Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
File:                     ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft (raw, json)
Hash identifier:          hxxdEOA4Ft3KiCGSi07hp73oIMgOp7GgWhxPUBcl6Jk=
Subject key identifier:   BF:A9:8C:A5:26:43:73:45:5B:90:7E:35:8B:66:27:87:57:86:D4:3F
Authority key identifier: B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8
Certificate issuer:       /CN=A91D0468/serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
Manifest number:          04
Signing time:             Mon 27 Jul 2026 11:38:45 +0000
Manifest this update:     Mon 27 Jul 2026 11:38:44 +0000
Manifest next update:     Mon 03 Aug 2026 11:38:44 +0000
Files and hashes:         1: ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl (hash: RBuBb/RxbxrQclKFdHmKCVEHM/X+/ywz+v1mnMIRVOo=)
                          2: 0A4C9B3A866411F18B4C2F8396A30FBC.roa (hash: rne+liQvMq2ppRDgVz5rqnq10rEXiHIwzpvqAK3l3Lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl
                          rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0468, serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8
        Validity
            Not Before: Jul 27 11:38:44 2026 GMT
            Not After : Aug  3 11:38:44 2026 GMT
        Subject: CN=6a674345-e892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:d4:c8:18:57:81:13:7c:10:c0:b1:25:b1:
                    6a:3c:82:3a:94:c0:39:31:68:c9:aa:64:18:2b:89:
                    4b:42:e5:b3:4a:2f:91:2c:12:3b:6d:64:55:e5:31:
                    11:14:31:35:ef:c5:16:ae:0f:b8:b1:5e:5f:7c:ed:
                    e6:c0:2d:e1:c7:23:11:71:e9:d1:95:2d:ae:7a:85:
                    93:50:44:b1:12:3c:00:05:df:f7:8b:3d:c1:84:ce:
                    bb:7a:12:68:9f:5b:85:70:91:e7:9d:fa:5f:0d:29:
                    ec:c5:c3:68:de:a5:60:35:68:01:e8:18:ed:1b:cf:
                    35:96:7c:99:42:25:84:10:ba:56:6e:9b:d3:bf:1a:
                    f0:b2:38:5d:0b:5d:61:1d:6d:38:f2:c4:ea:a2:54:
                    0f:82:89:1c:80:eb:36:d0:0d:94:96:52:d9:84:af:
                    76:d1:5f:0b:98:38:d4:50:dd:8a:90:20:57:93:a1:
                    2b:f9:8c:52:c6:6d:80:9b:fb:d8:41:56:4d:cc:7b:
                    7d:b8:74:51:9f:96:2a:a3:38:13:0c:cd:be:cb:94:
                    27:a7:5f:9a:af:e7:16:a0:c2:f0:b2:07:dd:6b:c9:
                    91:00:60:61:c7:b4:d9:38:16:d4:65:50:85:cd:33:
                    7b:bb:24:54:22:1d:ab:e1:ef:6b:f7:83:93:45:85:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A9:8C:A5:26:43:73:45:5B:90:7E:35:8B:66:27:87:57:86:D4:3F
            X509v3 Authority Key Identifier:
                keyid:B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:2d:b4:a4:11:46:50:14:c2:b8:64:43:7b:77:ef:72:d3:
         5c:0d:cd:0c:7c:e6:35:92:cf:af:44:1c:17:56:c6:7f:48:81:
         85:74:ee:3c:5a:a3:17:34:e9:f1:ce:ed:d1:ec:55:52:96:b5:
         c1:a1:f1:6e:45:2b:43:39:28:c7:49:ff:eb:5b:b8:bd:a7:1f:
         4e:ee:11:02:7f:c8:35:16:4d:e3:c8:a8:7f:45:f3:4d:19:ad:
         a2:86:f1:97:37:31:b3:47:cf:a3:a8:8b:b7:0a:22:30:f4:d0:
         61:f9:0c:46:60:94:50:a5:73:af:d8:f1:43:23:90:e0:6c:ca:
         cc:32:67:d7:da:43:3e:22:6e:78:d6:36:28:10:99:23:d4:be:
         37:88:b5:77:de:4c:55:00:7b:73:1b:79:2c:52:57:fc:aa:e0:
         74:a7:9a:18:88:8d:f6:b5:9e:ba:8f:de:d0:32:30:a3:dd:45:
         eb:f4:7e:c9:96:47:8c:c3:85:30:c1:83:81:51:5a:6d:4b:d9:
         5e:77:43:71:ee:51:f2:ad:76:cb:44:9e:0f:7b:af:ff:c9:7a:
         d2:0d:33:16:39:38:f7:d5:01:b1:79:70:4e:21:5f:45:d7:24:
         c0:a2:2c:5b:77:64:0d:49:b4:44:9b:97:82:5f:20:c6:3b:2e:
         59:97:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:46:16 2026 by rpki-client