Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File:                     UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier:          jhQ1F1nbzLU89foLqmDpEYFN/gE5tazVJmOoh+cFyOA=
Subject key identifier:   97:9A:33:E1:46:44:05:20:FC:46:43:93:AD:F9:12:83:3A:D3:60:CC
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer:       /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number:          011F
Signing time:             Fri 17 Jul 2026 06:58:02 +0000
Manifest this update:     Fri 17 Jul 2026 06:58:02 +0000
Manifest next update:     Fri 24 Jul 2026 06:58:02 +0000
Files and hashes:         1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: S94fTnPOtMGPn390XOwS7eXtdwOy9UT+Dry15d1DZz4=)
                          2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
        Validity
            Not Before: Jul 17 06:58:02 2026 GMT
            Not After : Jul 24 06:58:02 2026 GMT
        Subject: CN=6a59d27a-c239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:27:64:3f:f8:8d:42:18:e6:66:9a:f2:ee:
                    92:7a:f1:17:e3:58:fe:0b:c1:8f:00:d8:da:e2:5e:
                    7c:13:fd:6d:98:d5:2a:4a:cf:05:8e:1c:dc:ee:43:
                    4a:47:3a:2e:aa:43:94:e6:8c:73:7b:6d:75:cc:05:
                    90:8a:3d:da:07:5b:12:ad:33:19:f0:84:56:a8:d7:
                    2d:80:23:a1:48:2a:81:7b:02:d6:9a:85:2a:4a:0b:
                    76:59:6e:11:a1:ee:b6:57:60:4a:ae:a7:77:1b:a0:
                    7d:25:cb:72:e3:8e:3d:de:09:1c:19:9f:68:e1:02:
                    a8:a6:8c:8c:e4:37:63:ec:05:6e:6b:27:f2:db:b0:
                    f8:0c:58:57:b6:ea:6b:f3:e5:39:7f:33:97:7f:c5:
                    dc:42:9a:4d:2b:1b:a7:93:0b:e6:19:df:00:dc:55:
                    4d:97:51:ce:a0:8e:e1:f5:89:e3:a1:6d:ad:f7:e1:
                    f6:19:61:04:b1:80:42:1a:a1:eb:4a:7e:1b:1e:3d:
                    9a:fe:1a:54:76:39:ae:f1:6a:b2:41:3f:80:5b:ec:
                    7a:62:9b:86:94:9b:51:78:07:4b:cf:cd:66:94:b2:
                    f8:84:ea:fa:cf:90:b2:e9:c9:39:a3:ba:34:cc:aa:
                    5a:e8:c4:f3:a0:52:5b:4a:80:73:4d:81:61:55:79:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9A:33:E1:46:44:05:20:FC:46:43:93:AD:F9:12:83:3A:D3:60:CC
            X509v3 Authority Key Identifier:
                keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:92:b8:17:0b:1b:7d:04:00:3c:e6:9c:ca:2c:7b:0f:97:5e:
         b5:25:fe:1b:91:e7:eb:89:b5:ba:20:d4:02:3e:e0:0a:ef:df:
         b5:0c:ca:e5:bc:f4:85:83:81:e9:c5:52:a9:e4:a2:27:d0:3e:
         2d:9e:39:80:6c:89:c5:f7:69:eb:ab:80:01:2b:f1:c7:62:63:
         76:64:64:84:29:a7:2a:ea:4f:c8:94:23:86:88:31:b5:19:11:
         b8:12:e3:6f:d5:97:52:f1:30:f3:ca:f8:1c:8b:7c:52:d6:b1:
         f2:bf:71:34:d9:39:6f:e9:69:ba:31:17:dd:4e:d7:08:40:82:
         8a:26:28:9c:eb:5f:c5:39:8a:c5:a6:e1:02:44:a2:98:14:51:
         96:5b:e9:6b:f0:29:45:da:0b:31:ee:09:25:a4:e9:f3:ae:a7:
         e7:75:38:2f:b3:26:20:f6:5e:19:69:ea:d9:dd:76:0e:9c:71:
         87:07:7f:23:3a:61:ac:96:50:27:c7:e3:47:e5:73:8e:95:4e:
         83:e9:b5:fd:21:c9:6b:40:44:72:4e:8d:00:56:63:77:32:c5:
         59:c3:fc:f6:16:e1:67:4b:dc:df:0a:6c:d9:3e:ba:39:00:1e:
         4a:80:c7:42:9a:d7:8e:17:1c:05:da:7a:5f:16:d3:86:6b:7c:
         0f:bc:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:30 2026 by rpki-client