Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
File:                     umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json)
Hash identifier:          +T3f2JRBaPgIL7VLasTzFB2+PRiVC/Erp7DjFKh9JLw=
Subject key identifier:   57:1D:EF:71:78:EA:83:D9:F0:6E:B5:BA:78:DA:98:46:AD:BE:42:40
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Certificate issuer:       /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial:       04F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
Manifest number:          04E8
Signing time:             Thu 23 Jul 2026 00:36:33 +0000
Manifest this update:     Thu 23 Jul 2026 00:36:33 +0000
Manifest next update:     Thu 30 Jul 2026 00:36:33 +0000
Files and hashes:         1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: rVX+36aK0z+0wb418DGegkiDdaJ6EL3yFJT6lWBj2PE=)
                          2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: 7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
        Validity
            Not Before: Jul 23 00:36:33 2026 GMT
            Not After : Jul 30 00:36:33 2026 GMT
        Subject: CN=6a616211-5fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:d7:8c:0b:39:83:be:d7:cf:60:b4:d3:aa:
                    30:52:55:f1:63:7f:bf:72:da:9a:23:82:13:c6:83:
                    54:01:37:47:ee:c2:1c:00:1e:d3:b3:86:85:ed:28:
                    b5:bc:95:79:69:2a:e5:6f:5e:c4:88:df:9d:5c:ba:
                    30:3f:b3:9a:c5:5a:29:7c:d8:2a:73:7d:f7:ec:82:
                    e5:41:e0:c9:ab:b6:e0:f6:86:35:d7:f0:62:d3:ae:
                    16:a6:52:3c:81:06:3c:d7:52:b0:23:97:68:9d:d5:
                    6d:99:85:64:0b:a4:df:c9:b8:e4:2f:3e:6c:03:f8:
                    39:d9:e9:54:42:8b:b8:90:1b:f1:79:78:4d:55:51:
                    90:00:2c:99:39:2a:1b:97:49:d5:69:ea:e1:c4:17:
                    5b:2d:88:df:18:7a:74:32:ed:aa:60:1b:b5:d0:06:
                    2a:92:31:f2:05:15:b1:35:e7:dd:a5:6d:bb:02:02:
                    a5:37:c1:87:72:87:67:87:bc:f3:0d:27:a5:c4:5f:
                    5f:5b:bd:71:c3:04:64:75:f7:83:de:8a:90:89:c1:
                    29:d8:9b:19:b1:9f:e6:5e:07:01:ba:bf:1b:94:2f:
                    e9:03:a2:61:c1:0f:6e:c9:64:01:f9:37:23:20:c0:
                    84:06:21:2e:19:08:8d:fc:6c:b0:e8:b4:54:26:69:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1D:EF:71:78:EA:83:D9:F0:6E:B5:BA:78:DA:98:46:AD:BE:42:40
            X509v3 Authority Key Identifier:
                keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:12:2a:9c:be:02:cd:74:42:2d:55:1f:69:0b:76:d6:f8:
         05:1f:fd:97:73:f5:e1:e1:67:24:a2:7e:9d:b3:a2:3a:d2:54:
         e1:7e:68:8b:3c:58:22:9e:5a:cd:91:47:77:5a:57:3d:25:c5:
         18:b5:09:13:15:cd:44:43:99:1d:1d:90:7e:8b:b3:97:dd:12:
         b4:bb:24:c3:10:22:a7:2c:e2:6d:bd:57:5b:27:80:90:dc:32:
         49:82:90:72:bb:ef:5c:f5:33:36:5b:4e:70:3e:02:1a:db:e6:
         df:e8:58:fa:1b:85:59:71:12:46:48:38:63:b5:a2:5f:20:52:
         2f:36:9f:a7:41:ff:d0:43:7c:a3:49:10:26:1b:5a:18:4d:f8:
         4b:c1:6a:df:93:03:5d:1f:24:bc:64:14:32:e0:13:ee:6b:d8:
         13:b5:1e:ac:14:63:9f:f5:10:4c:59:7b:22:0a:48:16:89:af:
         b5:06:af:92:c7:df:aa:6e:8c:48:af:dd:20:12:b8:36:4c:e8:
         b2:fc:ed:66:fe:5e:1e:fc:ac:88:f0:78:1b:12:8e:cd:c2:cf:
         e9:7d:7b:6a:d3:ea:74:ec:e6:ce:05:6a:41:9c:f9:0b:d5:03:
         75:1f:2d:d0:58:b7:39:33:a9:af:39:02:84:be:59:e1:05:53:
         df:5a:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:52 2026 by rpki-client