Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File:                     UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier:          xSzYPgrs5kjOOjFmyuAGUAURnHI+dQCybu6n3ijXZ34=
Subject key identifier:   C7:48:14:1B:BD:96:93:B6:08:55:54:5E:9C:E0:A0:AB:12:DD:E2:75
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer:       /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number:          013C
Signing time:             Tue 21 Jul 2026 07:17:34 +0000
Manifest this update:     Tue 21 Jul 2026 07:17:34 +0000
Manifest next update:     Tue 28 Jul 2026 07:17:34 +0000
Files and hashes:         1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: 9yGX4siOqzmZFY9Ymi/IiGDvGZEP5URKXcoJrei7Dyo=)
                          2: EA7DD3B85B8011F19AAA063FA7833773.roa (hash: ga7RmHBxUIf+hUQhJPOXCSIER/vz19Y1P9LRsEGGGbg=)
                          3: 1D8F5C2E5B7F11F1B697DE78A6833773.roa (hash: klWUSQgK3IOTMfJYCoyqo1alTlwHxclvm8Ll88mJta4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
                          rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
        Validity
            Not Before: Jul 21 07:17:34 2026 GMT
            Not After : Jul 28 07:17:34 2026 GMT
        Subject: CN=6a5f1d0e-5888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:e7:d1:8f:1e:0b:db:50:36:05:84:30:cf:
                    4a:5f:29:7a:b8:3e:e0:d3:04:66:06:d4:e4:37:9d:
                    f0:6b:68:33:5b:3b:21:99:e4:f5:dc:66:c5:40:64:
                    4d:4a:eb:28:5c:3c:a7:f1:b9:00:87:6a:48:65:d5:
                    23:20:0b:4f:0a:d8:e5:fd:36:bb:ca:91:da:c5:dc:
                    a2:bf:47:d2:f6:24:39:97:bd:de:18:c9:aa:db:4d:
                    0d:bd:e1:7f:95:07:9f:ed:03:b5:0b:7c:34:1f:26:
                    2a:97:f8:0d:a8:52:0a:fb:f9:37:1c:83:79:d7:a5:
                    35:ca:ed:85:27:ad:0c:d1:7d:7f:3f:65:7d:aa:83:
                    97:3c:97:ec:26:34:c0:b9:7b:f6:4b:8d:dc:e0:48:
                    04:3d:64:31:f2:0b:97:83:2b:de:90:94:07:aa:1a:
                    e4:ea:d3:0a:f0:65:2e:7f:28:cf:72:c6:6f:3b:c9:
                    dc:a0:df:cb:ea:be:2e:67:02:28:fc:d4:9a:69:e9:
                    32:6d:4f:e6:d7:4c:5e:da:23:b3:c6:f3:e8:ad:77:
                    d0:c0:f8:7c:b1:30:45:7d:38:6a:a2:e0:73:bb:41:
                    cd:0d:7c:ba:df:11:66:9f:ad:84:a7:a8:49:b3:a6:
                    be:05:be:84:49:4a:3e:c5:ef:01:21:b5:7d:ae:e4:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:48:14:1B:BD:96:93:B6:08:55:54:5E:9C:E0:A0:AB:12:DD:E2:75
            X509v3 Authority Key Identifier:
                keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:91:a7:20:77:34:54:57:7d:05:5d:6a:07:1f:24:18:e2:c9:
         fd:ec:c1:cd:da:fb:02:8a:e3:f0:82:42:30:dc:0f:f2:00:a3:
         28:bc:ab:cd:da:e9:96:9c:c1:dd:0a:00:fa:b3:2c:06:ee:cc:
         97:29:fd:99:ab:41:d7:18:ba:52:9a:47:f2:aa:96:55:84:12:
         7f:37:fd:08:9b:fe:b8:7c:c7:16:25:e0:d2:5f:ec:d3:0b:45:
         88:19:98:d5:f2:d4:e7:5b:1b:4a:1f:8b:98:78:3f:4f:5e:2e:
         9f:39:4d:78:27:0e:e4:aa:51:56:5c:65:7d:e5:03:b6:bd:19:
         16:2f:31:93:6b:9f:2f:cb:02:97:a3:53:81:e1:94:63:e3:8e:
         20:c8:cc:9c:4b:90:7b:e3:88:8c:7b:8a:71:29:c0:ae:16:26:
         9f:6f:75:f0:fd:60:90:92:d0:2e:fd:e2:c2:e5:33:b7:98:d5:
         48:ea:b6:b2:8f:21:14:53:be:13:bb:8c:f1:30:6c:0e:9e:b5:
         1b:52:3d:88:ca:f9:2b:30:fb:e3:da:18:a1:e4:49:a6:2c:f6:
         1e:03:a4:4e:23:75:d5:af:ff:e3:68:c9:32:57:b7:fa:bd:89:
         72:21:7c:eb:02:74:f9:36:cf:08:4e:61:df:df:62:87:51:56:
         73:61:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:35:22 2026 by rpki-client