Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69AC/E1554346848111F18D9ED8E67FA30FBC/uKPkCjH6dbkcvyD8gql892saVRU.mft
File:                     uKPkCjH6dbkcvyD8gql892saVRU.mft (raw, json)
Hash identifier:          i1LkNLmPyOQZ41y7WjsMRW8rAkwiSuiMRWinBaspF8E=
Subject key identifier:   0A:C7:31:C1:DD:7E:71:86:89:51:2D:0F:D6:B5:4D:71:03:94:B4:5D
Authority key identifier: B8:A3:E4:0A:31:FA:75:B9:1C:BF:20:FC:82:A9:7C:F7:6B:1A:55:15
Certificate issuer:       /CN=A91F69AC/serialNumber=B8A3E40A31FA75B91CBF20FC82A97CF76B1A5515
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKPkCjH6dbkcvyD8gql892saVRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69AC/E1554346848111F18D9ED8E67FA30FBC/uKPkCjH6dbkcvyD8gql892saVRU.mft
Manifest number:          05
Signing time:             Thu 23 Jul 2026 11:20:46 +0000
Manifest this update:     Thu 23 Jul 2026 11:20:46 +0000
Manifest next update:     Thu 30 Jul 2026 11:20:46 +0000
Files and hashes:         1: uKPkCjH6dbkcvyD8gql892saVRU.crl (hash: ZoyNd7bAS9+zBaj6nGXUhS9aGEQae+DVgAW/lK0e5RI=)
                          2: 03C883F8850311F1808687FE67A30FBC.roa (hash: 9ahqrrOT1cf/MZQJwCdBuvMW1/kc9dha/agHBDERxvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69AC/E1554346848111F18D9ED8E67FA30FBC/uKPkCjH6dbkcvyD8gql892saVRU.crl
                          rsync://rpki.apnic.net/member_repository/A91F69AC/E1554346848111F18D9ED8E67FA30FBC/uKPkCjH6dbkcvyD8gql892saVRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKPkCjH6dbkcvyD8gql892saVRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69AC, serialNumber=B8A3E40A31FA75B91CBF20FC82A97CF76B1A5515
        Validity
            Not Before: Jul 23 11:20:46 2026 GMT
            Not After : Jul 30 11:20:46 2026 GMT
        Subject: CN=6a61f90e-cacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:b0:75:d3:fd:ec:57:ff:82:16:3f:55:8c:
                    93:54:16:69:30:eb:fc:ea:c1:ef:a8:8c:0b:55:91:
                    c3:70:80:e2:a1:3d:71:fb:42:fd:c7:7d:11:31:b5:
                    f5:dc:6f:72:84:de:9f:0f:b5:1a:19:77:36:f3:f9:
                    d3:54:28:47:e8:2d:cd:9d:ef:43:62:8b:45:88:c0:
                    bf:f2:dc:20:3a:ec:c5:0f:79:63:0b:14:5f:2c:ac:
                    44:09:35:4e:aa:36:2e:45:0b:6e:46:77:67:ed:6b:
                    a5:92:00:0e:6b:fc:8d:68:5b:f6:7e:52:41:23:4c:
                    b9:6c:06:0a:0f:ec:3e:3c:91:63:a0:3a:15:a5:09:
                    16:bf:e9:52:23:89:ed:38:c2:60:19:10:75:fb:25:
                    ed:b3:68:3a:40:f0:35:ca:3c:53:50:08:5d:b6:9c:
                    33:73:61:0c:3a:74:9a:2b:45:ef:e2:c2:54:43:07:
                    f5:ce:a6:d7:d3:d7:c8:17:8e:25:ae:5e:05:35:b6:
                    24:e7:60:33:8b:57:87:bb:77:df:af:29:76:8d:2d:
                    e2:04:42:7d:0d:f2:51:d1:cd:f5:0c:e6:7b:7f:e0:
                    7b:1d:3e:bf:02:7a:5e:fe:68:3b:ac:a9:a7:f8:f9:
                    02:bc:c4:15:00:1c:bf:05:7d:8d:c0:ec:e7:4f:3b:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C7:31:C1:DD:7E:71:86:89:51:2D:0F:D6:B5:4D:71:03:94:B4:5D
            X509v3 Authority Key Identifier:
                keyid:B8:A3:E4:0A:31:FA:75:B9:1C:BF:20:FC:82:A9:7C:F7:6B:1A:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69AC/E1554346848111F18D9ED8E67FA30FBC/uKPkCjH6dbkcvyD8gql892saVRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKPkCjH6dbkcvyD8gql892saVRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/E1554346848111F18D9ED8E67FA30FBC/uKPkCjH6dbkcvyD8gql892saVRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:98:fd:a2:fb:f0:d4:6d:7c:7d:b3:b0:dc:aa:8b:cf:ac:
         aa:25:4c:1d:e7:9f:51:28:5b:c5:da:25:61:97:22:80:62:3c:
         37:41:93:1d:bf:6f:a9:7d:fe:80:fa:c6:e2:18:5d:42:fa:31:
         ac:5e:8d:b4:b1:39:96:13:26:78:6d:ee:a9:13:1a:9f:33:e4:
         a8:38:6d:4a:d2:cc:ea:b5:eb:63:7a:fa:fa:1e:07:e5:7f:5c:
         03:87:97:62:b2:25:77:78:33:ff:95:9c:b8:eb:bd:81:fd:02:
         18:ba:8a:1b:17:66:5a:bc:eb:6e:32:56:8c:f2:83:00:72:5b:
         6b:63:93:c7:b0:50:19:2e:85:48:57:99:66:89:4c:d9:77:23:
         3e:64:f7:6d:5c:56:9f:7c:08:69:24:dc:57:0d:9c:c2:c5:e7:
         f0:a2:2c:1f:0b:e2:c5:e0:75:e7:49:c0:7f:82:64:1f:cb:51:
         9b:23:24:4e:19:84:40:2a:a4:73:ae:eb:a2:2f:22:30:98:72:
         cc:da:8c:47:44:a4:63:d4:22:6a:93:ad:ac:1e:5a:44:d8:bc:
         69:18:2b:8c:a7:46:7f:37:b8:e8:b6:de:3f:43:13:61:73:69:
         68:61:5e:f4:bc:cd:11:96:98:d0:cf:04:52:b3:80:5c:5e:02:
         ba:52:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:16 2026 by rpki-client