Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          K0yxNLESrF2VLssNoCZ4vFrC4Qm9dLYCfnmuksheV/0=
Subject key identifier:   57:FF:2C:4A:63:EB:65:DD:ED:DC:CA:13:B7:D3:46:00:11:62:90:D8
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          0181
Signing time:             Wed 19 Aug 2026 05:17:45 +0000
Manifest this update:     Wed 19 Aug 2026 05:17:45 +0000
Manifest next update:     Wed 26 Aug 2026 05:17:45 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: ftVRFL4TE3UFGcchxMP3KgcttrhCX80o3EYnHyDXH/U=)
                          2: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=)
                          3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=)
                          4: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: QYDMiyLsJUluSn0j67IjTBM2ewHLlzSGUigM47qc2ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Aug 19 05:17:45 2026 GMT
            Not After : Aug 26 05:17:45 2026 GMT
        Subject: CN=6a853c79-1b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:8a:84:a9:e4:f3:16:1c:8e:43:96:e6:1e:
                    8b:47:c4:7d:a1:ca:c8:8e:69:d4:9f:33:28:e9:8b:
                    22:22:bd:f7:d6:42:f1:c2:af:96:06:a4:b0:66:d6:
                    d9:e2:fd:f0:07:4d:4d:0b:3e:d9:21:4a:49:d3:73:
                    b9:e0:8c:50:69:b4:88:ae:98:74:4d:0f:a1:4f:09:
                    bb:e2:91:6f:bb:2a:1b:b1:25:ac:1f:d5:8a:99:e0:
                    c4:d8:75:26:9e:cd:a6:c1:fb:ec:f3:c7:08:74:f2:
                    be:3d:9b:d4:16:87:ff:8d:2f:87:fe:df:48:1f:c8:
                    91:9e:ad:a7:fc:6f:c0:95:3c:e8:46:61:f6:b5:5d:
                    d6:87:a5:5e:fb:2b:9b:7b:0f:47:e7:78:aa:75:87:
                    b4:b3:5e:12:51:09:1f:36:ae:e5:bb:59:26:c5:a2:
                    13:8c:8c:8f:b6:83:1d:86:14:59:75:1e:42:d0:f3:
                    4b:19:b7:fb:ff:5c:3b:22:ca:4e:59:a0:9e:8c:b2:
                    68:31:5d:33:5b:2f:23:a1:47:53:3c:2f:0c:54:8e:
                    c0:a6:73:a2:aa:39:05:88:ed:3d:7f:3c:e8:a5:2b:
                    e1:be:01:f5:b5:59:30:0a:90:88:8c:52:b7:94:e5:
                    13:3e:d5:a5:e0:8a:78:c7:1e:7b:c7:3e:c1:d3:2e:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:2C:4A:63:EB:65:DD:ED:DC:CA:13:B7:D3:46:00:11:62:90:D8
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:52:b4:57:00:5b:d0:29:43:d5:7c:14:44:21:ed:35:1a:71:
         2c:09:c3:4f:66:94:87:41:16:c9:fd:2b:07:5a:c2:da:a0:7b:
         61:eb:e8:96:3c:d6:f2:0f:6e:4e:b2:5d:83:cf:27:f3:b0:d0:
         cb:fe:cc:58:14:e6:51:09:99:df:3e:e0:64:87:42:37:48:b7:
         d4:da:12:55:3e:6a:08:f5:d8:81:59:09:f6:06:97:31:a4:9d:
         d3:25:57:c9:d7:4b:92:13:51:ed:5f:d5:fd:76:ca:e2:ef:1d:
         82:36:5f:bf:3b:c6:8d:e4:46:6d:1c:40:d0:60:30:c6:e2:e0:
         a0:f4:85:00:1b:be:f3:4a:5f:3e:ee:1f:b1:41:4c:5b:cf:98:
         3e:60:46:48:73:f9:fa:49:92:0d:fd:ea:a3:5c:a3:fb:fc:9d:
         3b:bf:89:ac:26:3b:90:e6:2a:9b:60:16:74:a4:5e:64:c2:74:
         4a:d2:8f:17:b6:70:f4:51:41:f3:d4:e8:50:6b:a5:e8:93:b6:
         bb:01:20:e7:5d:7a:89:4f:35:64:bb:7b:f4:2b:09:07:80:29:
         b2:e6:a3:a0:0d:eb:a9:3b:8e:78:99:1d:0f:d0:5c:7e:28:6f:
         b0:86:22:95:47:28:1a:f8:d7:dc:18:78:7d:e5:ef:d3:f2:8b:
         cc:6e:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:30 2026 by rpki-client