Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
File:                     UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json)
Hash identifier:          Yu3QT67qEiCq7i2gwYLrm1nwLv50WoAVqcLq9mkBsyY=
Subject key identifier:   CD:C2:B3:6B:50:03:77:E2:E6:C4:6B:76:EB:55:58:CF:FF:8A:93:72
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Certificate issuer:       /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial:       092E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
Manifest number:          2146
Signing time:             Wed 22 Jul 2026 16:35:53 +0000
Manifest this update:     Wed 22 Jul 2026 16:35:52 +0000
Manifest next update:     Wed 29 Jul 2026 16:35:52 +0000
Files and hashes:         1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: gCsp+o32XTDOuIB9itpOgk586gRY9NdF/FEcNQHER7M=)
                          2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: PBLJA9vTnSqLFKqa8yTCLUG6Hs8vS1xLoBEx3PILni4=)
                          3: 172C2B96197711F0A993397AC4F9AE02.roa (hash: lb+BPDjdwrxY+mR7ffmWi7Y0mAsMf7sgTDdoH5P1Hcg=)
                          4: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: k8+d1DCJYguUEuKGeaVEQEsaVWfLEy0RXOjk8DQKTNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
        Validity
            Not Before: Jul 22 16:35:52 2026 GMT
            Not After : Jul 29 16:35:52 2026 GMT
        Subject: CN=6a60f169-28d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:94:00:d6:c3:28:a1:4f:20:59:e8:66:97:
                    3a:cb:f0:ec:00:4c:2e:51:c0:ad:8e:d9:39:0f:fd:
                    7b:a6:26:dd:65:49:6a:14:d8:69:c2:9c:19:ec:74:
                    f5:6a:00:83:db:f9:77:50:23:95:8a:b6:72:2c:58:
                    c6:18:be:b6:f9:76:03:4f:ea:43:57:45:1d:ae:aa:
                    df:99:ba:3f:67:f1:ae:4e:d8:0d:0d:e0:a8:e4:2f:
                    b8:6e:40:78:17:46:a1:d4:f0:fc:a5:52:1b:4b:09:
                    ec:48:a4:28:ab:57:e8:f8:f5:0e:36:4f:ce:98:cd:
                    45:98:31:dd:61:fc:55:c9:15:eb:c1:fe:87:9e:c9:
                    57:48:77:0b:3a:d1:3e:93:2c:90:78:02:73:82:d6:
                    24:e1:41:95:dd:47:83:aa:e3:c5:26:7e:d6:c6:72:
                    d0:2c:df:2f:ae:e0:14:34:bd:18:16:a7:4b:e4:71:
                    fb:05:a0:7c:f0:b8:f5:ba:9f:4d:70:0b:50:e9:39:
                    86:28:83:68:ea:29:d4:4d:3c:cd:f1:80:43:b7:b6:
                    4f:88:72:fb:22:0b:61:34:f7:c5:69:ae:82:c9:55:
                    be:2b:23:14:53:79:7c:24:05:78:3d:6d:7a:3b:0d:
                    d9:3a:fb:8d:55:7e:5c:5f:5b:c4:1d:91:7c:6d:a2:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:B3:6B:50:03:77:E2:E6:C4:6B:76:EB:55:58:CF:FF:8A:93:72
            X509v3 Authority Key Identifier:
                keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a9:d9:68:8d:67:35:f1:84:a3:ea:30:8e:04:70:ed:35:23:
         76:8e:d5:e6:71:1b:c3:07:80:77:4b:3e:18:59:12:f9:76:3a:
         15:ee:84:43:db:7a:7d:c1:d4:f9:42:8f:31:aa:76:fd:cd:59:
         4e:c1:00:fa:d0:96:48:20:47:ee:d5:7e:89:11:01:62:6a:80:
         a2:c3:ab:9f:61:b1:66:b2:87:8d:37:35:a9:45:f5:92:6f:bd:
         aa:a2:b6:cf:13:81:58:a2:c0:e2:c1:a3:64:7d:12:91:27:45:
         42:a8:f8:05:43:f2:f1:d3:7d:9f:fb:b6:4f:14:d7:da:81:df:
         a5:ac:a9:5a:49:85:bd:0d:06:76:86:71:06:67:86:11:15:81:
         04:5c:3d:ed:ca:58:c0:17:bd:2c:dd:3c:04:3d:bf:21:3d:0e:
         d8:53:b3:7d:a0:47:6a:61:2f:e1:1e:f6:42:46:a5:e8:30:3a:
         72:65:76:83:8d:72:11:d5:13:78:06:68:75:85:db:b9:b7:f9:
         7c:dc:98:14:c1:47:87:cb:0c:0e:ed:c5:39:b8:68:26:91:77:
         2b:10:b9:0c:09:b0:0b:8b:f8:70:d2:b2:0b:61:92:34:64:09:
         a0:81:d5:cd:0c:e6:a2:d6:ea:cd:78:d9:a0:0a:77:2f:60:f5:
         80:cc:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:06:53 2026 by rpki-client