Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
File:                     uCqc9vnMgDxqa3BmLYB-xR2C290.mft (raw, json)
Hash identifier:          5T0XCkGW4u1TZUJ2s+FbXrpRjSZP5fEQSclsnlakS50=
Subject key identifier:   D1:EF:DF:F7:C7:30:E7:34:B4:01:20:B5:EF:8D:D8:96:88:27:21:39
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Certificate issuer:       /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
Manifest number:          A7
Signing time:             Thu 23 Jul 2026 09:02:50 +0000
Manifest this update:     Thu 23 Jul 2026 09:02:50 +0000
Manifest next update:     Thu 30 Jul 2026 09:02:50 +0000
Files and hashes:         1: uCqc9vnMgDxqa3BmLYB-xR2C290.crl (hash: cuudoc1b1Ky188S0qTsLk+98aIlHMzxFZ9iWdetE1AM=)
                          2: B3DED21C86C911F0BAF28043C4F9AE02.roa (hash: /PEfcsPOZLF1b+5hUz53HClo8QR/oPzgzlje9Rn4Axc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
                          rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
        Validity
            Not Before: Jul 23 09:02:50 2026 GMT
            Not After : Jul 30 09:02:50 2026 GMT
        Subject: CN=6a61d8ba-3be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:04:25:88:81:ae:74:ed:94:78:eb:65:8f:
                    e8:d6:30:25:f9:c1:a7:89:f2:6d:76:26:b9:cb:37:
                    68:da:95:a6:88:66:db:1a:0a:73:4f:96:df:ea:ef:
                    50:64:4f:de:aa:24:cd:bd:43:5d:fe:ca:76:ca:9d:
                    fd:08:35:50:d7:17:3a:5a:9b:f7:4f:68:69:d8:d1:
                    b5:68:5c:f1:8c:0c:ca:a1:04:a1:f3:bf:ab:46:c3:
                    db:2c:2b:fb:e1:f0:0a:fc:ff:16:2a:b2:8c:3f:c1:
                    32:56:84:c4:33:97:66:1a:a8:8f:1f:1f:64:98:3a:
                    67:90:f6:f9:43:39:36:91:39:2e:28:09:71:10:86:
                    de:79:9b:f0:2b:4d:7f:ac:a3:ae:61:40:58:f6:b7:
                    f0:07:9a:55:cd:74:8c:49:37:b7:7e:bf:23:37:b3:
                    8e:5f:c5:ec:e4:a9:a4:ec:47:b1:85:4c:85:d5:5e:
                    3e:ea:ec:40:52:c4:98:9b:82:4b:25:43:78:e7:aa:
                    19:87:75:07:f6:f7:2f:83:32:5e:61:d1:91:c9:7d:
                    42:c0:9e:fa:0a:f9:29:91:ac:f1:3a:a8:42:d1:14:
                    c9:e3:b2:45:58:49:f6:0d:21:8b:fc:5a:00:58:6b:
                    38:e0:77:7f:f0:8a:4c:db:73:d9:58:3a:75:a9:f6:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EF:DF:F7:C7:30:E7:34:B4:01:20:B5:EF:8D:D8:96:88:27:21:39
            X509v3 Authority Key Identifier:
                keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:55:89:37:fe:d2:d6:d5:ed:67:7f:d8:16:ee:a2:e5:35:30:
         b2:0b:9c:f9:dc:10:f5:b5:3d:e2:d4:b8:01:e8:11:10:34:ad:
         31:f1:32:f9:3b:44:95:41:dd:26:52:58:99:2b:d4:f7:96:50:
         1d:78:85:6e:16:17:51:d8:86:a2:cf:d6:9a:6e:f3:0a:f2:ab:
         0e:51:6e:cc:a0:ee:cc:e5:c8:85:00:d1:8a:bf:8f:52:49:c8:
         f1:2c:2d:ec:77:54:74:9f:1d:31:56:9b:50:e3:35:35:7f:89:
         44:df:f3:11:9c:43:58:b9:93:1a:67:e5:6e:3c:17:1a:e2:27:
         08:c3:66:e5:ed:e0:31:09:d5:79:60:3d:8d:3d:c1:b7:05:ec:
         45:1b:1b:09:ee:af:95:a3:b1:48:df:cb:2c:2b:1b:4f:e9:34:
         a4:4a:18:d2:10:f7:b5:21:db:04:4a:24:f7:8a:44:84:2c:3c:
         cf:a9:0e:9c:71:79:23:f9:22:84:8c:cc:78:ba:cc:15:92:87:
         a0:e5:8a:16:4c:c2:72:f7:f2:c1:ce:a4:4a:63:27:d7:6d:b5:
         a2:50:f7:84:83:f6:e8:3b:90:b7:61:04:53:03:8f:bc:f6:c3:
         28:06:e2:88:55:15:94:8c:67:bf:8f:e6:6b:0a:fb:26:a5:28:
         eb:c1:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:17 2026 by rpki-client