Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File:                     1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier:          bZRtJHEHetr2KrSI0yx8cFZyAlSwhe/vpqo93TAoKS8=
Subject key identifier:   E6:D2:E9:EF:37:4D:13:F6:03:96:10:8F:81:18:14:7B:A9:4E:26:8A
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer:       /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number:          01B5
Signing time:             Tue 21 Jul 2026 05:26:12 +0000
Manifest this update:     Tue 21 Jul 2026 05:26:11 +0000
Manifest next update:     Tue 28 Jul 2026 05:26:11 +0000
Files and hashes:         1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: 8RCadn5UgnoJhoir9jaaKSy6RFJ2sx9jcWeT3t1PIe8=)
                          2: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=)
                          3: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=)
                          4: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
        Validity
            Not Before: Jul 21 05:26:11 2026 GMT
            Not After : Jul 28 05:26:11 2026 GMT
        Subject: CN=6a5f02f3-56ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:6a:29:9d:e0:db:64:f7:ed:7a:6d:7b:c1:
                    7e:86:8b:17:e7:f7:4f:d7:7d:a9:7b:6d:99:1b:c9:
                    82:d0:fd:d8:d5:93:64:36:3d:e1:3a:aa:92:0d:2b:
                    c7:96:d5:fd:5c:4e:de:a4:dd:4c:58:bd:75:bf:52:
                    aa:1b:bd:4d:48:b9:51:52:7c:02:6e:ed:f9:33:97:
                    84:e1:0e:1e:33:13:33:9b:15:d3:ff:2c:0c:9b:a9:
                    94:b9:80:d5:66:e3:6a:b1:d4:95:9c:da:d3:9e:d0:
                    d8:3c:fa:85:12:1c:3e:f9:c1:03:1b:51:e1:6d:28:
                    07:b8:ad:d6:3e:82:ad:0f:ae:a0:6e:cc:2a:82:b1:
                    d9:e4:56:90:66:44:ac:4b:83:3c:3d:7b:93:57:31:
                    b4:ea:c3:f6:c8:13:ab:a5:88:5b:71:47:61:fd:c9:
                    3e:05:5d:a1:a0:2f:1f:a7:51:ad:2d:f0:0c:2c:da:
                    44:f1:b6:dd:51:00:4b:78:32:47:b2:d4:a8:ab:ab:
                    82:2d:b4:57:b1:c3:96:e9:3f:51:d9:4d:e5:c5:1c:
                    cb:b7:10:dc:d1:be:a7:fe:21:87:12:3b:b3:c0:8a:
                    9e:9b:c1:75:66:9c:e3:61:1a:56:a9:ba:a7:2e:19:
                    51:19:e0:07:7c:86:a6:06:22:04:96:a7:48:ca:96:
                    9f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:E9:EF:37:4D:13:F6:03:96:10:8F:81:18:14:7B:A9:4E:26:8A
            X509v3 Authority Key Identifier:
                keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:61:c9:95:d9:d6:c5:f3:64:b4:20:da:d2:f1:ed:4c:fe:
         c5:77:04:a3:d2:28:38:aa:42:4c:81:18:74:a5:c8:6f:cb:1c:
         6f:c5:0f:88:1b:0f:08:e8:04:22:82:e0:66:d1:15:ae:17:e0:
         18:f2:2f:ae:46:50:85:a6:af:f9:7b:b2:83:fa:6e:f3:e6:86:
         8d:d7:8d:d1:11:37:cf:18:91:3c:3d:b3:75:ce:f8:eb:55:fa:
         12:74:01:5e:2b:fb:b2:8a:a1:aa:ab:9d:54:89:1c:9e:de:96:
         23:da:1f:bd:76:87:e1:20:d4:bb:db:81:ac:1a:82:35:c5:a7:
         da:ed:da:2d:20:07:32:b2:7c:f2:41:c6:f3:2a:35:0e:3a:e6:
         0c:51:ba:78:27:98:c4:24:e1:a8:16:37:61:c8:05:d9:75:f9:
         ca:0c:da:be:8b:39:69:13:bf:10:0d:49:20:a7:a8:7d:06:12:
         e9:48:30:61:76:ff:25:bb:82:f0:b7:c8:e3:8b:e9:64:b6:df:
         23:6b:e3:b5:53:4e:d0:c5:7b:6b:0c:31:88:1d:5e:9a:1b:ce:
         ee:43:82:22:0d:73:d6:f8:68:17:90:77:a0:c8:fa:99:f5:ad:
         4b:f8:1e:be:54:03:f0:a3:f7:88:19:be:aa:da:81:66:33:d1:
         57:6f:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:06 2026 by rpki-client