Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File:                     UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier:          MTunqAh6xwiZNHTyIQ70fbrB+imzJUu4T1BTG4QsthI=
Subject key identifier:   94:72:AE:AE:17:BC:0D:8A:2E:B0:46:A0:67:D0:08:87:99:27:34:5B
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number:          8E
Signing time:             Tue 21 Jul 2026 09:36:14 +0000
Manifest this update:     Tue 21 Jul 2026 09:36:13 +0000
Manifest next update:     Tue 28 Jul 2026 09:36:13 +0000
Files and hashes:         1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: GR1fT14UGT4CX894P5fB622F0HzG5zkr4dYsd2GEYxQ=)
                          2: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
                          3: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
                          4: aAHMO22bHQG5LOPpqrF7ua5WkJ4.asa (hash: IFycOPEAyAwSUWTAfBkBDROqmeMzJaDfpcOHk15E1gE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
        Validity
            Not Before: Jul 21 09:36:13 2026 GMT
            Not After : Jul 28 09:36:13 2026 GMT
        Subject: CN=6a5f3d8e-e74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:bb:3c:03:76:b8:db:21:bc:17:56:df:3f:
                    e0:4d:10:06:57:da:1b:ad:86:86:13:a5:5c:5c:a6:
                    26:fc:55:f3:4f:da:b7:3f:d9:f7:d3:81:10:95:1f:
                    b4:e8:df:c4:e1:5e:fa:1b:37:a3:f2:c1:1e:8e:78:
                    82:24:4f:d0:c0:c5:51:b4:e2:30:f2:31:4c:90:f9:
                    b6:92:b0:dd:a2:be:78:3b:b2:98:b9:9f:a3:c2:f9:
                    1f:59:cb:6c:5d:a2:0c:3d:24:bf:eb:a4:af:a7:2f:
                    ec:ce:c5:3d:fa:be:66:b0:9e:fc:2e:c8:dd:d1:75:
                    63:0c:2b:d8:47:23:32:1f:4a:b4:a4:07:6d:26:57:
                    34:cc:37:69:fb:ee:0f:a9:7f:57:e6:5f:ff:4e:bf:
                    a1:73:bb:0e:a4:7a:df:be:6d:dd:33:ed:9d:67:3c:
                    c9:e9:50:a7:b7:45:01:84:4f:29:e1:a4:79:55:97:
                    59:ce:b5:01:38:0f:21:9d:b2:a3:0e:25:84:20:a8:
                    60:5e:12:75:cd:4c:b2:2f:e8:ae:49:d8:a1:9d:f9:
                    99:c9:7f:4f:be:ec:5d:c0:56:7b:53:83:48:e0:d7:
                    a5:36:2e:00:2a:c5:6f:90:ce:a6:05:db:91:bf:34:
                    a7:12:0f:ef:3e:e2:bf:ac:88:51:0c:83:03:6f:c0:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:72:AE:AE:17:BC:0D:8A:2E:B0:46:A0:67:D0:08:87:99:27:34:5B
            X509v3 Authority Key Identifier:
                keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:d4:57:bc:41:c9:f3:67:a3:3f:80:50:fa:34:5a:c4:77:
         2d:7c:24:3e:3e:fb:e0:c4:6c:1d:c6:d3:ad:f2:dd:e4:73:1b:
         43:c8:b6:cc:23:cc:33:06:4a:3d:27:6c:c7:93:5f:e9:2b:65:
         e3:12:68:57:58:7a:50:ae:9e:bc:b9:44:e4:99:6a:a3:62:98:
         9d:f5:26:2a:77:d5:04:d4:6a:5f:70:df:c9:e4:9d:7d:be:d6:
         ae:07:64:cd:9e:c9:61:ca:25:06:f5:af:53:36:20:c2:8e:4d:
         44:d5:92:05:9d:e3:ed:9e:10:78:17:3a:ca:ab:ae:c9:dd:12:
         05:8a:d6:1b:e2:f2:b9:51:3d:1a:fe:a9:04:ad:6e:9d:8b:35:
         71:c0:b1:04:92:7d:99:30:35:ef:f4:4c:9d:27:c3:3b:9b:f0:
         e0:a2:2d:c9:fb:65:5d:14:d7:d1:91:a7:c7:7e:10:24:4b:06:
         c3:3b:1f:b0:87:4f:01:11:e0:78:1b:2b:ae:4a:5f:6d:86:d8:
         f0:ab:74:ac:b7:58:cc:9e:ab:a2:dc:88:e1:2e:a2:3d:99:5a:
         80:00:cb:bd:38:0f:b2:e0:54:8d:0b:06:b9:03:bb:b0:92:ef:
         b7:db:e5:51:4b:d9:da:b2:aa:00:0a:2c:4f:78:de:56:42:50:
         1e:aa:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:28 2026 by rpki-client