Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          2JqIcPOPXzBROTfqlE1GCjvLf7m3rM5UTHQyyxz3JGQ=
Subject key identifier:   34:59:58:CB:1A:3B:4A:5D:9D:37:F5:B5:13:1F:C2:C6:5A:18:DE:55
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          01B1
Signing time:             Mon 20 Jul 2026 16:05:01 +0000
Manifest this update:     Mon 20 Jul 2026 16:05:01 +0000
Manifest next update:     Mon 27 Jul 2026 16:05:01 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: QeL03GTf6j0dcgNdytLJf98qF8ZA+vWEYMCbp39POq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Jul 20 16:05:01 2026 GMT
            Not After : Jul 27 16:05:01 2026 GMT
        Subject: CN=6a5e472d-5d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:b2:eb:86:72:2d:92:80:6e:18:d0:6a:d1:
                    25:7e:d2:fe:c7:8d:a2:ba:50:c7:0c:7c:93:0b:2a:
                    5c:a8:5d:2d:e5:94:e9:f3:86:a3:bb:f2:ff:20:23:
                    fb:ff:7d:cf:03:ea:df:a9:23:17:ed:62:f2:c2:b8:
                    8f:73:fd:e0:1d:fe:da:5a:40:0a:42:b7:5f:94:f5:
                    94:79:44:c9:b6:87:49:3e:5a:bf:ab:94:21:d2:21:
                    58:78:12:1f:c9:77:d9:a7:08:65:a1:a1:89:77:36:
                    b1:1b:15:08:6a:02:53:e1:a0:dd:b6:9b:3a:fe:75:
                    f1:cf:78:b0:d3:6c:6a:8b:98:73:c2:94:70:97:c7:
                    ac:cc:1e:e0:6c:43:be:75:56:8a:79:fe:6a:47:aa:
                    44:36:6c:7c:50:02:04:20:94:80:ed:07:1e:be:c2:
                    e3:aa:57:32:a7:61:33:b3:25:00:68:06:e7:c4:cd:
                    90:30:31:48:1e:e9:26:15:1d:f5:5f:24:8e:7e:0d:
                    be:de:2a:09:b3:ec:b2:ba:25:77:21:c0:0e:b1:e7:
                    0f:4c:aa:bb:f9:97:25:bb:ba:8b:d5:69:71:48:f5:
                    79:f2:ab:86:62:48:d5:ca:2d:c4:c3:1e:30:4a:8b:
                    31:38:b7:58:8f:05:d4:41:29:eb:63:d2:fc:04:d0:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:58:CB:1A:3B:4A:5D:9D:37:F5:B5:13:1F:C2:C6:5A:18:DE:55
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e3:31:56:d4:e5:0d:fc:05:2c:91:e5:53:21:96:de:e0:b1:
         62:8c:35:e4:7f:44:c4:0a:ab:1e:e7:ee:bf:7d:19:50:8d:bb:
         f4:4d:de:7e:c6:78:fe:09:10:8e:0d:31:c0:c2:e8:e7:73:8b:
         a6:d2:56:3f:27:8f:fb:44:70:77:da:25:1a:05:bd:fb:40:b3:
         b2:23:e3:72:8f:4e:07:59:69:eb:c2:ca:c0:96:1c:bd:e6:c6:
         e3:af:7d:7b:f4:f2:f5:b9:6f:63:0a:83:2b:74:89:54:51:55:
         01:95:76:4b:e0:f8:62:6f:66:6e:81:8f:7e:3f:0c:1f:de:8d:
         16:5d:59:b8:95:3f:50:ec:7c:8d:ab:84:64:4e:ff:c9:c8:87:
         86:ac:ed:c5:d8:3f:36:f5:db:a6:3f:d7:e2:a5:fc:43:3c:2f:
         4e:a5:6e:f3:be:6d:a3:82:b0:0c:2e:6e:0d:f5:ec:0a:1e:56:
         2b:3c:56:79:aa:cf:1a:11:c4:54:73:6c:0c:42:a7:3b:3c:27:
         b8:dc:e7:68:a1:48:f3:25:e8:0e:e9:f8:a4:f2:c5:cf:bb:73:
         43:11:4d:10:c7:01:ea:af:fe:d6:88:92:01:a1:71:f9:02:c6:
         5c:a8:7f:1b:97:2a:3e:7f:4c:46:d0:c9:5f:04:b7:84:8d:96:
         57:50:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:00:07 2026 by rpki-client