Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
File:                     uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json)
Hash identifier:          0+v7QLo2wPux9JSRVB18W+2McI9ML+FdxaIY/jV7ldU=
Subject key identifier:   84:F1:64:13:AF:ED:80:3E:6D:64:8C:C9:1A:D2:11:57:35:88:94:67
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
Manifest number:          0197
Signing time:             Thu 23 Jul 2026 05:48:39 +0000
Manifest this update:     Thu 23 Jul 2026 05:48:39 +0000
Manifest next update:     Thu 30 Jul 2026 05:48:39 +0000
Files and hashes:         1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: hXte6cPyJhnkUWzlsi48fCnmYInr5cSpLbh+ck24Hwc=)
                          2: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: fhAGA7U+T9cLvdjqCVwOeUhhQP8Fkcx/sUcd0jEHT6k=)
                          3: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: bFWyMjM59KpMl2IdJ0Vj6yC7NnD6EqeOW3IYGS46pNA=)
                          4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: Oq52N/ekiWeIII4g9u3Cj+mGMLq4I3r8aDPxQbni/Mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Jul 23 05:48:39 2026 GMT
            Not After : Jul 30 05:48:39 2026 GMT
        Subject: CN=6a61ab37-3476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:ae:03:d8:66:47:09:36:28:62:75:63:24:
                    35:50:75:76:7e:b1:49:6d:6a:2b:e6:f9:c4:d5:22:
                    d1:1d:4d:47:83:dd:2a:84:5d:31:49:9f:39:96:17:
                    85:cd:e9:8d:3b:0d:29:76:9d:f5:b6:f7:26:66:ae:
                    ed:ea:74:4e:6c:96:2f:0b:ca:57:dd:ae:2b:3e:fb:
                    dc:f7:ec:31:87:0d:f9:44:a2:bf:12:be:11:fb:44:
                    09:b6:17:b5:32:f6:21:d9:e3:4d:c8:8e:92:1a:85:
                    f9:fd:cf:e9:8f:da:1b:c9:28:a2:7d:14:ea:3f:7e:
                    c3:bd:00:ef:43:cd:24:f9:4d:88:2c:24:28:19:44:
                    06:6f:e4:4a:b8:f5:81:d7:16:f1:fa:f8:44:b5:40:
                    30:f3:57:53:1c:94:85:bd:2e:59:75:3c:89:60:b0:
                    5a:7c:73:12:d1:9a:0b:05:c8:33:1c:e7:d1:e8:ac:
                    03:99:63:4d:3d:d1:f9:dc:c7:36:60:7d:c2:df:5d:
                    bc:b2:de:0d:64:73:73:15:f8:4c:3f:a9:7e:ee:b2:
                    ed:1d:12:28:a5:b3:b9:b8:f9:10:43:83:34:37:7e:
                    3b:1f:f2:65:d8:4e:53:45:5c:0b:65:28:1c:9b:06:
                    e9:54:72:07:69:02:5c:8a:3a:33:0c:c7:85:8c:3f:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F1:64:13:AF:ED:80:3E:6D:64:8C:C9:1A:D2:11:57:35:88:94:67
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:81:a3:b3:97:23:33:97:d3:30:ce:ad:27:7a:ca:55:aa:72:
         cb:d4:24:44:00:79:87:e1:7f:7a:35:2b:ca:d7:1a:a9:d4:dc:
         38:6e:f3:79:01:e2:32:da:91:28:3f:36:f5:f2:5e:e8:6c:c2:
         3c:73:35:95:84:b3:7a:94:62:05:ac:4d:dc:c2:85:68:7f:a2:
         45:b8:46:52:ff:6d:8b:cd:d9:dc:a0:a0:51:e1:d7:6a:99:8d:
         f8:c5:bf:6d:3b:03:73:e1:62:e6:e3:38:3a:05:48:59:84:9e:
         3e:a6:b7:6a:82:d7:85:1f:9b:60:14:18:19:9a:b4:77:4f:d2:
         d7:9e:15:e7:31:f5:0f:b4:82:ae:db:bf:0b:92:86:f7:27:d4:
         f0:25:99:4d:df:49:80:33:36:9c:b1:ef:75:f5:f7:30:95:78:
         80:93:4f:ca:f2:d1:2e:37:5b:7e:b5:5b:a4:74:83:f0:fb:cc:
         49:ec:4d:c0:6e:fe:01:ee:58:fe:6e:ff:34:f5:9e:34:da:de:
         24:bd:34:02:51:9e:73:fe:48:c3:2a:5b:be:07:80:3f:20:2a:
         15:43:27:e2:69:3c:11:c7:1c:c5:18:4f:ac:40:70:e6:df:5e:
         0c:ea:8b:28:f3:41:63:d6:b2:f5:75:bc:7c:f8:38:60:90:e5:
         5d:05:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:35 2026 by rpki-client