Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File:                     UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier:          oo/0nvMSKDwrZyrcyYzitceQ7cWCMD+1CBRyhpvVp7g=
Subject key identifier:   86:5C:D9:7A:CE:4D:DF:55:96:50:EA:2C:2D:53:A0:98:8D:41:70:6F
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer:       /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number:          5D
Signing time:             Tue 21 Jul 2026 10:03:00 +0000
Manifest this update:     Tue 21 Jul 2026 10:02:59 +0000
Manifest next update:     Tue 28 Jul 2026 10:02:59 +0000
Files and hashes:         1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: lXUxp/5xj/2quZhDLyDa/YSJ+/dAs78g9GAhI73SsMU=)
                          2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
        Validity
            Not Before: Jul 21 10:02:59 2026 GMT
            Not After : Jul 28 10:02:59 2026 GMT
        Subject: CN=6a5f43d3-55d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5a:66:e8:4c:81:31:49:9a:2c:b7:3f:e9:6f:
                    e2:22:d0:14:f4:f4:21:4c:91:2f:68:af:67:ff:55:
                    f2:c3:48:1d:bc:ea:1d:20:50:f7:53:e1:29:f9:89:
                    60:b6:dc:5d:a3:cc:66:ef:06:ee:5f:65:98:a7:1b:
                    f8:ab:4b:7a:62:9f:78:26:9e:80:63:81:97:85:29:
                    36:74:9b:0b:74:cc:09:f2:86:3d:73:14:1e:ff:70:
                    ab:f2:7b:ca:d3:f3:bc:f6:a3:0c:a6:b3:12:af:fa:
                    ca:44:df:a8:54:ca:cc:42:16:ce:14:bd:0a:0f:8b:
                    38:95:a7:4a:13:a3:b1:bb:1b:99:dd:39:c3:8d:67:
                    77:b6:75:fc:e1:3e:07:c5:e0:ed:76:9a:78:4b:2b:
                    e4:b3:98:d1:14:46:6e:4b:3a:e0:58:a9:21:9e:2d:
                    24:96:12:fa:38:c6:cb:d7:16:4e:9d:eb:aa:25:36:
                    a7:a2:11:8e:0f:23:c4:ba:34:4b:3a:ef:e8:bb:9a:
                    65:62:a1:5d:6b:5a:23:59:26:50:c5:d5:94:a3:c9:
                    72:30:a5:3f:6d:4d:27:e8:7b:6d:96:cc:c0:8c:11:
                    d7:40:00:b9:a4:32:3f:c0:18:80:ff:5b:b0:18:63:
                    ae:80:51:c4:65:9d:29:55:e7:00:85:4f:85:b6:7f:
                    1c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:D9:7A:CE:4D:DF:55:96:50:EA:2C:2D:53:A0:98:8D:41:70:6F
            X509v3 Authority Key Identifier:
                keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:cc:cf:8a:65:1e:a3:30:92:42:54:f1:cd:18:99:62:cb:
         d4:d7:74:00:9e:d6:70:48:c2:b2:f9:be:8a:ec:9c:de:32:6f:
         13:d0:ec:b8:27:62:43:cf:4c:e1:b2:4d:87:6c:3b:29:89:d2:
         62:b5:6f:31:59:e4:19:f3:fc:8c:9f:6b:1e:4b:42:28:56:68:
         57:83:69:6c:a3:fe:7f:e2:41:9c:9c:c4:dd:b4:58:2f:86:6b:
         81:8c:a0:31:61:21:86:33:a6:e4:08:15:09:c2:83:c0:71:a9:
         72:90:36:8e:4a:bf:18:0b:04:49:c4:74:19:d0:d6:b1:23:c2:
         20:bc:7f:c1:fc:9b:b8:b9:c6:f3:33:dc:88:23:f2:22:75:7c:
         92:3d:3f:f3:fc:e9:f9:4d:f0:d9:15:75:af:c7:e3:a1:16:a6:
         de:4e:e0:0d:20:29:0e:28:69:4e:31:58:f8:f2:d7:52:b6:23:
         25:52:49:9e:99:39:3c:07:6e:96:62:08:96:f4:01:f8:45:e2:
         16:0a:54:48:25:58:71:58:c7:36:4e:e6:6a:ed:3c:5b:db:a6:
         63:52:fa:e9:1b:11:cb:e8:65:33:f7:b9:1f:ae:a7:30:45:52:
         07:c0:b7:f6:cd:7d:b5:ac:93:0b:dd:df:39:02:ff:21:17:10:
         fb:d9:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:33 2026 by rpki-client