Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File:                     UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier:          T3YPZiIP6zfMmr9Ul3us4odKOc8SNAsDIA3/IUmZmxU=
Subject key identifier:   0D:3F:42:91:5B:81:E1:60:B6:97:E0:E0:55:01:AB:75:D9:3D:50:55
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer:       /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number:          0124
Signing time:             Mon 27 Jul 2026 07:44:51 +0000
Manifest this update:     Mon 27 Jul 2026 07:44:50 +0000
Manifest next update:     Mon 03 Aug 2026 07:44:50 +0000
Files and hashes:         1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: PzpRU3fIjGnqUbEhAAe52XIpRysDuC5bgnEPffB+Rd0=)
                          2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
        Validity
            Not Before: Jul 27 07:44:50 2026 GMT
            Not After : Aug  3 07:44:50 2026 GMT
        Subject: CN=6a670c72-91f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:ce:6b:a9:d1:37:e5:b8:00:d4:6a:99:bc:
                    d5:3d:39:26:b5:3d:f1:e3:05:88:3f:f9:48:27:aa:
                    81:69:fd:2a:ba:5c:35:65:73:a7:f6:c1:7e:e3:78:
                    01:fb:82:04:3a:c5:7a:e2:fd:a7:92:0d:c7:7f:05:
                    b8:12:37:c5:ac:31:2e:33:45:86:f2:d0:c5:1e:ba:
                    ee:3c:5e:5f:3a:39:a8:e5:0b:8a:21:d4:e9:81:2c:
                    cb:7e:af:30:80:be:de:89:ec:f4:69:68:e1:e7:61:
                    10:d8:86:6d:cf:0f:8e:a1:9e:23:78:32:30:26:2f:
                    18:70:b6:63:78:f3:47:da:d6:b2:c5:48:84:04:9b:
                    ac:8a:43:87:f3:99:8d:4d:c6:4d:fd:76:45:26:57:
                    d0:69:b1:b8:48:5c:f9:d0:b5:ad:60:62:38:ae:4b:
                    c1:22:fa:94:d1:71:19:54:79:f0:54:97:7a:9d:d8:
                    5b:10:4b:0e:a4:3e:f7:62:16:28:8a:30:8b:b9:b4:
                    24:d2:fa:49:c6:dd:bb:52:47:92:e5:42:b1:bc:86:
                    be:81:bb:26:6a:f3:3d:3e:88:f0:94:15:15:bb:f1:
                    cb:d3:45:3b:ec:01:5e:1e:81:3d:15:4e:52:d0:83:
                    bb:b5:40:bf:f4:39:34:fd:bb:b6:92:14:d8:d1:66:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:42:91:5B:81:E1:60:B6:97:E0:E0:55:01:AB:75:D9:3D:50:55
            X509v3 Authority Key Identifier:
                keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:17:27:c4:3f:1a:5a:f5:83:6f:db:0f:b1:10:a4:0e:33:
         f3:fd:5f:9a:4f:0b:32:45:f7:e0:aa:ec:c2:93:eb:ad:fd:04:
         be:75:28:e5:29:7b:44:d5:ad:ec:6e:20:d4:55:ae:46:12:40:
         39:b1:04:4c:86:00:d4:15:06:f9:21:85:5b:57:63:d4:cf:5a:
         25:f4:f8:d5:2a:7b:e5:1e:5c:69:fa:ff:45:55:4a:fa:20:7f:
         a0:dd:3e:05:35:0c:18:b5:1b:22:08:e3:80:1a:b7:11:21:38:
         ee:4a:bc:53:c8:b6:31:cc:ab:26:e9:be:0f:c5:79:56:9b:ec:
         64:42:f7:bf:6c:79:80:94:ce:f6:7a:a2:3d:23:14:80:c2:16:
         80:81:bc:b4:84:76:15:fd:7d:8f:9b:19:88:44:80:2d:ba:2f:
         2d:e3:01:77:16:71:cc:cf:78:9c:a2:17:53:bc:a8:34:bd:38:
         69:b0:bd:6f:b9:f1:20:f8:b4:d1:a6:d4:8b:65:54:92:e3:35:
         2c:52:9c:96:09:cf:f5:d4:02:3d:3b:b7:96:64:2b:f3:ba:0d:
         b1:3f:0d:ce:2f:6d:58:08:c0:18:16:1d:11:d8:93:c3:d0:1e:
         81:82:9a:77:c7:c3:7c:79:59:78:d4:27:17:a6:6d:bd:6d:97:
         e9:85:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:50 2026 by rpki-client