Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File:                     c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier:          Zs66JGtVapc38eEWdSJnE7h8wrPtaUqJXcAFuM8c63c=
Subject key identifier:   18:18:18:AE:6B:0A:DE:7E:3C:DE:87:5A:7A:64:A2:9E:38:C8:5F:F5
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer:       /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number:          015D
Signing time:             Thu 23 Jul 2026 06:34:32 +0000
Manifest this update:     Thu 23 Jul 2026 06:34:32 +0000
Manifest next update:     Thu 30 Jul 2026 06:34:32 +0000
Files and hashes:         1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: vTLk8Fj9QSiR2y8iTBWFcgM6f6NBK3936fFfSwd/auk=)
                          2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: E1+S92xguMTIBmtHmrSoXrOV41uAwtTiK5fggn3/D/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
                          rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
        Validity
            Not Before: Jul 23 06:34:32 2026 GMT
            Not After : Jul 30 06:34:32 2026 GMT
        Subject: CN=6a61b5f8-af86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:6e:f4:d4:52:3f:4e:6a:aa:cd:94:c7:d8:
                    ba:d3:a5:84:4e:b9:6a:e1:82:97:1e:67:84:20:27:
                    c4:41:0b:1d:c9:38:01:65:68:65:bd:bd:dd:a0:f3:
                    86:da:5b:e0:d0:48:79:d5:fe:06:67:ba:3a:6c:e7:
                    a8:ee:28:56:c5:ca:04:c3:bc:2f:c1:eb:25:5a:cd:
                    e2:06:08:cb:ac:4f:67:64:8a:9a:4e:42:67:22:81:
                    a7:2b:15:6f:a1:cd:79:df:04:28:f4:ee:98:2f:e5:
                    e1:60:a5:4a:68:cb:27:8c:5e:05:79:85:b9:ce:eb:
                    b8:f8:d7:c4:13:f6:88:f6:f5:f0:b3:98:45:cc:68:
                    27:7c:40:f2:e4:ab:f8:24:b1:12:7f:a2:d0:73:16:
                    de:38:2d:2a:c1:d3:41:a2:88:0d:4b:f1:f0:de:de:
                    87:a2:4d:aa:6c:b9:18:8b:b4:a3:9f:fb:0e:a1:08:
                    73:fb:6f:ac:3c:a7:80:32:a9:e9:40:3d:db:a8:cf:
                    a1:4a:22:5e:d5:94:3b:cd:a8:17:bc:b1:bc:aa:8c:
                    2f:2d:68:6c:2a:f7:04:8e:1b:1a:b9:1f:07:d9:49:
                    4a:27:19:5c:ab:ca:ba:36:00:d6:ed:40:b3:5d:67:
                    f2:5a:f7:5b:f5:c4:7d:f5:b1:64:3f:d2:88:6a:7d:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:18:18:AE:6B:0A:DE:7E:3C:DE:87:5A:7A:64:A2:9E:38:C8:5F:F5
            X509v3 Authority Key Identifier:
                keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:68:24:b0:d0:65:f7:2f:70:9a:e9:a9:09:8d:a9:cc:4e:09:
         e5:28:f1:e7:f7:e1:bd:aa:19:60:fe:e2:4f:08:c1:2a:a3:77:
         e9:c9:73:17:ed:fa:fb:ec:4b:7d:94:3e:13:13:05:69:91:18:
         a7:6d:ac:9e:64:fe:a3:62:be:5e:64:f2:ed:12:c2:0b:f5:39:
         6e:71:15:d7:1e:c2:ae:8d:c5:34:b7:07:5e:83:87:a1:a1:2f:
         e5:6b:b1:c0:5f:ba:3f:77:af:89:a6:67:20:da:d4:54:b7:ca:
         81:49:dc:78:2f:b6:64:80:87:c4:73:a1:f5:68:45:22:c4:e0:
         be:67:6b:3f:cd:1c:b8:49:11:5a:bb:04:c5:28:85:4f:12:9b:
         a1:ee:27:a2:26:7d:4e:e9:6b:b3:bc:9b:1f:d5:8b:e8:23:63:
         24:7c:6e:97:32:92:38:eb:8c:70:45:be:0a:35:a5:91:71:75:
         8d:0f:c3:b3:63:c4:a1:4f:6f:28:fe:60:d6:50:88:6a:f4:9b:
         85:a7:5e:90:ec:c1:c7:4a:8e:1e:a7:f5:84:84:6b:f9:79:26:
         4e:94:d6:ab:8e:de:81:dc:74:96:34:67:39:5e:6d:51:0b:68:
         60:0f:17:42:e4:6c:13:f4:1a:6f:c8:84:b9:26:75:a5:63:ff:
         71:6f:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:48:12 2026 by rpki-client