Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
File:                     -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json)
Hash identifier:          06OqPUrD8c6+Xf5DCxB0yP++JK/ifmfms04SAtQyq2A=
Subject key identifier:   CE:D7:CB:56:1A:4A:92:89:6E:E8:F8:FF:BB:CC:E6:ED:6A:E0:DB:A0
Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
Certificate issuer:       /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
Manifest number:          0258
Signing time:             Thu 23 Jul 2026 03:28:34 +0000
Manifest this update:     Thu 23 Jul 2026 03:28:33 +0000
Manifest next update:     Thu 30 Jul 2026 03:28:33 +0000
Files and hashes:         1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: gI4JDE8JnXRW+7APvdcuoydWZ7FVxPficHFKm1KJhoA=)
                          2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: 6o/niFLDihK1K3/v4rYofrazOKed9CHeturqiQTfxB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
                          rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
        Validity
            Not Before: Jul 23 03:28:33 2026 GMT
            Not After : Jul 30 03:28:33 2026 GMT
        Subject: CN=6a618a62-87ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:60:c8:27:02:88:6b:22:cd:c6:61:34:69:
                    e3:fa:3d:3e:27:c0:97:c8:45:5f:35:c8:5d:50:dc:
                    53:54:f0:63:f4:e2:3c:18:fc:1d:85:23:8b:e3:76:
                    37:39:f4:8e:f0:e3:03:d4:f3:0a:70:2a:95:3d:6c:
                    ff:c1:af:62:6c:10:b9:22:db:b5:f0:7b:56:c8:51:
                    97:31:21:3e:de:3d:7f:4a:d3:2e:b6:fe:6f:ca:9d:
                    33:0c:d3:2c:e7:75:7c:40:0e:35:e7:f2:8d:4a:d0:
                    ab:bd:42:5d:9b:54:2a:09:6e:47:25:e8:09:d1:26:
                    e0:ca:54:e5:a3:fe:80:17:ae:61:ec:63:46:2f:f1:
                    b1:73:ea:2a:d1:f5:d4:57:17:a4:10:96:c2:9d:ab:
                    d4:4f:f9:e1:18:b9:3c:28:06:a6:7f:98:70:2f:e2:
                    42:08:c7:bc:c5:af:b1:40:2e:43:7e:d7:12:0b:dd:
                    8d:53:7b:1d:58:ae:e8:40:4d:02:5b:e4:d0:0f:d9:
                    88:a2:1d:03:f4:0c:27:5f:7d:fb:1e:3f:7a:4b:e4:
                    65:c9:63:11:7c:15:a0:8d:11:64:53:b9:cc:35:f5:
                    9a:5d:6c:b6:dc:8c:3e:39:05:d5:b5:aa:3f:4f:bc:
                    86:f1:80:3d:b3:1a:8f:f0:5a:51:14:3e:c0:04:ba:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:CB:56:1A:4A:92:89:6E:E8:F8:FF:BB:CC:E6:ED:6A:E0:DB:A0
            X509v3 Authority Key Identifier:
                keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:b9:1d:e0:43:f4:db:6f:08:cf:32:45:b6:fd:2e:df:fb:
         d2:29:cd:8c:8d:61:86:ee:ba:25:55:fb:94:64:f5:94:48:26:
         d6:1d:02:5f:85:10:e2:78:27:84:54:24:46:87:bf:92:e2:3f:
         79:85:4f:d2:43:5a:14:df:93:f8:14:a7:16:0c:9d:fc:44:31:
         d3:9d:b2:63:71:83:8b:45:de:0c:f6:18:15:a2:d4:2c:5f:c1:
         61:97:ca:f9:e6:8a:90:3a:b0:30:45:c5:6d:5e:6b:e9:97:14:
         1b:ee:7a:03:15:e2:39:09:d9:01:73:bd:1d:1a:5f:83:52:6e:
         38:7f:c6:1e:04:ef:d0:4b:6a:13:c2:53:53:bf:26:8f:b1:00:
         90:e0:83:6d:b6:40:3c:68:0d:fc:4b:f9:31:37:41:e8:2a:f5:
         32:f6:e0:ad:b0:b2:8a:31:c4:6d:11:13:c7:77:1e:d6:a7:1d:
         1a:48:ec:92:ec:f5:23:de:5a:28:5d:09:c0:ee:15:54:88:48:
         73:25:13:51:e4:42:e3:7a:ae:b5:7b:5c:74:52:4b:14:07:66:
         39:04:a6:30:81:54:9e:b7:75:21:0d:c0:9d:04:a9:47:a2:41:
         6f:ea:17:55:60:8e:74:7e:c6:b8:a0:6d:98:14:f5:e9:58:72:
         56:0f:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:56 2026 by rpki-client