Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
File:                     UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json)
Hash identifier:          S7Y0MNra9/Bp1tiloA1UOguey/Cs8y5FfBny/vezqiA=
Subject key identifier:   23:25:F7:DF:0B:C0:B8:F0:8A:BA:3B:30:EF:96:0B:AB:FA:FA:5E:4D
Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1
Certificate issuer:       /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
Certificate serial:       0CCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
Manifest number:          0CC2
Signing time:             Wed 22 Jul 2026 18:46:25 +0000
Manifest this update:     Wed 22 Jul 2026 18:46:24 +0000
Manifest next update:     Wed 29 Jul 2026 18:46:24 +0000
Files and hashes:         1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: kK1Sc2pf/L57J8ivqnQgOblc1Pdn872XtDeBe/7nfDI=)
                          2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: xp5zsEzN7zQEFnga7J3pKyc5OlYecxV9fEuTdBE9xxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl
                          rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3277 (0xccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1
        Validity
            Not Before: Jul 22 18:46:24 2026 GMT
            Not After : Jul 29 18:46:24 2026 GMT
        Subject: CN=6a611000-bd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:12:ae:f8:ea:93:cf:b8:8c:74:f6:3c:48:
                    5e:b5:e7:01:11:56:ce:4f:f8:06:dd:32:69:75:88:
                    27:ac:c6:2b:1b:d1:a5:c9:6f:1c:ac:1f:9a:13:95:
                    6e:3c:1a:e1:39:85:22:fb:37:42:9a:16:d7:96:0b:
                    bc:e5:4f:fc:05:68:d8:e8:bc:03:d2:2b:cf:e8:bf:
                    d9:a1:20:f8:6d:43:16:04:43:7c:2f:33:4b:2c:da:
                    a9:89:91:3a:60:d6:f1:6c:65:6a:78:81:e4:39:01:
                    8e:87:cf:24:9e:57:61:77:43:46:89:7d:0d:c4:02:
                    6c:f2:5a:51:8b:ae:d5:4f:a6:c0:19:9a:77:08:9b:
                    74:ba:b2:b5:f5:01:0f:29:eb:e9:15:1a:c1:74:07:
                    48:11:4d:e4:ff:d3:cc:fd:3e:ab:16:68:eb:f8:e3:
                    3a:25:69:00:94:45:04:3d:02:44:0f:b2:21:b9:9a:
                    28:3d:e9:cd:f2:a3:10:86:42:7c:6e:e5:c3:5e:ed:
                    c2:d7:dd:eb:46:69:de:68:7f:d0:d2:40:30:4d:99:
                    3f:80:7e:48:7c:e6:8c:99:cd:3d:1e:52:79:52:21:
                    e7:66:94:df:26:4a:be:93:67:e9:7b:64:96:ff:de:
                    99:44:09:b8:a0:be:e0:76:54:20:a3:8f:55:4e:94:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:25:F7:DF:0B:C0:B8:F0:8A:BA:3B:30:EF:96:0B:AB:FA:FA:5E:4D
            X509v3 Authority Key Identifier:
                keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:b8:fb:48:c2:20:17:5a:09:bd:8b:f9:1c:e3:dc:bd:98:
         da:80:07:9c:cc:c3:14:8c:ce:13:86:d2:d7:2a:14:ae:f8:0a:
         d9:d0:76:7c:7d:90:7a:df:b3:cd:dd:3c:4a:2f:a0:de:58:4e:
         2b:ab:50:cd:ab:c0:6c:fc:87:71:6b:aa:28:9c:c8:db:07:99:
         bc:77:4e:bb:03:62:71:f7:ec:df:10:06:c0:ed:04:6a:9e:eb:
         1f:6c:e5:b3:07:65:72:91:6e:a7:97:56:cb:31:5f:74:57:26:
         33:7d:dd:db:d0:83:79:45:fa:4b:a9:75:5d:9c:af:04:81:d9:
         a8:ff:08:a3:00:ca:e0:3d:1a:c9:30:90:b1:88:69:0c:a2:a5:
         ad:07:18:b0:b0:02:c7:a2:4e:de:8e:72:fd:68:41:13:eb:2b:
         15:01:fe:c7:21:31:2a:39:50:bf:2b:2b:d9:82:39:8c:69:0d:
         75:e2:d0:7d:03:ce:de:3e:52:fa:ae:06:47:99:d0:32:d4:79:
         01:83:31:68:d6:1b:72:ab:5a:60:91:ea:25:bf:fb:1d:77:e1:
         48:cd:49:94:44:95:fe:2c:b2:ee:27:f8:8a:43:f3:3f:99:29:
         f8:36:22:87:5f:1e:92:ae:17:80:02:dc:18:1c:6f:c9:6d:07:
         e8:37:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:09 2026 by rpki-client