Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft
File:                     b7UKOK4znc1N9WDmz9N_y57UKGA.mft (raw, json)
Hash identifier:          yD6q9vKALvtg46yxOpjCeRuRcb/Qo7qkqVNo5C3L3uw=
Subject key identifier:   74:39:E1:3F:90:D4:C0:D0:4F:E8:BA:77:82:B1:67:10:6D:0C:AB:5F
Authority key identifier: 6F:B5:0A:38:AE:33:9D:CD:4D:F5:60:E6:CF:D3:7F:CB:9E:D4:28:60
Certificate issuer:       /CN=A911583F/serialNumber=6FB50A38AE339DCD4DF560E6CFD37FCB9ED42860
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7UKOK4znc1N9WDmz9N_y57UKGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft
Manifest number:          09
Signing time:             Wed 19 Aug 2026 09:54:45 +0000
Manifest this update:     Wed 19 Aug 2026 09:54:45 +0000
Manifest next update:     Wed 26 Aug 2026 09:54:45 +0000
Files and hashes:         1: b7UKOK4znc1N9WDmz9N_y57UKGA.crl (hash: +uqIt/SvdP9bXUjl+UC0IbrAJocAtdCZQVzajnBc1gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.crl
                          rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7UKOK4znc1N9WDmz9N_y57UKGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911583F, serialNumber=6FB50A38AE339DCD4DF560E6CFD37FCB9ED42860
        Validity
            Not Before: Aug 19 09:54:45 2026 GMT
            Not After : Aug 26 09:54:45 2026 GMT
        Subject: CN=6a857d65-c3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:87:27:eb:9a:05:24:23:10:61:12:e9:f0:
                    fc:ff:f0:3b:91:4c:fc:8a:1d:ce:c9:68:9b:44:50:
                    51:d7:23:e6:0a:1d:c5:2e:67:e2:e7:fb:5a:fe:12:
                    d7:17:ed:fb:04:f5:ed:14:50:ff:e8:3a:bd:e6:d7:
                    6c:0f:c3:6b:42:3f:a9:6e:16:f9:a3:74:bf:9a:38:
                    27:bc:ef:19:bc:d6:2a:56:0d:ca:6e:de:04:12:d6:
                    d3:5c:a3:d3:8a:c4:f2:b5:72:87:fb:67:8f:2c:63:
                    74:a6:97:14:62:a5:2c:5a:a0:5f:43:5b:5c:d7:5d:
                    a2:26:5e:e7:1a:32:de:66:f8:ba:92:e8:f5:62:ba:
                    d6:33:c4:76:5b:8a:fa:6f:ee:68:78:67:c7:4e:55:
                    c4:72:d2:18:3a:3c:90:a3:e1:7a:52:9b:94:15:d5:
                    f4:d9:dc:17:5f:5e:a6:bf:04:f9:21:ea:80:bc:d9:
                    47:fd:4d:76:34:e3:30:4f:7f:0a:64:55:5a:d1:28:
                    86:29:7d:59:34:9c:dd:21:cd:0a:6b:f3:ec:f4:92:
                    7c:9a:64:4a:d9:74:2c:57:b2:25:a5:a3:a4:d7:d5:
                    22:28:36:49:8f:8b:ec:25:b7:e2:9e:e5:62:ff:73:
                    6f:03:21:bb:a6:0c:f0:f9:36:3a:10:4d:cb:ff:71:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:39:E1:3F:90:D4:C0:D0:4F:E8:BA:77:82:B1:67:10:6D:0C:AB:5F
            X509v3 Authority Key Identifier:
                keyid:6F:B5:0A:38:AE:33:9D:CD:4D:F5:60:E6:CF:D3:7F:CB:9E:D4:28:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7UKOK4znc1N9WDmz9N_y57UKGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:33:c9:9a:15:fe:41:70:76:3c:c8:fa:93:fe:65:bb:a8:e1:
         38:0e:5c:89:ef:23:b1:b3:fd:c3:75:80:ce:85:af:c6:f9:5a:
         fb:31:60:ef:65:b8:4f:0d:de:f3:e1:58:01:a6:a4:0b:ba:79:
         70:00:ee:86:92:b4:2f:51:fe:cd:be:96:04:f6:99:47:9b:30:
         58:f9:a3:c1:fa:a4:6a:64:76:06:66:67:8c:40:29:bb:49:f0:
         27:0f:37:48:76:79:03:53:62:43:00:14:50:e1:fc:df:b0:25:
         c0:56:2a:7a:2f:91:e4:ab:f4:43:66:89:d1:11:a6:f3:4b:63:
         32:16:33:f4:9f:35:54:2d:0b:79:be:db:4b:c4:47:ef:ed:04:
         26:34:45:dc:e1:94:ad:69:64:6f:b2:22:ae:67:b2:ef:68:bb:
         4e:ce:91:0f:17:12:43:58:a7:52:07:07:6c:fb:13:ec:f3:64:
         57:83:1c:46:d5:db:85:95:1e:ff:d0:5b:48:18:d4:c4:0c:cd:
         1b:30:a4:1f:e2:d8:42:e8:d6:5d:48:f5:de:6f:4c:8b:4b:76:
         28:02:4e:46:8b:24:af:4d:b6:93:ef:53:be:b0:f3:fb:94:5c:
         fd:22:ea:1c:44:bf:9e:de:51:ba:10:ee:2f:7e:2a:23:26:ff:
         60:e2:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:54 2026 by rpki-client