Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          fO1xnfrUEFyDhFYjSdJbThGk25wnDnF4OO/fX9ibvdk=
Subject key identifier:   C8:A2:8F:DC:D0:6A:AD:68:22:77:6E:AA:39:47:F8:DD:17:63:A8:72
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          017F
Signing time:             Thu 23 Jul 2026 06:09:12 +0000
Manifest this update:     Thu 23 Jul 2026 06:09:12 +0000
Manifest next update:     Thu 30 Jul 2026 06:09:12 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: 80msW8zb6tRFmKYe7TQ7ecMoVhIOvMOWBvosDHrRkiY=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: vCcnGHDur1MCV3cbkutfaHSo5RLRMio7vL1cu8PMH74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Jul 23 06:09:12 2026 GMT
            Not After : Jul 30 06:09:12 2026 GMT
        Subject: CN=6a61b008-070d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:18:47:d4:bc:c0:1a:e1:2c:23:10:b7:30:
                    27:6c:9b:f3:c8:48:1a:d3:96:94:58:e8:ec:b0:e6:
                    46:f6:2c:d2:d6:7f:eb:07:96:99:0c:25:a1:8d:93:
                    0d:47:0f:f8:a7:03:9f:d5:5d:5f:28:eb:ca:ae:ed:
                    62:88:58:9d:72:00:fd:6c:4c:dd:a6:60:76:b8:63:
                    6f:dc:89:c8:b8:c7:d6:d7:b1:ba:93:55:7c:11:f2:
                    a4:85:c4:c3:7c:26:79:9c:cf:e9:2c:7d:82:f0:2a:
                    3c:e0:32:ca:86:3e:0d:83:60:32:39:d4:e9:ea:9c:
                    db:fc:c6:19:1f:34:e9:80:84:b2:30:08:33:9b:2c:
                    8a:40:2d:21:5e:85:28:fd:12:b0:2b:0b:f3:17:2b:
                    6e:40:ae:e3:50:9b:4e:a9:09:4d:dc:f4:d3:e3:6f:
                    8b:75:fd:c7:5d:c9:e5:46:56:c4:1a:ed:6d:01:36:
                    cd:a9:58:a8:79:e7:ca:93:e3:d4:9f:b9:80:10:24:
                    95:cc:7c:17:f4:80:26:58:6c:0b:a1:30:08:d5:ab:
                    fc:99:7c:22:09:26:6a:20:87:0b:49:5c:18:cb:bd:
                    5d:02:74:18:ce:a8:49:14:2e:8c:d5:c8:11:a6:92:
                    b0:7d:8e:a9:50:7a:51:77:1c:f6:74:7a:0b:54:c7:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:8F:DC:D0:6A:AD:68:22:77:6E:AA:39:47:F8:DD:17:63:A8:72
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:95:a2:c0:f7:12:1c:07:f7:e5:ab:5d:60:3d:bf:9f:91:39:
         ee:a8:4c:d6:b5:1b:80:79:20:81:e8:61:4e:c5:2b:1b:b5:97:
         ed:07:af:ea:f5:83:fc:18:c6:69:24:a2:d8:4c:35:ce:a7:88:
         88:d8:9e:ad:9a:e6:49:f2:66:05:a6:88:7a:ac:85:0d:a8:f2:
         d3:46:3c:20:8b:83:45:d2:f3:2f:2a:f6:07:9b:6b:16:41:84:
         c5:0f:0d:46:d1:7b:b3:58:5c:a6:4e:b7:ae:f6:d4:c9:41:b7:
         1b:ce:b2:3a:0f:a1:91:78:e0:bd:3c:7b:00:58:b5:50:3c:d9:
         ad:dc:06:d8:46:a4:45:a3:12:e8:35:f4:d6:a9:21:a2:c8:e9:
         87:7b:14:b7:5c:8f:76:3e:f4:f5:a6:0a:1f:c1:67:84:72:40:
         24:75:8a:dc:12:f0:e4:04:33:72:43:72:12:77:d0:8f:01:98:
         bf:f2:7a:38:7f:c5:21:10:a2:0d:fe:3d:76:bd:3a:47:eb:08:
         57:b3:a6:bf:4e:6c:c4:3c:bb:66:f5:d9:f5:93:a3:ce:16:e4:
         3b:49:ce:55:b7:56:96:83:ed:dd:e4:63:f6:1c:22:b0:94:5f:
         8b:f7:f8:07:19:68:79:70:85:0d:f1:60:06:6c:f9:12:42:e0:
         48:61:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:43 2026 by rpki-client