Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File:                     UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier:          BJDDR7fyxVERZnDUXjOYEWvE9eNbn9D2C+ksGImbIRI=
Subject key identifier:   07:0E:07:79:A4:A2:54:52:D6:B5:43:F1:EB:57:D7:79:7D:78:EE:D1
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number:          0188
Signing time:             Thu 23 Jul 2026 05:57:27 +0000
Manifest this update:     Thu 23 Jul 2026 05:57:26 +0000
Manifest next update:     Thu 30 Jul 2026 05:57:26 +0000
Files and hashes:         1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: ox72RYxyBKKeAht5/igCeWKCidMVGfKu+LSGmli+Wa0=)
                          2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: nfE8MGXIYFcpCfytRVSLiKAP+7q0/XusaPqqsGF/aVU=)
                          3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: GEFeKy8aH4tDYzifQsBwM7koyveNQSqrhuOkOUK426I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Jul 23 05:57:26 2026 GMT
            Not After : Jul 30 05:57:26 2026 GMT
        Subject: CN=6a61ad46-76be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:4b:27:6f:9b:d8:90:56:87:73:de:bf:03:
                    46:af:5a:21:6a:22:c1:c5:6d:31:5b:f2:b5:9d:05:
                    46:d1:75:ee:ab:cc:6f:24:6f:70:fd:c1:3d:91:5c:
                    73:16:45:8f:03:b9:e2:a9:06:a1:7c:ed:14:36:37:
                    60:62:88:32:6c:bd:a4:cf:f8:c5:b5:a2:b8:8b:34:
                    ba:02:a6:fe:3d:aa:f3:3f:3e:ab:16:14:4e:10:c5:
                    85:eb:c2:60:89:ad:8a:bc:ed:42:64:9f:01:d8:9b:
                    ad:ca:79:35:f5:93:c6:f4:db:20:ae:c4:40:6c:57:
                    9a:a4:f4:1f:37:ab:06:83:d5:24:91:d5:b2:47:c6:
                    dc:82:0e:0d:9a:5d:5a:3b:c0:48:20:5c:be:a1:09:
                    83:f2:b0:55:81:0f:b0:46:9d:ee:2d:0b:6b:90:73:
                    cc:35:2d:ac:ce:34:6c:95:07:f1:aa:73:3a:f7:91:
                    33:50:6a:8a:28:b3:34:e7:60:5d:c3:c4:18:ff:46:
                    af:b5:4c:40:1c:a1:d9:c3:30:57:cd:c0:38:3c:37:
                    f9:b9:68:40:1a:3d:bf:94:ca:71:17:97:22:78:5d:
                    f1:44:6e:bf:94:81:75:fa:37:86:ce:f1:d5:0a:90:
                    92:26:14:9b:4f:3b:a2:f6:7f:f7:3c:c4:0f:47:be:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0E:07:79:A4:A2:54:52:D6:B5:43:F1:EB:57:D7:79:7D:78:EE:D1
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:ab:8f:84:b4:71:65:90:03:70:23:c6:00:a9:13:3c:04:
         aa:9c:43:fe:c4:d1:1e:de:bf:a2:34:d3:5a:46:b0:4b:3c:06:
         60:7c:25:19:96:2b:30:35:96:72:6d:c9:f6:16:ac:2f:14:89:
         16:10:56:f9:2a:8c:67:af:61:24:f3:ee:ff:a9:3d:3b:af:ea:
         f3:26:bf:b2:17:cf:47:ee:e2:ea:77:c6:2e:a7:f6:dc:a4:db:
         a2:2a:63:1f:3f:a7:10:20:25:78:a4:27:82:c8:8a:ce:da:e6:
         00:93:a4:8b:27:59:94:c4:cc:2b:77:8c:9a:29:d3:f6:75:f0:
         d3:d3:7f:ae:47:be:6c:4e:27:c7:3e:12:8a:28:98:68:54:c2:
         37:6e:3a:f8:73:92:8c:d5:c1:38:39:04:36:a9:78:ce:39:c5:
         7d:5a:4e:eb:d0:d1:41:53:ec:56:04:23:4e:9d:03:0b:09:04:
         db:be:b5:41:61:4b:f3:e4:55:99:d5:e4:cc:b9:d7:53:4a:ab:
         11:51:b6:10:a7:77:6a:c3:f8:b5:d3:f1:ee:f3:51:aa:31:5c:
         d6:71:53:d4:9d:1d:a3:52:b9:04:a0:54:bd:8c:e3:81:53:9c:
         31:73:42:f5:29:c4:46:95:4d:6e:85:59:e1:83:cb:0c:23:ce:
         aa:7b:b1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:55 2026 by rpki-client