Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File:                     Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier:          75MdrIvUtyufDtZo4OCGyHaAWeoSfzexqOp53W5HyWI=
Subject key identifier:   18:DE:EC:EB:14:F2:A4:86:DD:1F:F3:C9:C4:5E:0D:8D:AD:0B:AF:56
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer:       /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number:          81
Signing time:             Tue 21 Jul 2026 09:31:41 +0000
Manifest this update:     Tue 21 Jul 2026 09:31:40 +0000
Manifest next update:     Tue 28 Jul 2026 09:31:40 +0000
Files and hashes:         1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: BFoyu7FhWgopnI4DxOxv+dUXPnqwEegX03+/jl0leAg=)
                          2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
        Validity
            Not Before: Jul 21 09:31:40 2026 GMT
            Not After : Jul 28 09:31:40 2026 GMT
        Subject: CN=6a5f3c7d-ec05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:29:48:9c:0a:91:d5:5e:ba:f6:7b:89:d4:
                    40:08:1d:e6:5c:98:1b:bc:b3:85:dc:12:84:12:07:
                    9b:36:97:fa:bd:06:91:cd:ea:4f:ce:ed:11:d5:66:
                    13:b2:4c:6a:e2:0e:03:47:84:d6:dd:0f:f2:77:d1:
                    61:be:a9:38:ea:88:12:99:b1:30:d8:a2:4d:3a:ca:
                    d6:c4:f9:b4:bf:77:67:5e:d3:ae:6c:03:14:f0:01:
                    39:19:8a:73:58:4e:26:95:8d:7b:ed:a2:5d:b1:02:
                    b3:17:e8:b8:87:c6:0b:b0:36:9a:a6:4d:bb:ac:89:
                    3f:34:eb:cf:b6:63:69:22:f2:f8:94:97:ce:a2:7d:
                    d7:2e:67:a1:a1:7b:5b:1b:46:3d:b7:40:20:95:ea:
                    51:c5:ad:cf:47:84:0e:6e:4f:ed:3c:96:2d:b4:0f:
                    f1:cf:30:a4:9d:26:20:e7:d2:31:01:15:24:3c:eb:
                    b1:1b:7f:c3:47:0e:5b:5c:1d:a2:18:f2:7e:2f:cd:
                    1d:0c:0d:79:5d:b3:b7:a5:3a:52:de:7f:c7:0e:c0:
                    16:f2:6a:2c:49:35:22:c5:0e:24:69:72:4b:a9:4e:
                    76:13:5a:55:c6:9e:c9:09:be:13:b8:63:f4:b3:95:
                    54:eb:27:56:26:f1:38:31:17:0f:c6:77:5f:a0:02:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:EC:EB:14:F2:A4:86:DD:1F:F3:C9:C4:5E:0D:8D:AD:0B:AF:56
            X509v3 Authority Key Identifier:
                keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:47:f9:91:0c:9e:70:10:7a:47:a9:ac:f5:ac:09:5e:6d:9d:
         7b:68:e3:0e:8b:df:42:c0:a0:8f:13:0f:ad:c6:58:03:b9:fa:
         da:65:16:78:9e:45:45:9a:72:4e:c8:7c:5e:75:22:1b:d3:55:
         ad:42:1c:11:97:ce:dc:e7:18:c5:e0:a3:55:79:f2:2f:37:05:
         bb:e5:86:52:32:63:10:67:cf:09:4e:21:e6:c2:f5:82:2e:75:
         86:12:c9:65:ca:ce:75:da:b3:80:9e:68:c4:a3:9e:89:05:b3:
         10:95:d6:25:2b:6c:d4:53:95:b9:61:a0:d2:5c:09:c4:a9:f7:
         eb:65:82:08:af:bb:a1:a3:98:0a:5b:94:75:66:52:82:28:60:
         f4:75:1a:9a:28:c2:b1:23:a0:d4:e4:6e:fb:ea:6e:5c:5c:07:
         3a:4f:f1:b1:ee:9e:d0:2d:05:e3:02:1d:b0:97:07:73:6c:2e:
         8a:49:6a:80:a1:7f:a7:82:4c:47:d7:e6:12:9e:58:87:4f:83:
         c5:bf:93:00:11:d0:00:2f:e1:8c:be:e6:ba:da:85:48:9c:e7:
         4e:ea:23:13:a1:69:dd:3a:09:a1:8f:2d:03:04:81:31:1a:54:
         7e:ba:5d:71:83:a2:82:ac:92:87:9d:12:f3:22:6d:4a:4e:96:
         8f:79:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:23 2026 by rpki-client