Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File:                     uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier:          C9I5eXBq+AnqydxT/iYPnkOCgx2D4Uudrlt1M5VjmTk=
Subject key identifier:   F6:60:AA:7F:9E:94:15:AB:24:E0:84:32:0D:D5:E6:0E:FA:23:7C:85
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer:       /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number:          01DB
Signing time:             Wed 29 Jul 2026 04:46:43 +0000
Manifest this update:     Wed 29 Jul 2026 04:46:43 +0000
Manifest next update:     Wed 05 Aug 2026 04:46:43 +0000
Files and hashes:         1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: NhjinpoWvTjMlsgXK+/YPysyejmfSgcazgJ3FELILN4=)
                          2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: 0ESXESaf1Km8hU3mbKXTS2edVIPzUkaWWbUdYQNfwzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
        Validity
            Not Before: Jul 29 04:46:43 2026 GMT
            Not After : Aug  5 04:46:43 2026 GMT
        Subject: CN=6a6985b3-52e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:42:bf:6e:da:1b:88:b9:cf:30:45:e9:46:
                    09:20:7c:74:02:fc:bf:d5:fc:fb:8f:b6:b4:4b:08:
                    7f:fc:00:8b:0f:c8:a7:ae:17:50:d2:b7:8c:f5:48:
                    03:82:dc:46:75:17:ea:73:e3:31:fc:35:01:10:8e:
                    06:9b:97:3b:53:92:ec:2f:00:a2:3b:94:82:96:43:
                    e1:86:7c:e9:46:87:a0:fb:18:17:41:58:42:d0:c7:
                    85:ed:61:1f:bc:db:a8:03:78:1b:50:8c:66:62:b1:
                    10:36:d6:17:8c:b9:9d:a1:23:d4:58:bd:fb:bf:f6:
                    24:01:76:c5:48:01:c3:5e:32:f6:95:54:da:c8:40:
                    7d:01:14:94:3e:5b:49:8f:5f:3d:ae:7b:d1:21:75:
                    d2:22:19:cc:28:8c:d8:28:fc:1c:9a:35:84:51:06:
                    a1:fb:c8:17:97:17:21:3a:43:03:16:e2:6e:4a:b3:
                    fd:90:47:2d:73:7c:57:cf:d5:de:d9:ad:5e:27:51:
                    89:94:9f:e6:d3:1b:9b:73:d5:61:68:b7:f9:c6:25:
                    53:50:90:ab:4d:43:2f:8c:d5:51:a8:c3:db:51:16:
                    f0:9f:d1:cb:ee:7f:d9:30:37:4b:3b:f7:80:e3:4e:
                    57:bf:8b:64:5a:89:32:26:0a:29:3f:f8:69:fa:db:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:AA:7F:9E:94:15:AB:24:E0:84:32:0D:D5:E6:0E:FA:23:7C:85
            X509v3 Authority Key Identifier:
                keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:57:1d:09:24:37:94:83:87:ec:a7:86:26:6e:44:a2:be:bf:
         58:b7:9b:51:4d:a9:75:ba:05:67:8c:61:dd:62:46:38:cc:f7:
         ed:81:ff:2d:a4:ad:14:ac:e5:c6:9e:8d:ce:35:5b:e7:9d:8c:
         e6:bd:cc:ca:7a:a5:e0:6e:df:6d:33:0d:72:11:f1:86:b7:37:
         84:16:d6:47:a3:c3:5b:60:cb:47:41:77:55:88:bc:4d:cc:e4:
         81:d9:00:a7:f9:1b:cb:e4:5c:7e:c9:40:7c:50:24:7d:ff:68:
         21:fd:fa:d2:21:8f:34:cd:b6:74:cf:88:68:6b:a3:d8:2f:c2:
         e8:c9:43:64:1b:14:2e:b9:e0:d8:dc:d3:2a:fc:d1:0e:30:82:
         33:ff:83:7f:c5:fc:f0:b9:81:ac:0b:18:3d:46:bc:d2:1f:1c:
         1f:58:6c:d9:59:17:4a:ee:84:40:06:c2:64:a3:d4:ac:45:32:
         4c:ad:1e:99:da:62:6d:9f:53:96:1e:24:60:fa:0d:0b:86:39:
         f6:98:81:8b:6f:bb:7c:d5:9b:31:b5:40:91:6e:39:9d:c9:84:
         e0:ad:dd:21:f2:7e:f0:07:c4:f8:8d:7a:49:1f:e8:64:0c:17:
         63:10:c0:a5:a7:10:e0:08:33:e5:d2:0c:80:76:88:76:42:f6:
         59:68:05:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND
NEI0Qzg5NjgwHhcNMjYwNzI5MDQ0NjQzWhcNMjYwODA1MDQ0NjQzWjAYMRYwFAYD
VQQDEw02YTY5ODViMy01MmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvNCv27aG4i5zzBF6UYJIHx0Avy/1fz7j7a0Swh//ACLD8inrhdQ0reM9UgD
gtxGdRfqc+Mx/DUBEI4Gm5c7U5LsLwCiO5SClkPhhnzpRoeg+xgXQVhC0MeF7WEf
vNuoA3gbUIxmYrEQNtYXjLmdoSPUWL37v/YkAXbFSAHDXjL2lVTayEB9ARSUPltJ
j189rnvRIXXSIhnMKIzYKPwcmjWEUQah+8gXlxchOkMDFuJuSrP9kEctc3xXz9Xe
2a1eJ1GJlJ/m0xubc9VhaLf5xiVTUJCrTUMvjNVRqMPbURbwn9HL7n/ZMDdLO/eA
405Xv4tkWokyJgopP/hp+ttbFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZgqn+e
lBWrJOCEMg3V5g76I3yFMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa
LWxZSUl3X3FlaVBFdE1pV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAclcdCSQ3lIOH7KeGJm5Eor6/WLebUU2pdboFZ4xh3WJGOMz37YH/LaStFKzl
xp6NzjVb552M5r3Mynql4G7fbTMNchHxhrc3hBbWR6PDW2DLR0F3VYi8TczkgdkA
p/kby+RcfslAfFAkff9oIf360iGPNM22dM+IaGuj2C/C6MlDZBsULrng2NzTKvzR
DjCCM/+Df8X88LmBrAsYPUa80h8cH1hs2VkXSu6EQAbCZKPUrEUyTK0emdpibZ9T
lh4kYPoNC4Y59piBi2+7fNWbMbVAkW45ncmE4K3dIfJ+8AfE+I16SR/oZAwXYxDA
pacQ4Agz5dIMgHaIdkL2WWgFVw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:29:04 2026 by rpki-client