Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
File:                     ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json)
Hash identifier:          yGxwxD0fJPpHJIq7GADSZ8q5GzKkRxRME+UEN91Lyls=
Subject key identifier:   A3:DA:E0:6C:6A:CD:70:33:86:9D:FC:C9:F0:1F:25:30:DE:A3:18:D5
Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
Certificate issuer:       /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
Manifest number:          0D17
Signing time:             Wed 22 Jul 2026 18:29:11 +0000
Manifest this update:     Wed 22 Jul 2026 18:29:10 +0000
Manifest next update:     Wed 29 Jul 2026 18:29:10 +0000
Files and hashes:         1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: 26Zmw59izN8OJhHstPIKVwwnlshd6RVcDZODdYAB4KE=)
                          2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: Ar9Bunxzx+IzrJnS3InP70mlYzYuHl3fsl1SQ+2WUx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
        Validity
            Not Before: Jul 22 18:29:10 2026 GMT
            Not After : Jul 29 18:29:10 2026 GMT
        Subject: CN=6a610bf7-2b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:05:0f:a9:2c:2f:3c:d0:71:24:0e:eb:83:
                    27:da:2e:c9:2a:50:ba:26:09:20:80:cb:8d:ea:76:
                    a7:92:24:78:e9:74:70:9c:2f:6b:4c:ed:e1:b1:ba:
                    b1:c8:7d:ac:cc:f6:49:82:7c:00:bf:4e:28:33:a7:
                    9b:b5:0a:01:85:58:0d:66:f2:29:bc:b0:44:ac:c3:
                    12:75:e0:8e:59:17:bc:33:c1:0c:a4:5c:de:79:a9:
                    9d:68:d0:1d:c7:1d:88:bc:36:5a:bb:5c:09:b3:c4:
                    5a:92:b5:1e:d7:66:7d:51:f1:37:35:6c:79:c7:24:
                    92:60:27:f3:2f:12:ec:02:38:8a:f9:0b:52:ab:20:
                    6c:b8:c4:20:bb:b4:68:ea:93:85:2c:f4:4f:92:07:
                    49:49:9e:ca:ea:af:31:07:60:db:ec:12:3d:6f:e4:
                    4e:c8:36:c5:18:eb:f0:b9:c7:3a:c7:4b:a2:34:3c:
                    6c:5a:a4:e1:0a:e3:9a:e7:94:77:79:af:ce:88:68:
                    30:27:14:d4:1d:05:9b:95:fe:77:5e:20:41:35:03:
                    da:14:00:90:8c:5c:dd:7f:c1:25:34:95:bd:3e:69:
                    e7:f1:fa:79:44:c1:62:0d:1f:73:07:ec:85:af:dc:
                    af:ad:dc:fa:4e:96:1a:e3:51:c0:09:0a:0c:0d:34:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DA:E0:6C:6A:CD:70:33:86:9D:FC:C9:F0:1F:25:30:DE:A3:18:D5
            X509v3 Authority Key Identifier:
                keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:3d:60:e1:4c:af:13:43:11:d3:60:c7:6a:d3:ec:8e:dc:
         7c:4c:ae:15:6c:08:d4:bf:54:d3:36:dd:59:84:99:be:ae:db:
         ca:ca:10:a2:d8:6a:e9:39:c3:b7:fd:f9:29:22:65:b6:32:01:
         89:d9:d5:b2:80:34:94:dd:25:c2:71:8b:e2:2d:62:64:1e:b3:
         0c:fe:95:f6:1f:02:26:8a:ff:58:54:84:1b:0b:f4:d8:2a:ed:
         0a:e0:27:c0:64:5d:c2:6d:3e:d0:a1:98:45:d7:75:f2:94:86:
         4a:f0:24:7b:0b:d5:5d:2e:12:c3:ee:cd:88:43:89:0c:ce:29:
         65:d9:96:de:c2:36:4d:c2:74:20:a2:26:ab:b8:6b:3d:9b:7f:
         9d:88:04:dc:7e:b0:70:72:bb:f7:f8:5a:29:c4:1b:da:b1:fd:
         ae:3e:88:a8:99:26:ed:cc:b0:93:ea:44:3f:16:16:2f:1d:7a:
         b1:dc:fa:a8:b4:26:fc:5f:a1:b0:80:12:16:6f:dc:70:1c:e1:
         c7:7c:0c:2a:5b:fc:58:b3:d5:db:d3:56:e0:d8:03:4e:2f:be:
         15:f7:33:2c:25:3d:ef:da:72:fa:7a:b2:45:07:22:25:ce:74:
         a9:d6:1f:6a:90:2f:37:bb:97:84:d3:a3:9b:9c:fd:2b:3a:d1:
         ce:67:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:44 2026 by rpki-client