Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
File:                     uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json)
Hash identifier:          Vlnt8d4wgelql1DqKrWlvYCiSh5GvI9JyCUx9dp8+XQ=
Subject key identifier:   86:69:38:09:EE:31:6A:13:43:9A:AB:5C:3E:14:26:35:5F:C5:72:15
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Certificate issuer:       /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial:       1003
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
Manifest number:          0FF5
Signing time:             Sat 04 Jul 2026 17:31:56 +0000
Manifest this update:     Sat 04 Jul 2026 17:31:55 +0000
Manifest next update:     Sat 11 Jul 2026 17:31:55 +0000
Files and hashes:         1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: ErChKNLy/swJHx7Z00TE9qWk1UmuCDGz4J2GLz6ulcw=)
                          2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: OjM1bFnCHb2Nbpu1zaIXajiz/Q+c8E0n3J971ErzXps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
                          rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 17:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4099 (0x1003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
        Validity
            Not Before: Jul  4 17:31:55 2026 GMT
            Not After : Jul 11 17:31:55 2026 GMT
        Subject: CN=6a49438b-3e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:ee:fe:c4:f9:e7:36:29:98:55:93:fc:05:
                    36:1f:80:56:2c:6c:14:78:56:20:25:48:a9:03:a2:
                    38:53:20:60:3f:a6:51:8c:48:12:98:92:9c:1c:f1:
                    cf:1a:ae:cd:4a:a4:d0:83:73:6e:44:97:ba:40:73:
                    24:8c:3a:9e:bd:7c:5a:7a:9c:18:97:0c:a2:21:78:
                    a7:12:14:ba:60:75:d1:08:8e:11:02:48:79:20:a8:
                    ae:3e:09:ef:5b:3e:8a:00:26:13:ea:c5:f1:65:3a:
                    b0:20:e5:a4:cd:1a:c3:6b:5e:14:3f:7b:2c:6d:d6:
                    89:91:61:93:f5:c2:2f:95:ae:d8:65:00:f0:d0:cd:
                    7c:70:10:72:5f:7a:f8:fa:d9:72:34:42:fe:e2:e8:
                    e9:80:62:66:c6:56:60:03:8e:4b:71:92:af:f8:1a:
                    72:b9:86:89:d8:d8:0a:a4:f8:da:1b:95:e8:68:d0:
                    39:e1:09:ed:74:af:34:8b:9e:f2:e8:17:d6:d9:80:
                    7e:14:11:3e:b4:63:eb:8e:0c:8a:c6:7b:f1:38:af:
                    1b:55:1e:01:aa:05:36:05:f7:05:19:0a:41:66:b1:
                    b9:75:df:c4:fa:e5:47:25:5d:a1:db:ef:e9:71:04:
                    f3:72:99:9c:28:22:81:3d:7f:cc:4b:c2:3f:fd:f0:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:69:38:09:EE:31:6A:13:43:9A:AB:5C:3E:14:26:35:5F:C5:72:15
            X509v3 Authority Key Identifier:
                keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a7:b3:1e:41:81:2f:3e:db:ce:a1:b4:2f:76:2c:54:23:38:
         ca:62:1e:a1:b7:13:42:e4:59:e7:e8:5c:b4:21:19:41:02:5b:
         67:af:c8:b5:78:41:69:98:2b:72:07:d8:a0:99:ea:8a:1a:b7:
         12:e7:05:b8:15:cb:8f:96:9c:14:15:ff:c9:1a:64:7f:82:c5:
         75:86:f4:2c:90:52:6d:bd:6b:59:94:e9:7d:f8:34:8b:7b:2b:
         59:87:db:8e:5f:28:8b:10:79:a8:d1:20:35:5b:36:1c:43:d0:
         b6:d5:de:66:f6:2a:85:eb:b8:9d:7b:42:f0:c5:b1:7f:f2:4e:
         78:65:cd:d8:4d:82:61:40:fb:9f:9b:d7:f3:3b:33:61:9a:96:
         c1:ab:65:64:57:82:84:a3:36:ed:eb:70:f3:4b:8d:dc:51:19:
         1d:32:3a:7e:da:90:74:ca:9f:c7:cf:55:30:54:cf:1e:05:fc:
         00:f9:14:c5:33:75:8f:39:01:3a:36:f9:f5:fd:75:67:52:87:
         2a:06:f7:c9:ac:f9:14:2f:00:6c:fc:ef:ce:47:0e:8c:42:5c:
         39:71:a6:dc:b4:61:fb:d8:a8:b7:c6:a9:6e:9f:bb:02:c8:cd:
         89:aa:c6:a6:fe:5e:30:4f:cd:20:46:cc:1f:58:cb:1a:1b:73:
         e9:ee:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 08:54:37 2026 by rpki-client