Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
File:                     uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json)
Hash identifier:          YzL1i4TZoijElnye8eiWeyDaWjR1D3ki1lVpWbN4RiI=
Subject key identifier:   E9:DC:3D:93:A4:D5:D8:EC:CD:FA:28:6C:8C:0D:F8:35:69:6E:C0:5C
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Certificate issuer:       /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial:       08CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
Manifest number:          08AB
Signing time:             Sun 26 Jul 2026 21:10:24 +0000
Manifest this update:     Sun 26 Jul 2026 21:10:23 +0000
Manifest next update:     Sun 02 Aug 2026 21:10:23 +0000
Files and hashes:         1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: 4O1UF5E4qF4MO+KCauGqlMr0uTzKWUea+3MgmtghmcA=)
                          2: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qaJjlXwaj9JptzN90zbu/ByDY7c80MUFCf+ZwtqowYg=)
                          3: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: jxl3GtZdPk/wIlS8xEDXVQsh03gFjRHfreaaVHkcJzI=)
                          4: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: ZkPeqkCK4GzWM6lROTZZvtSHrWSOnvfHR71wg6XscYk=)
                          5: 709F917AF74111EF98C99938C4F9AE02.roa (hash: eYc05p+UNzblqab1mmE9/I2cp5gOiQU4HhXVCP3mmJg=)
                          6: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: 2UKR5Ne+INL3gYP5vC9gTKEWBFAKo4pvwX1cl9KzfiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
                          rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
        Validity
            Not Before: Jul 26 21:10:23 2026 GMT
            Not After : Aug  2 21:10:23 2026 GMT
        Subject: CN=6a6677bf-bd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e9:62:46:27:d8:7d:d2:72:cb:d0:22:79:af:
                    d0:09:fd:07:ee:07:88:69:eb:76:f5:fa:51:8f:34:
                    56:96:f4:eb:ec:9d:2e:cc:84:38:8a:dd:36:bd:ea:
                    c9:f8:71:e6:a5:a4:43:28:34:9c:2e:1a:13:45:aa:
                    03:d4:93:2f:9f:30:f8:e5:ca:3f:e3:9b:41:16:a6:
                    a1:b0:4e:b3:f1:d6:e2:1a:57:1d:ec:27:16:ee:a1:
                    61:52:cd:8f:a8:7c:d8:6f:f2:80:14:5e:3e:e5:6a:
                    27:45:eb:5b:de:43:c3:cc:e5:cd:02:29:51:69:81:
                    eb:27:c6:59:8c:cb:f9:21:0e:e1:24:3d:bc:32:23:
                    ff:1f:41:7a:26:0f:52:61:fe:8f:95:61:52:b1:96:
                    ee:5d:fc:7d:bd:9d:53:c1:30:12:ba:13:f0:5f:e4:
                    67:a5:a6:21:64:de:fa:b7:12:ac:66:ba:94:ef:20:
                    cb:98:71:73:00:3f:92:c9:94:4d:82:be:6b:cd:bd:
                    87:cb:18:55:d7:7d:b5:a4:e5:48:cf:5e:01:38:af:
                    9e:e0:8b:b5:7b:eb:cf:5d:be:30:f4:68:2d:3b:6f:
                    7f:0a:39:2f:53:04:66:60:2c:a8:76:ea:2a:0b:99:
                    2f:55:b1:83:11:bc:89:d4:a1:13:71:5f:c0:68:7f:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:3D:93:A4:D5:D8:EC:CD:FA:28:6C:8C:0D:F8:35:69:6E:C0:5C
            X509v3 Authority Key Identifier:
                keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:b5:04:0c:02:95:52:6c:bb:a4:f8:0f:ee:25:a0:4e:08:
         cd:09:c6:ec:cd:46:33:d4:dc:33:5b:b9:0d:5e:6d:15:f8:f1:
         cc:78:fa:be:fb:8d:52:e2:7d:02:0a:32:29:48:fc:2c:0e:56:
         36:fa:0c:69:83:50:95:4d:6b:e5:85:4c:37:bc:f6:16:88:ba:
         26:09:fe:5c:d2:76:aa:8b:c9:79:32:ab:77:93:c0:e9:ea:85:
         1d:9c:e2:85:ae:74:88:88:12:8c:67:ab:69:ee:6f:a1:ee:83:
         42:3b:c9:0e:cd:43:37:01:20:5b:4a:f3:f9:2b:93:e4:be:db:
         f7:48:1c:38:76:cb:3f:e3:78:37:a8:7a:b1:fb:b3:87:ee:90:
         d1:61:8c:cf:97:8e:61:a9:41:72:75:e1:53:97:06:64:0e:6f:
         75:7e:f6:2f:4b:13:df:dd:0c:35:86:04:6d:a1:46:09:67:76:
         df:a8:d8:13:af:28:d7:58:46:54:dd:9c:3c:d5:0c:67:1c:02:
         aa:16:c1:ae:b6:06:4a:d9:4b:98:43:b2:80:f0:71:94:5c:d9:
         bb:7c:3c:dc:5d:e7:5a:e0:20:55:20:42:d5:dd:34:97:2c:40:
         29:4b:c9:7d:20:0f:a8:c2:3e:37:9f:85:d3:88:83:b3:33:a3:
         aa:54:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:50 2026 by rpki-client