Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          MpnDXuCrFGyv8KaVBccvaX3Mj3abp2ag77Bo4Fx/IZc=
Subject key identifier:   E2:7A:18:D0:32:B2:77:09:08:76:17:81:66:47:63:BE:D2:75:40:61
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0CEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0CD9
Signing time:             Wed 22 Jul 2026 18:43:26 +0000
Manifest this update:     Wed 22 Jul 2026 18:43:25 +0000
Manifest next update:     Wed 29 Jul 2026 18:43:25 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: Kc6dJla+X+8vtiyu7Hv1u4MQuwc+SN6viscf2kl6Nws=)
                          2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=)
                          3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3307 (0xceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: Jul 22 18:43:25 2026 GMT
            Not After : Jul 29 18:43:25 2026 GMT
        Subject: CN=6a610f4d-b385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:8c:48:52:2f:56:97:5c:27:19:a4:a9:21:
                    19:f7:a7:75:9a:6f:41:06:99:f6:9e:39:23:2b:20:
                    46:21:d3:5b:3b:70:88:d0:de:17:95:70:d2:63:4d:
                    5e:95:39:a7:c5:7e:80:c6:60:45:1f:22:0d:38:94:
                    e4:e1:28:d8:26:e5:55:7f:3e:fd:44:e8:a2:22:12:
                    d8:be:8e:38:dd:fe:77:a3:91:15:76:c2:45:3a:36:
                    30:cc:cf:55:af:b8:b6:68:c1:13:cb:a8:ef:b4:ec:
                    da:f1:b9:03:f0:72:d3:97:76:17:eb:cd:f4:38:37:
                    a1:1f:0c:f5:33:c6:ea:8d:b8:ba:2d:8f:44:df:2f:
                    b5:5f:6a:b3:2e:3d:69:e7:bb:d7:03:b3:da:09:a6:
                    b6:22:2a:c4:35:93:3a:95:df:34:9b:97:e7:37:a0:
                    0f:20:16:bc:73:7d:85:ca:7a:6d:b2:68:de:ac:c9:
                    70:ca:16:87:fb:47:39:38:a4:76:d4:f0:f9:7d:ed:
                    82:61:ad:24:09:25:46:28:05:12:fd:31:74:d2:05:
                    d7:35:09:4b:a1:7b:fe:db:30:f5:8b:fa:cd:2f:79:
                    df:4e:5a:a8:3b:71:aa:10:57:58:85:06:2d:e1:ae:
                    a0:a5:fe:51:9c:1f:d0:f8:3f:41:35:d7:c6:3e:2e:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:18:D0:32:B2:77:09:08:76:17:81:66:47:63:BE:D2:75:40:61
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:a4:ed:32:5e:22:c9:37:95:83:28:f8:05:a9:2d:e6:f4:
         f8:fd:15:96:74:47:82:b7:d8:3b:71:69:bf:1c:92:25:1c:65:
         93:c2:ea:fe:14:66:6e:9f:7e:d8:6b:39:17:f8:7f:ab:e0:8f:
         55:27:5e:f8:15:f4:82:2c:3e:74:46:88:06:3e:95:00:cd:5d:
         2f:1b:09:d7:8d:0f:f2:89:76:22:56:d6:a1:1c:c7:e6:a4:4b:
         eb:6a:fd:52:76:7b:6d:83:23:0e:99:80:d1:34:7e:f8:ce:af:
         b3:da:26:e9:5b:60:15:06:b1:3b:f6:d3:49:66:5f:c1:47:21:
         7c:04:af:02:1a:dc:ef:1c:d2:f0:5d:f2:8b:26:19:60:aa:9f:
         ac:80:5f:45:19:3a:8b:4c:b6:64:00:4c:dd:f7:43:bd:c3:fb:
         f5:c8:f9:bd:2e:66:90:97:c7:41:26:c6:80:fd:c3:d4:e5:cb:
         ad:58:5e:40:62:81:0b:34:f8:2c:25:16:77:55:63:e5:7e:16:
         24:98:78:f4:d3:f2:9f:08:fb:7d:0e:e2:57:2e:12:d6:3e:d4:
         0a:8e:d4:2f:2f:81:3b:4f:78:c6:0c:79:b9:1a:d2:57:1e:cf:
         2b:ce:6d:ca:94:d4:1b:06:34:94:e9:8d:a4:56:38:5b:eb:40:
         47:61:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:43 2026 by rpki-client