Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
File:                     UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json)
Hash identifier:          hq3heXM8NbQheGYlq+xewQSGKvkiX8uhaQPaw/HAJlY=
Subject key identifier:   44:B5:D4:17:A5:A6:73:64:38:D7:2D:F1:4A:94:4B:17:11:68:8A:4F
Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD
Certificate issuer:       /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
Certificate serial:       0AC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
Manifest number:          0ABB
Signing time:             Wed 22 Jul 2026 19:51:39 +0000
Manifest this update:     Wed 22 Jul 2026 19:51:39 +0000
Manifest next update:     Wed 29 Jul 2026 19:51:39 +0000
Files and hashes:         1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: fx0jmZJwV7E8V7//W52pWUZVJgkekax9Q1cjlF7BoZc=)
                          2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: AROf6WPXXXt0EFMhXbF5273sfaITY9BYQLnTj77LVKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl
                          rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2760 (0xac8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
        Validity
            Not Before: Jul 22 19:51:39 2026 GMT
            Not After : Jul 29 19:51:39 2026 GMT
        Subject: CN=6a611f4b-aa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:4c:b3:33:bc:e8:8b:6c:90:74:5e:7b:98:
                    c8:34:ae:c0:8a:3a:00:bf:be:22:b4:51:31:99:6f:
                    32:2d:80:7a:5d:16:1e:7c:3f:ea:2c:97:54:dd:74:
                    e2:6f:dc:6a:35:45:b5:1a:0a:58:f1:e5:a3:44:fb:
                    ff:3c:53:99:53:0e:6f:c2:3d:0b:8f:93:bc:5e:4b:
                    41:0b:c2:ce:66:c8:0c:42:08:64:02:40:f9:44:a2:
                    bf:85:77:b8:7e:e0:90:c4:99:3d:a5:0a:8b:5f:73:
                    4c:cc:f2:c4:0e:37:a9:a1:63:ba:fb:69:75:93:34:
                    e3:02:3c:8f:aa:a1:65:55:a5:6b:70:f3:c9:29:48:
                    fb:74:87:9a:e2:40:47:43:d6:83:a1:75:23:e1:f0:
                    a6:68:d6:65:fe:a6:43:be:0c:41:08:a2:88:56:77:
                    7d:84:a8:23:71:5c:0f:d4:ed:f4:b4:7a:d6:6d:23:
                    8b:71:e9:19:bb:98:b6:78:c3:00:6d:0d:0c:ef:7f:
                    73:bb:9a:25:11:ba:f3:00:9a:83:21:92:59:52:50:
                    3c:bd:1e:44:f7:30:03:4b:69:3f:6d:24:77:ee:1f:
                    d8:c3:78:3e:a1:e2:87:19:0c:d3:d8:c6:60:93:ab:
                    56:e6:75:8d:ea:5d:18:3f:23:0b:e8:c8:e7:50:f2:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:D4:17:A5:A6:73:64:38:D7:2D:F1:4A:94:4B:17:11:68:8A:4F
            X509v3 Authority Key Identifier:
                keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:36:06:fd:66:20:62:f0:26:3b:53:d8:49:da:42:7c:70:
         f4:d7:ea:eb:0e:70:d2:fc:27:0e:30:76:4a:40:2a:34:22:ad:
         78:2a:9a:2d:cb:5d:24:36:47:76:26:99:9d:4d:2e:52:76:fc:
         f5:9c:a5:fb:47:c6:82:0b:a6:7c:ec:ae:84:59:cd:e0:28:64:
         42:5b:ca:57:7e:68:e5:e5:68:44:23:8d:72:b5:1a:d8:6f:4c:
         dd:13:95:54:5c:2b:25:5f:4a:a3:85:23:df:45:87:aa:d4:ff:
         b8:03:bc:eb:d6:6b:16:ef:4c:8b:ee:3c:c1:00:0e:f5:a6:f4:
         c5:1e:7c:46:26:cc:78:41:70:13:0d:e1:49:3a:cc:7e:b5:8e:
         05:6b:59:d0:8d:2c:f0:ef:e3:fe:c3:0f:39:20:28:00:97:d0:
         f0:b5:21:b8:a6:df:5e:4c:f1:20:da:be:32:eb:a7:0c:65:dc:
         1d:f2:7c:f4:ee:01:22:01:52:50:21:b7:af:ec:bc:11:b2:6f:
         fc:b5:cc:98:e9:ce:f2:5c:cd:b1:04:d6:d0:57:d0:00:42:dc:
         9d:b0:f1:6b:c0:8a:fe:01:5b:a2:0a:7e:61:fb:d8:6b:77:cb:
         a1:8a:0b:af:46:26:61:52:83:21:23:43:90:e9:da:c3:02:1a:
         b8:10:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:03 2026 by rpki-client