Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File:                     UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier:          Ts1KWXsCbL+2M3qkLMot6r72fUpW1KJ3Hl9wtKe+nJA=
Subject key identifier:   5F:E3:A4:0D:29:33:BB:5D:D4:4D:5D:02:AE:D7:67:E2:B9:34:1E:9C
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer:       /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number:          95
Signing time:             Thu 23 Jul 2026 09:23:13 +0000
Manifest this update:     Thu 23 Jul 2026 09:23:12 +0000
Manifest next update:     Thu 30 Jul 2026 09:23:12 +0000
Files and hashes:         1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: oUgK4H733RtcFKC5z+0Ie1gYAjUNNPWOTeOMCrX/wHk=)
                          2: 6AF2E1BE2DAF11F19CE413ADA5833773.roa (hash: 6znwPc6Gl9kggv35BnsusiOFNa88rVLXL3l4po9MopM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
        Validity
            Not Before: Jul 23 09:23:12 2026 GMT
            Not After : Jul 30 09:23:12 2026 GMT
        Subject: CN=6a61dd81-cf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:45:71:07:df:f1:21:21:3a:c4:78:8b:f4:
                    28:9d:49:e4:cc:68:84:d1:c9:fb:29:47:b0:4c:fc:
                    fb:f2:9b:ec:66:51:02:4e:64:a2:8f:5b:06:b9:2a:
                    bd:61:f0:82:b7:cd:48:b3:f8:90:d2:8c:3b:ff:ad:
                    e9:6d:b2:d0:3c:d7:3a:5b:ba:ca:47:df:16:72:36:
                    66:95:79:90:2f:ff:09:b0:14:4d:bc:4a:bd:98:e4:
                    d9:41:35:e3:99:b5:56:ef:5f:20:e7:f4:e9:df:e4:
                    fc:67:ee:42:1f:17:16:1e:4a:5e:42:31:21:e2:b1:
                    4c:67:0e:e8:2c:92:a4:65:3c:c0:9a:93:85:12:de:
                    7b:66:fa:ca:0d:b3:14:f3:c0:64:00:3d:78:c4:7e:
                    e5:38:61:ba:31:a1:3d:68:40:02:85:0f:10:0d:bf:
                    e3:51:be:b1:cf:a9:20:b0:fe:e7:3e:be:41:92:b6:
                    94:f0:a9:a7:a3:57:0e:d0:4f:bb:48:45:cb:37:4e:
                    4f:e9:62:d3:5b:f0:56:99:66:b4:dc:02:11:e5:7a:
                    a8:30:ad:10:0e:d3:8a:dc:8a:b9:11:a3:b2:3b:f3:
                    81:47:73:03:8e:4e:45:6c:21:62:aa:8b:9f:57:2c:
                    a1:0a:b8:56:91:77:a3:dc:d7:a7:b0:83:34:07:28:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E3:A4:0D:29:33:BB:5D:D4:4D:5D:02:AE:D7:67:E2:B9:34:1E:9C
            X509v3 Authority Key Identifier:
                keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:37:82:39:1f:31:3b:be:02:95:8f:f0:d6:e6:0e:20:c8:50:
         e4:7f:05:b8:d3:41:2f:09:b6:84:4d:a5:b5:0e:46:99:c0:26:
         c4:f3:c0:ff:9f:12:97:d5:33:f9:6c:e1:eb:7c:5b:ba:1f:60:
         44:46:39:b1:f2:54:1f:a4:cf:d8:22:2b:57:53:42:62:2f:5b:
         f5:de:fe:09:51:83:ff:27:27:c0:dd:50:d6:1d:ec:76:11:7a:
         33:cd:9c:dc:4c:5c:7c:86:50:7f:2f:8d:3c:20:13:c8:9d:3d:
         d2:ad:f7:ee:13:8d:95:9a:16:72:fd:71:53:33:c0:31:17:a9:
         88:63:14:7e:4c:e1:ec:26:db:26:e6:9e:00:56:e4:0b:c9:c1:
         5a:bd:34:a3:f6:0e:4b:80:0c:f5:48:5a:8a:b2:ec:e1:b4:80:
         1a:8d:ab:3d:5a:b6:88:7c:7b:ab:c2:a8:d9:7b:26:47:07:a1:
         ea:da:72:3d:ce:58:e9:d3:48:00:86:bc:2c:96:07:96:01:64:
         fd:98:02:a7:f0:22:79:06:7b:df:a3:2f:ed:ab:0a:49:8f:f0:
         c2:41:8f:53:2c:df:4a:25:43:8f:45:a0:4b:04:20:10:ca:1e:
         78:b8:21:b4:c8:1b:8e:79:80:f1:ff:d5:e6:de:33:38:52:f9:
         ce:68:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:23 2026 by rpki-client