Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          if7B4vtVDSmK2mtITNt0fX4aiXEVvL4T0uJoD6sSO7g=
Subject key identifier:   54:03:98:CE:80:3C:38:50:97:F0:16:62:B1:37:C3:0F:53:02:F3:C0
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          D0
Signing time:             Thu 23 Jul 2026 08:30:52 +0000
Manifest this update:     Thu 23 Jul 2026 08:30:52 +0000
Manifest next update:     Thu 30 Jul 2026 08:30:52 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: jU7bkYJn6B9TGXAurgIJIVMrGLTw+uaJaKcoRT4gTJM=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: HFBzqsB1ywMD+JWUEHOpXWYJ4PzPIFvuRP9SLPHmgeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Jul 23 08:30:52 2026 GMT
            Not After : Jul 30 08:30:52 2026 GMT
        Subject: CN=6a61d13c-4010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:63:d9:6b:45:42:59:5c:52:cd:58:9b:8b:
                    03:1a:02:e7:4b:aa:95:9b:9c:d6:8f:22:78:5f:44:
                    22:d7:4d:06:a5:9d:27:cb:21:fa:b1:ae:ef:01:b8:
                    1b:3f:5b:09:bf:45:f6:ba:21:30:bf:6c:32:06:98:
                    ff:58:c6:e0:81:de:fd:0d:37:34:27:f8:b4:ef:b4:
                    8e:64:f5:0b:d6:e5:16:b9:cf:29:8c:bd:02:0b:6e:
                    d6:b9:67:10:f7:ee:6e:b4:ca:7a:f2:b2:01:1c:16:
                    d1:ec:08:17:de:29:3b:40:83:9b:9c:d4:74:4f:19:
                    00:aa:77:07:44:90:b6:c9:8a:e5:75:44:79:06:d3:
                    ee:a7:67:93:93:12:c8:bc:83:48:fb:03:7f:74:b2:
                    74:ca:63:ad:59:fd:5f:46:98:9f:82:3f:06:28:12:
                    82:46:e6:e6:f3:f3:f4:7f:4d:e4:2e:39:16:8f:7e:
                    fe:4e:6b:3e:f5:02:91:e4:02:48:df:bc:8e:b4:fd:
                    a5:ce:43:d7:0a:30:a5:c9:d4:5f:76:51:78:64:db:
                    0e:d9:48:89:9b:9c:c1:7d:fe:1c:b5:6e:12:2c:56:
                    ac:ff:df:0f:15:ce:89:02:6c:b2:a7:30:07:42:24:
                    4a:f4:4c:98:39:f1:e7:bc:dd:cc:70:ff:d9:55:5d:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:98:CE:80:3C:38:50:97:F0:16:62:B1:37:C3:0F:53:02:F3:C0
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:e0:9f:ba:09:57:f8:08:fc:b4:54:50:95:3a:db:af:bc:
         5a:50:d1:6f:67:f4:53:c0:20:6c:6e:4a:ae:34:6c:d9:96:e0:
         e6:61:e8:7b:10:e0:36:5a:7d:90:80:f8:81:c1:89:bb:62:b0:
         97:0f:e6:db:79:e5:01:c7:9a:04:d3:cd:9f:dd:9e:5b:cb:66:
         49:aa:ca:75:72:af:e5:70:1d:a9:20:8a:bf:36:a7:a3:da:bd:
         e9:b6:4a:54:2c:03:cb:f9:6f:31:7a:11:04:45:e5:6d:b2:5f:
         c6:94:07:8e:ed:4a:7e:a7:6b:66:a0:12:cd:95:6a:d8:78:5c:
         9f:9a:a0:58:66:2e:62:fb:da:eb:8c:99:90:b5:b1:77:8e:63:
         d4:54:84:43:62:1a:08:d7:67:52:f9:61:49:ab:15:49:09:e9:
         62:23:7e:8e:ab:3b:30:5b:87:4c:52:ab:67:38:f7:a3:9c:15:
         3d:fc:ac:9a:67:fc:50:9c:2b:c0:f6:95:35:0e:ac:28:bf:9a:
         84:54:fd:1d:35:a0:a2:2c:68:d2:ec:14:28:67:d5:62:94:0a:
         cf:d0:42:8c:e5:51:0d:f1:e4:1b:2b:1a:33:21:fd:a5:35:ec:
         60:2f:c9:a7:58:fe:83:d9:b7:25:10:79:71:d2:96:36:f1:4e:
         64:d5:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:52 2026 by rpki-client