Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File:                     UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier:          3fZYpsUItQ1xtlYVeb/IZKKzaxuR1T+4l5+hrG6Y9yg=
Subject key identifier:   F4:89:74:96:87:B8:24:D1:D2:9E:CB:5E:AE:AA:B7:BA:3B:63:38:DE
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer:       /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number:          0607
Signing time:             Wed 22 Jul 2026 23:36:28 +0000
Manifest this update:     Wed 22 Jul 2026 23:36:27 +0000
Manifest next update:     Wed 29 Jul 2026 23:36:27 +0000
Files and hashes:         1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: GSC9cw+2LZEmc9828C9a7M43VcTusorwQ/sMY3jBWHg=)
                          2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
                          rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
        Validity
            Not Before: Jul 22 23:36:27 2026 GMT
            Not After : Jul 29 23:36:27 2026 GMT
        Subject: CN=6a6153fc-eb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:b1:c5:99:fe:ec:21:7a:a8:6c:ef:c5:65:
                    22:ca:a6:84:bc:61:e5:e1:71:a5:b5:41:79:ac:db:
                    bc:df:b9:fe:36:5d:ef:80:4a:8a:0f:f0:81:4d:b7:
                    97:c8:b8:f1:c6:59:95:90:1b:86:3f:bb:d0:9f:60:
                    bd:5c:61:41:b5:04:d6:b1:b0:88:a5:6c:67:e1:15:
                    3c:5a:17:14:80:e2:0f:bc:a3:be:d9:4e:5a:98:99:
                    fe:ae:4b:19:98:e8:f5:81:88:0d:49:80:b2:b9:be:
                    7d:60:3b:19:39:51:16:b8:39:3a:cf:56:2e:1f:b8:
                    2f:07:b3:5c:9f:e5:bc:5a:7d:16:e1:60:53:7a:56:
                    a5:3f:1a:7b:21:59:20:31:b2:76:4e:dc:95:3b:b1:
                    9a:50:1d:de:6c:e2:ca:54:10:6e:6d:77:21:14:67:
                    e6:4e:22:a2:b3:81:8f:c9:81:96:d6:6c:c4:15:13:
                    10:81:47:82:4d:24:5d:ab:57:25:08:18:55:3e:c4:
                    07:26:01:b1:17:2c:83:43:b5:56:c3:bb:6b:ab:03:
                    b3:3c:50:5d:61:f0:8f:59:ed:a6:56:36:51:17:40:
                    6a:91:e7:65:f5:d9:72:2a:7f:46:71:0b:29:80:01:
                    66:62:10:e8:a9:0e:a8:d5:cc:69:f9:5c:47:94:7e:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:74:96:87:B8:24:D1:D2:9E:CB:5E:AE:AA:B7:BA:3B:63:38:DE
            X509v3 Authority Key Identifier:
                keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:fe:63:2b:7a:ad:04:4a:79:fc:e5:33:44:68:d0:87:96:
         ee:fd:8c:1a:9a:8c:84:55:b2:cf:2f:9d:6d:7a:47:4a:bd:53:
         bf:1f:43:9f:15:e1:63:68:92:da:27:10:e2:2b:f2:43:e5:58:
         a5:5e:2b:ac:d5:27:e4:a0:07:27:69:5d:f1:16:87:f2:d0:f4:
         70:88:13:00:81:30:a1:c5:11:e1:a8:e8:68:b2:4e:79:37:e7:
         d9:f3:01:7c:6c:9a:28:0e:74:6a:4d:9f:78:f4:b4:cc:88:c5:
         85:f7:b9:17:a2:7d:a9:99:32:51:63:b6:61:a4:3f:ac:ae:65:
         9d:a0:c5:a6:88:6e:4b:67:87:44:89:e1:c2:37:d3:96:2a:c7:
         7d:ae:43:ae:87:ad:5b:f7:07:b2:a8:42:d2:15:f5:d7:b2:77:
         a7:d0:c3:e5:be:67:4e:45:6c:7f:b1:90:bb:be:29:c8:53:9f:
         85:77:12:0c:b5:44:89:75:b0:cc:f4:f3:71:31:56:85:52:fc:
         87:fe:1e:bb:ec:7e:37:aa:6e:b4:4e:68:81:86:2a:63:67:46:
         b4:63:46:f5:67:8a:e8:9d:29:2f:29:69:15:55:97:6c:bb:dc:
         48:ef:0a:63:0c:c4:5c:a3:33:5b:f8:04:e1:4c:4a:1c:9a:5a:
         6d:1d:e0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:20 2026 by rpki-client