Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
File:                     uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json)
Hash identifier:          42MFkcPjz2jRHQuMfak26ggQTSAYgzyEdkikWgls1Ak=
Subject key identifier:   DE:02:5C:66:6B:72:9A:78:2C:91:61:CD:0A:92:A3:40:72:08:2F:FC
Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6
Certificate issuer:       /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
Certificate serial:       0703
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
Manifest number:          06FA
Signing time:             Mon 22 Jun 2026 22:11:28 +0000
Manifest this update:     Mon 22 Jun 2026 22:11:27 +0000
Manifest next update:     Mon 29 Jun 2026 22:11:27 +0000
Files and hashes:         1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: TMj2jzUEYz3pzyeDohRZHyh5VNp2jaSTQc9zaQVcm5Y=)
                          2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: WEocqNvrRyuFFKjSswYmNwuGRkO3pMFe5mW53SjLZDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
        Validity
            Not Before: Jun 22 22:11:27 2026 GMT
            Not After : Jun 29 22:11:27 2026 GMT
        Subject: CN=6a39b30f-e0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:64:e1:ff:bd:5d:be:18:3a:b9:97:f2:10:
                    7a:1f:09:b1:ae:8f:a8:77:b6:85:7a:b5:48:6f:aa:
                    29:6c:0e:2f:91:16:50:8f:8d:28:57:f8:1a:45:cf:
                    37:c5:73:0f:35:53:21:fd:67:f0:2d:c4:df:68:93:
                    ef:ce:54:01:ac:51:4c:f0:2f:9b:7c:a6:fa:16:20:
                    48:8d:01:b4:f0:6b:bd:0d:24:aa:fc:73:f8:a5:32:
                    09:91:e6:dd:45:67:36:74:5f:e8:f1:e4:b0:07:37:
                    27:ae:c9:b7:1a:91:74:23:93:79:06:ef:e0:ed:09:
                    43:ea:9b:a8:d6:e2:17:2c:62:fc:c7:65:09:79:e9:
                    6c:c1:d5:4e:0a:15:9d:c0:87:65:cf:e2:7f:6c:af:
                    c5:0c:6a:e6:07:c4:08:28:ec:98:bd:94:d6:62:99:
                    27:78:65:0e:8b:96:e6:3b:e5:58:7f:c3:19:f6:c3:
                    7c:49:ee:c0:08:29:2e:a2:25:11:dd:d5:5b:4e:a4:
                    b7:c8:e0:1d:9d:a0:71:6f:d2:53:51:b2:c2:d8:6b:
                    d4:1b:ec:d8:ac:bb:43:27:d6:b5:23:80:82:ba:e9:
                    73:b3:59:d3:8f:3d:c9:0e:d6:da:e3:eb:b6:b7:06:
                    58:f9:30:5b:67:60:f6:93:cc:ff:31:67:88:39:e5:
                    3b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:5C:66:6B:72:9A:78:2C:91:61:CD:0A:92:A3:40:72:08:2F:FC
            X509v3 Authority Key Identifier:
                keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:08:f1:cf:6d:3b:61:67:c6:0d:04:ea:89:62:aa:49:e1:74:
         37:b6:41:c1:4f:c4:f6:3b:89:43:0f:74:e1:c2:dd:f3:a0:04:
         ef:5d:d1:c6:50:48:89:ee:50:71:77:11:9d:64:d7:11:e3:74:
         7c:71:09:24:cc:a3:73:9f:a0:c9:38:a7:2e:ce:bc:ff:b6:06:
         aa:2b:28:24:25:68:38:07:88:7d:5a:a5:1a:41:44:3f:91:bc:
         2d:01:75:2a:00:43:ab:7d:5b:42:9e:82:94:1b:66:ea:eb:09:
         78:df:6b:e1:1e:83:a9:2e:77:ee:a2:54:04:7c:6e:a7:b9:c9:
         b9:2d:f6:af:4a:8b:5e:ad:84:af:85:75:c6:f3:02:48:da:1d:
         66:9c:07:eb:50:50:e1:71:9d:37:b1:9d:64:6b:04:c4:36:4a:
         98:6c:e0:ef:ab:89:50:cc:63:56:d5:e2:4b:aa:20:e8:ba:c9:
         7e:3c:a5:33:58:e5:c2:7c:49:89:18:45:86:6e:d9:d7:56:68:
         14:39:50:55:67:59:50:8f:f2:00:d2:48:09:a3:8d:64:c5:bf:
         90:28:0c:ca:b2:28:ad:ab:76:6d:c1:cb:fa:cb:b8:f7:e4:fc:
         ec:99:f9:e0:2d:1b:63:b8:32:92:3b:dc:bb:f8:d8:ea:2d:d4:
         99:f9:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:05:26 2026 by rpki-client