Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          v2P8T+iYBwiQzDhCg/SW/tNW9dSvrloGXGAVXcSdSp8=
Subject key identifier:   A0:D0:A2:8E:43:7A:96:4A:B8:51:D8:6C:49:4C:6E:BD:90:91:D9:4F
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          CD
Signing time:             Fri 17 Jul 2026 07:58:57 +0000
Manifest this update:     Fri 17 Jul 2026 07:58:57 +0000
Manifest next update:     Fri 24 Jul 2026 07:58:57 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: /SpDQOLHe9GxN/9yJ3cWJ3/6c97SI61MrcTRkh14B1o=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: HFBzqsB1ywMD+JWUEHOpXWYJ4PzPIFvuRP9SLPHmgeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Jul 17 07:58:57 2026 GMT
            Not After : Jul 24 07:58:57 2026 GMT
        Subject: CN=6a59e0c1-482e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:ce:84:57:59:63:67:69:53:a6:6d:3f:03:
                    24:d6:68:a7:69:1a:f2:77:c7:09:a1:75:e0:d3:e7:
                    c2:be:72:10:23:e1:8d:29:d8:fb:95:11:20:29:68:
                    46:22:98:04:90:f3:af:34:ed:06:b4:07:a8:71:66:
                    c1:e5:c5:43:08:ea:3d:26:44:a5:ae:71:11:d3:74:
                    38:53:47:c7:92:c8:db:4c:b1:1a:cf:78:25:9c:80:
                    ee:42:d1:64:5c:88:0a:b2:15:93:b0:78:f7:d8:7a:
                    44:3e:7e:c0:06:29:48:6e:ec:a2:ed:e6:46:16:b8:
                    3a:7c:60:44:89:46:a7:42:f8:02:b5:22:d8:c9:03:
                    ae:bd:94:1e:82:38:18:4e:6c:76:3f:d9:88:f4:71:
                    0f:fa:7d:19:68:06:7a:81:b7:62:09:78:04:e0:64:
                    a6:0e:45:cb:93:0a:96:4a:b5:ab:b8:5b:1b:94:3d:
                    a9:55:c4:b4:a6:76:81:ed:fe:28:d3:31:9c:24:c3:
                    34:40:c7:97:0b:bb:db:01:ec:5f:95:f2:eb:0c:47:
                    51:b3:0d:d7:93:a0:c6:87:d5:cf:f6:e2:29:24:35:
                    39:09:2d:0f:2e:83:c3:d3:9b:23:62:4e:a4:fe:db:
                    dd:fc:62:bc:99:4a:ed:2e:9a:e9:f4:8f:79:b7:a3:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:A2:8E:43:7A:96:4A:B8:51:D8:6C:49:4C:6E:BD:90:91:D9:4F
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:16:15:96:a4:0d:77:c5:6d:06:42:47:04:df:62:a2:d4:b9:
         84:dd:02:a5:df:af:9b:97:9d:49:e2:aa:70:2b:96:b6:39:14:
         32:ed:dd:b0:32:bd:c1:d4:7d:ba:f0:06:34:89:09:1d:cd:35:
         04:31:23:98:75:14:fd:3b:77:16:ef:59:54:20:cc:00:17:53:
         a4:b8:d7:2e:ae:4c:f3:30:cf:b1:2b:0c:b0:68:88:2b:24:92:
         6c:8f:24:4a:05:30:54:7b:08:e1:53:3d:0d:fe:55:2d:75:fd:
         5d:3b:18:40:68:66:73:99:27:22:95:c1:95:00:42:00:1c:08:
         94:5b:99:d1:63:2a:22:2e:c6:d1:e6:24:3d:cb:b0:02:8d:66:
         19:06:ba:d1:9a:7a:c2:6c:8b:db:a3:b5:df:30:4c:8b:0f:cf:
         ae:16:95:a2:8a:37:8c:43:33:b7:a2:24:b7:14:7d:8a:a4:2d:
         c2:6d:79:f5:09:ea:f8:be:c0:48:d7:c2:58:4c:61:ed:71:da:
         21:69:89:a3:d3:45:7d:7c:cc:79:71:ce:74:d7:8f:d9:b3:8f:
         f2:32:37:d8:f5:f4:e9:c2:59:8d:48:de:94:c3:ac:92:c0:d2:
         e1:c3:0d:e3:3d:96:4d:66:c6:b6:63:78:19:37:ab:15:15:ba:
         a9:2f:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:32:15 2026 by rpki-client