Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          941thPaoyFTwt9jeLCok7G4VM/gHRzxIOW/yx5uW1u4=
Subject key identifier:   54:C0:DD:16:39:76:06:3C:80:B4:CE:66:29:10:56:3D:51:2B:45:F8
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       196E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          1965
Signing time:             Wed 22 Jul 2026 15:51:01 +0000
Manifest this update:     Wed 22 Jul 2026 15:51:01 +0000
Manifest next update:     Wed 29 Jul 2026 15:51:01 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: 8ZGccEPdULo9Gu3Sls2AWS1YA1XKc3KuUSDG+rwqv8Q=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: /WXgSdIhpBtfBEEOEgt0Tnq7bnUCbAtf1R0CAhaphCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6510 (0x196e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: Jul 22 15:51:01 2026 GMT
            Not After : Jul 29 15:51:01 2026 GMT
        Subject: CN=6a60e6e5-4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:62:b9:ed:d8:50:20:d7:6e:c2:e1:c6:95:
                    9d:e3:a2:59:18:7c:e0:8a:bc:5a:af:97:bd:e7:9c:
                    7a:dc:93:0c:f4:ca:74:86:4b:fd:33:ad:d3:2f:1b:
                    d8:aa:ea:79:2b:bb:a6:c6:39:3b:37:9f:10:f3:97:
                    5b:79:69:06:fd:9c:43:f2:56:5f:23:ff:ba:bc:1f:
                    f3:40:f4:e8:43:eb:03:f3:ac:76:14:cb:70:93:c9:
                    b5:61:57:fc:e0:b7:1a:7f:78:7a:75:c9:8b:85:2d:
                    13:e8:9a:e6:d4:87:44:d1:d3:b7:c3:2a:ca:b3:0f:
                    98:d8:f7:2e:dd:19:c3:61:fe:5c:91:a9:ce:45:82:
                    2e:ba:9c:c2:75:b2:27:2d:b1:29:8f:a7:8f:51:f2:
                    ef:c0:cb:29:3f:72:28:cf:ff:d4:5e:1b:94:e6:0e:
                    76:9a:1c:98:c2:94:07:0e:04:7d:bb:8b:7d:ed:8b:
                    34:97:86:89:25:af:f6:2d:26:70:f4:3e:d1:4a:a9:
                    8f:9d:a7:60:43:63:42:99:d1:84:5f:d2:b2:a1:81:
                    66:2a:fe:51:05:86:7b:0a:16:75:43:64:01:93:1c:
                    d8:83:6e:77:85:22:52:57:a2:13:1e:f7:64:99:85:
                    ab:a9:b1:dc:21:30:2a:57:2c:d6:83:e8:37:49:89:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C0:DD:16:39:76:06:3C:80:B4:CE:66:29:10:56:3D:51:2B:45:F8
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:7d:77:dd:48:19:d3:97:89:51:ae:3d:06:9e:e7:cd:1e:
         0e:7d:89:cb:1e:46:b3:0d:15:d4:d4:ef:b6:ab:aa:9c:bc:b5:
         0b:9b:d9:ca:e8:12:eb:20:b4:ca:f3:c6:9c:fe:39:4c:e6:7f:
         24:6d:fd:2d:11:ef:79:a3:0c:55:da:9c:fb:9c:74:18:ad:5a:
         09:d0:1a:6b:21:de:be:b4:e9:91:dc:af:67:d1:16:64:b1:da:
         21:86:43:69:2c:ab:0b:3e:ca:60:13:3a:ea:5e:00:e9:1a:01:
         6d:a2:a6:72:cf:14:65:c9:b5:d3:7e:5f:4a:b0:87:47:84:db:
         73:d5:f7:18:8c:b3:43:ca:bf:61:2c:fe:5b:82:31:67:25:58:
         86:09:b8:f3:d2:2f:81:f1:e7:3e:ee:8e:e5:53:d1:d7:97:af:
         04:be:06:5d:76:dc:d3:72:fa:d5:fd:00:76:e9:76:4d:2d:a8:
         2f:d3:6c:91:7f:69:97:f8:a0:43:c1:79:61:26:8c:0d:ad:db:
         15:39:0d:5d:27:43:6d:ab:1b:98:18:0f:88:b0:48:d1:42:cc:
         7b:42:6c:04:5b:70:ec:b1:6c:b2:b0:16:c3:3d:19:d0:e2:29:
         b8:83:13:12:b2:a7:70:3c:73:6b:0f:6b:d3:2a:b4:a7:ef:eb:
         27:99:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:49 2026 by rpki-client