a0:dd:b2:e2:e8:27:ab:9f:ff:
                    9c:72:9d:a3:c1:4a:32:c8:1e:a2:a9:e2:6a:20:e0:
                    79:b3:46:e4:3b:9d:34:97:cf:d0:fd:c7:86:72:50:
                    77:cc:4c:f8:57:d9:d8:66:e1:00:b9:ff:0a:0d:7f:
                    c9:48:9f:b0:03:37:1c:21:1d:97:50:cd:55:4b:63:
                    41:bc:39:35:01:88:8d:a3:81:50:de:87:bd:7a:b5:
                    23:25:b7:2a:97:fa:c4:96:a0:5d:4a:c6:ec:88:a9:
                    16:cb:b0:00:86:df:db:e6:6b:09:9a:62:d6:c8:05:
                    cd:35:ec:22:34:57:32:4c:f6:17:c6:d0:f1:54:62:
                    22:67:1b:d4:6b:ca:95:90:1d:d4:70:10:1d:7b:78:
                    78:9e:88:e0:c0:9f:35:41:97:39:44:01:a9:fa:31:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0B:E0:6B:CC:CC:5A:F9:0E:CE:9D:AE:24:4C:78:70:6E:1E:38:E1
            X509v3 Authority Key Identifier:
                keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:91:e9:b7:f6:6a:49:1f:ef:c3:1f:7c:cf:4d:08:12:e5:b8:
         e3:0d:08:cc:2f:29:68:7e:cc:54:78:cc:4d:f6:99:4a:f6:ed:
         c4:57:c4:d5:20:16:34:4c:64:f3:eb:fb:1a:d6:45:49:9f:c2:
         48:2b:57:68:5c:e9:6b:99:3c:f8:24:fd:3e:98:75:1c:a6:cd:
         cc:01:0a:5b:bc:84:a4:55:52:30:54:41:e7:18:94:4e:cd:44:
         e4:78:b7:d0:0d:5b:e5:8e:bf:72:b7:f9:82:2e:21:72:d9:45:
         4e:fa:a8:53:58:61:17:fb:d7:6e:b5:6c:9c:2a:03:38:10:64:
         5f:10:b5:75:33:2d:84:28:17:23:4f:f2:31:4e:58:a1:fe:01:
         53:52:25:04:38:b0:ef:d5:16:d5:f9:8b:1e:93:ef:88:c9:ae:
         12:5f:4f:65:46:56:9b:9e:10:d9:90:66:45:30:a3:a5:0c:dc:
         ad:8d:d3:93:ce:3a:b5:18:7c:89:c9:e8:06:16:13:4f:16:db:
         32:e0:81:43:4c:79:1a:e8:ab:6e:b8:8e:ca:08:62:26:ba:fb:
         15:ca:7d:9f:b6:71:c7:57:48:b2:5e:28:d7:34:1e:d1:c6:be:
         5b:81:40:94:ee:6c:c6:92:e1:99:51:83:41:f5:f3:ab:34:12:
         37:07:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:31 2026 by rpki-client