Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File:                     rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier:          ozg4JDLf7Vy/R4jNslxvDwuaBXNskZAHvB0YhnSOPgo=
Subject key identifier:   76:D2:85:1E:A6:85:93:98:8F:E2:3F:85:C8:7F:CE:9F:EB:78:6A:5C
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer:       /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number:          0180
Signing time:             Thu 23 Jul 2026 06:08:51 +0000
Manifest this update:     Thu 23 Jul 2026 06:08:51 +0000
Manifest next update:     Thu 30 Jul 2026 06:08:51 +0000
Files and hashes:         1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: Mi8dcZu8+PKnuMHkmNDxj+1eud278l+s+wZPl/4zYc0=)
                          2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: jiOqsOopgHWdylNJvQ56lnPS2twkZ7rplvNHVmhQWj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
        Validity
            Not Before: Jul 23 06:08:51 2026 GMT
            Not After : Jul 30 06:08:51 2026 GMT
        Subject: CN=6a61aff3-d778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:70:c7:d6:c8:bf:e9:3e:eb:b6:de:4d:f0:
                    b3:6d:e4:86:8d:0f:9e:3f:86:4a:0e:90:c0:6a:b1:
                    17:f9:d7:7c:de:28:ec:5d:af:35:33:77:31:80:39:
                    a7:eb:b4:e6:5c:91:0f:bf:67:fb:4e:ff:f1:7b:b8:
                    eb:36:22:4b:8a:e8:4b:6a:a4:65:3a:31:de:91:d8:
                    12:e2:f2:0e:83:ff:3f:6a:56:39:86:d3:48:e1:15:
                    e5:e1:f2:25:4c:6c:e0:f1:64:26:d6:93:0f:87:1a:
                    d7:d5:5b:55:b3:36:e5:a6:4a:c6:d2:01:a8:24:09:
                    d0:ea:3d:b2:a3:e1:a1:64:dc:0f:b8:45:c0:98:52:
                    61:ab:a4:e8:8c:4e:be:ca:2b:66:1a:c7:85:83:96:
                    1b:aa:86:26:1d:01:83:64:61:58:74:74:5d:46:24:
                    67:7f:59:51:7a:53:1e:23:a5:e8:f1:0f:23:99:b1:
                    8c:06:28:20:0b:65:ab:46:92:28:3a:22:86:67:45:
                    14:17:8b:a3:39:69:58:d5:93:40:e0:c0:17:4c:26:
                    c4:19:3f:af:16:81:3c:a2:30:39:00:12:8a:ba:5a:
                    d0:51:0a:e7:a1:da:ac:ef:6c:e6:55:50:f5:7d:31:
                    52:51:0e:c9:5c:bc:82:8f:54:0e:ae:9b:97:34:e6:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:85:1E:A6:85:93:98:8F:E2:3F:85:C8:7F:CE:9F:EB:78:6A:5C
            X509v3 Authority Key Identifier:
                keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:62:f7:0e:fc:9d:2f:09:75:69:42:e0:10:8f:d4:97:74:
         de:d8:6f:d5:0e:33:05:e0:4b:c2:18:ee:7c:d8:73:1e:ce:43:
         ab:5f:9d:fa:a6:4d:3e:18:67:b0:87:15:0c:37:bc:2b:e1:f7:
         bc:bc:7c:50:4b:64:31:4a:e8:25:83:03:55:18:0e:12:ba:53:
         dc:d7:2f:cb:78:1d:fd:98:95:74:dc:58:61:8a:ae:fa:40:22:
         43:18:4b:92:9e:4a:91:26:cf:ed:69:2c:67:ba:59:61:72:82:
         62:a3:71:2e:76:30:4d:c1:0c:e4:a4:42:db:a2:ff:67:4c:86:
         68:4c:25:07:bc:0d:14:f4:3d:25:5f:38:2c:4a:4a:60:e0:b5:
         68:5f:54:f7:87:c2:54:9a:73:f3:ef:4e:c3:8a:67:5d:74:79:
         a7:d8:fb:d7:a6:8c:77:06:6d:98:aa:32:07:b4:66:97:60:74:
         f9:ed:e7:eb:1c:6f:28:01:8c:cc:3a:37:10:af:6d:2d:65:fd:
         03:3e:7f:4c:69:7b:87:3f:6f:a8:cd:b2:f8:f8:c2:74:28:e8:
         a2:9d:88:7f:c7:49:22:0e:b3:4a:0e:84:2a:ff:e9:48:da:aa:
         21:02:ba:7d:65:a1:e0:c7:c4:1d:f6:29:d8:68:67:77:28:e0:
         a5:ac:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:21 2026 by rpki-client