Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
File:                     UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json)
Hash identifier:          k2bLrIGMT37B1V2F/3JFlBzNlM6rzGXGagMx9Z9oN3E=
Subject key identifier:   48:D8:73:40:06:60:3D:59:B8:81:07:3F:A5:54:ED:75:C6:C4:48:12
Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
Certificate issuer:       /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397
Certificate serial:       0914
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
Manifest number:          090B
Signing time:             Wed 22 Jul 2026 20:44:34 +0000
Manifest this update:     Wed 22 Jul 2026 20:44:34 +0000
Manifest next update:     Wed 29 Jul 2026 20:44:34 +0000
Files and hashes:         1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: Hm43QE/d0IFgGlQYs3NxUFz/pPZoySMqmcRDI+cU9HI=)
                          2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: bCHE5nI4rqzx/kCg0rTMONZHHcxfxtmtXkLR2EjPLb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl
                          rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397
        Validity
            Not Before: Jul 22 20:44:34 2026 GMT
            Not After : Jul 29 20:44:34 2026 GMT
        Subject: CN=6a612bb2-18c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:f3:36:cf:32:89:c6:5c:51:59:fd:7b:3b:
                    cf:0f:14:d1:6e:3f:7c:37:d5:90:28:c2:7f:17:94:
                    7f:27:f0:aa:93:64:b9:24:61:c2:d1:ba:25:4f:71:
                    12:c3:54:f8:6b:de:f2:8a:bf:3f:76:e5:ee:fb:f6:
                    e6:5c:56:76:44:5a:29:f2:20:25:77:73:4c:dc:f0:
                    fd:d7:41:31:25:0f:cc:00:f3:3c:ef:39:71:99:cc:
                    f8:e0:e2:e3:7a:31:63:b7:e1:97:71:e0:ed:f2:3f:
                    6f:44:57:76:c9:02:7c:eb:f4:47:12:40:b2:77:31:
                    e8:b0:50:3b:17:06:6c:c0:71:63:59:09:7a:8a:fe:
                    6b:98:bb:c7:8d:58:69:4c:2e:b0:87:b4:3c:72:8f:
                    7d:6d:fa:91:f2:6c:89:4d:b8:a2:04:bf:4d:9c:dc:
                    66:5e:c7:9b:16:c0:03:e4:6d:6e:01:9d:c0:2f:8d:
                    1a:f4:e3:95:30:79:47:e6:59:07:a9:6f:06:f6:c9:
                    20:50:fb:8f:e3:f0:72:94:73:ab:4f:16:ad:da:ad:
                    1f:46:a4:cf:be:4c:cd:6f:cc:96:c0:91:a4:96:cf:
                    db:96:58:8d:c2:99:a1:c7:1e:9c:d4:e4:3e:af:ce:
                    d9:e9:33:ed:65:eb:9d:4b:74:20:53:76:49:ee:18:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:73:40:06:60:3D:59:B8:81:07:3F:A5:54:ED:75:C6:C4:48:12
            X509v3 Authority Key Identifier:
                keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:74:71:a8:d9:be:d0:9f:13:18:00:c3:ec:ea:bc:e5:3d:3d:
         25:f4:e4:8a:de:83:59:e7:7f:30:f1:dd:ed:59:ac:64:1f:07:
         a3:81:fd:a8:92:6a:98:4d:fb:53:0e:07:b4:54:60:d6:72:ee:
         fd:6d:36:ce:96:8e:ac:07:16:90:b4:96:dc:2b:10:32:e7:87:
         72:e9:eb:3d:96:7d:5e:17:8a:be:eb:99:2f:4d:80:9e:71:3e:
         ec:08:20:14:0a:92:51:7a:f4:9d:98:e4:0f:fc:58:78:3c:f0:
         13:17:b4:b0:b0:f1:6d:fe:53:d9:c7:07:3d:d1:9d:0a:29:33:
         0a:2e:02:1b:9b:4f:b2:b0:7f:14:ef:e5:35:86:ec:71:73:79:
         07:ac:2a:76:42:7a:87:e8:de:20:ff:cd:17:71:cb:ae:9c:fb:
         c5:95:fd:d0:04:c6:9b:6c:3d:20:b6:7f:aa:02:16:4e:2e:86:
         5b:1b:17:73:c6:2d:11:50:ba:c7:d6:f8:e4:bf:04:08:96:44:
         11:65:e7:2a:2f:4e:02:6c:a8:d0:5f:a4:0b:02:79:b5:34:1f:
         7f:68:27:1e:fe:fa:de:73:45:55:0c:5e:11:a9:6a:f0:88:53:
         74:d9:fb:ed:04:a2:14:c0:15:83:24:90:e9:6f:14:0d:58:bd:
         4e:3a:6a:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE
QkVBNDEzOTcwHhcNMjYwNzIyMjA0NDM0WhcNMjYwNzI5MjA0NDM0WjAYMRYwFAYD
VQQDEw02YTYxMmJiMi0xOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5TzNs8yicZcUVn9ezvPDxTRbj98N9WQKMJ/F5R/J/Cqk2S5JGHC0bolT3ES
w1T4a97yir8/duXu+/bmXFZ2RFop8iAld3NM3PD910ExJQ/MAPM87zlxmcz44OLj
ejFjt+GXceDt8j9vRFd2yQJ86/RHEkCydzHosFA7FwZswHFjWQl6iv5rmLvHjVhp
TC6wh7Q8co99bfqR8myJTbiiBL9NnNxmXsebFsAD5G1uAZ3AL40a9OOVMHlH5lkH
qW8G9skgUPuP4/BylHOrTxat2q0fRqTPvkzNb8yWwJGkls/blliNwpmhxx6c1OQ+
r87Z6TPtZeudS3QgU3ZJ7hhw6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjYc0AG
YD1ZuIEHP6VU7XXGxEgSMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG
RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM
S0JKaHU2NDVjVFhiNmtFNWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHRxqNm+0J8TGADD7Oq85T09JfTkit6DWed/MPHd7VmsZB8Ho4H9qJJqmE37
Uw4HtFRg1nLu/W02zpaOrAcWkLSW3CsQMueHcunrPZZ9XheKvuuZL02AnnE+7Agg
FAqSUXr0nZjkD/xYeDzwExe0sLDxbf5T2ccHPdGdCikzCi4CG5tPsrB/FO/lNYbs
cXN5B6wqdkJ6h+jeIP/NF3HLrpz7xZX90ATGm2w9ILZ/qgIWTi6GWxsXc8YtEVC6
x9b45L8ECJZEEWXnKi9OAmyo0F+kCwJ5tTQff2gnHv763nNFVQxeEalq8IhTdNn7
7QSiFMAVgySQ6W8UDVi9Tjpq/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:52 2026 by rpki-client