Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File:                     UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier:          uxZmNtPTyKSRLdGsuKhW2p08rwVXInp0sF242IHuAkk=
Subject key identifier:   DC:0D:05:95:34:8A:44:12:D2:BC:E7:53:9A:EA:5D:EE:63:E8:83:07
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer:       /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number:          0141
Signing time:             Mon 21 Sep 2026 05:26:53 +0000
Manifest this update:     Mon 21 Sep 2026 05:26:53 +0000
Manifest next update:     Mon 28 Sep 2026 05:26:53 +0000
Files and hashes:         1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: z1LQnw3SwewpqDGACII/5Jj/dexUl6Tc9xbxgYw9Jqg=)
                          2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
        Validity
            Not Before: Sep 21 05:26:53 2026 GMT
            Not After : Sep 28 05:26:53 2026 GMT
        Subject: CN=6ab0c01d-3b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:ae:04:74:e7:4a:d0:1c:c3:a7:19:3b:18:
                    b5:42:c3:b8:d1:d7:0d:2c:2d:ec:24:98:89:e5:17:
                    41:4a:2d:21:f9:f3:84:d6:cf:01:6b:a1:ca:0b:c0:
                    9f:4a:8e:e5:ce:21:64:c6:ea:b0:cc:27:94:e1:3a:
                    80:bc:3b:9c:db:17:6a:94:66:2c:92:cf:d3:3e:97:
                    e4:44:75:17:b3:40:30:2e:d8:0c:e8:8a:c7:8f:52:
                    ee:f2:aa:2e:47:95:cc:ea:8e:2c:83:19:da:8b:5f:
                    fb:aa:6e:8b:9f:88:19:b7:49:c8:6e:dd:05:fa:eb:
                    26:82:b9:ff:02:6f:e6:17:b7:cf:c2:5c:84:bc:19:
                    d1:5f:df:50:aa:7f:6b:62:88:35:35:fc:49:8f:27:
                    41:33:e7:b0:25:52:f1:0e:0b:da:f5:e7:46:b4:a4:
                    83:9d:c0:3b:bc:ec:fd:cc:87:ae:5b:61:52:a3:5c:
                    38:2f:9b:d3:ff:8d:3b:1e:67:1d:2b:32:96:46:6d:
                    42:26:a3:e0:dc:30:1e:7a:e3:31:24:69:39:ef:fe:
                    10:01:58:8b:61:10:a7:12:69:e4:c6:97:9a:10:c1:
                    90:e4:84:df:eb:08:f1:d6:9e:4b:b8:51:4c:15:3c:
                    00:69:35:35:66:c7:78:cc:03:4b:5c:ee:ef:e6:d9:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0D:05:95:34:8A:44:12:D2:BC:E7:53:9A:EA:5D:EE:63:E8:83:07
            X509v3 Authority Key Identifier:
                keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:81:37:7f:46:88:fc:42:b8:4d:76:f5:53:15:b6:5b:27:a7:
         a5:67:0e:93:2d:cd:e5:f2:ff:a2:96:f5:27:a9:1c:d2:7a:2a:
         79:53:9d:77:f4:73:07:cd:33:7a:ff:5a:bb:ea:45:8e:99:82:
         e8:6e:11:1a:42:7b:de:de:54:0f:a5:93:50:c1:94:80:ee:d1:
         e9:e9:ae:44:0f:65:78:a9:ca:ec:ca:b8:f9:bb:32:78:26:b3:
         68:c0:88:a8:9f:07:f5:3c:dd:18:d5:1b:60:37:f8:96:25:1d:
         c7:c9:0a:22:76:d9:6c:d0:86:9f:e1:09:fb:fb:d4:01:30:90:
         e3:d7:a0:e0:79:d2:0a:88:09:38:1a:9f:8a:79:2a:02:70:c1:
         22:b1:db:40:f4:1f:2f:10:01:76:d9:83:7b:74:e7:a8:a0:72:
         25:c8:94:06:0f:b0:e7:32:d1:8c:d1:ba:3d:27:e2:5d:34:9e:
         c6:e1:ef:97:88:5b:62:11:61:db:b6:e3:0d:e8:d9:8c:dc:03:
         46:da:ad:3b:3e:3f:5c:e6:8d:f5:d6:4f:4e:44:ee:b1:4c:e1:
         37:17:13:2c:ff:fc:e0:a7:66:8b:c3:cf:6d:86:cd:de:de:96:
         50:90:ca:69:ff:80:35:10:b5:b6:02:7f:14:73:fa:38:72:f7:
         b3:33:7f:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJEOEUxMTAvBgNVBAUTKDUwNjE5NDcxMDBCQ0IzMzI4OUUyNkEwQkRGRUNFMkM1
RkI5RTA5RDIwHhcNMjYwOTIxMDUyNjUzWhcNMjYwOTI4MDUyNjUzWjAYMRYwFAYD
VQQDEw02YWIwYzAxZC0zYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoWuBHTnStAcw6cZOxi1QsO40dcNLC3sJJiJ5RdBSi0h+fOE1s8Ba6HKC8Cf
So7lziFkxuqwzCeU4TqAvDuc2xdqlGYsks/TPpfkRHUXs0AwLtgM6IrHj1Lu8qou
R5XM6o4sgxnai1/7qm6Ln4gZt0nIbt0F+usmgrn/Am/mF7fPwlyEvBnRX99Qqn9r
Yog1NfxJjydBM+ewJVLxDgva9edGtKSDncA7vOz9zIeuW2FSo1w4L5vT/407Hmcd
KzKWRm1CJqPg3DAeeuMxJGk57/4QAViLYRCnEmnkxpeaEMGQ5ITf6wjx1p5LuFFM
FTwAaTU1Zsd4zANLXO7v5tkQVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwNBZU0
ikQS0rznU5rqXe5j6IMHMB8GA1UdIwQYMBaAFFBhlHEAvLMyieJqC9/s4sX7ngnS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS8zQUY1N0ZEQUNF
ODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6S0o0bW9MMy16aXhmdWVD
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VHR1VjUUM4c3pLSjRtb0wzLXppeGZ1ZUNkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkQ4RS8zQUY1N0ZEQUNFODgxMUVGODdDMDcxMTdDNEY5QUUwMi9VR0dVY1FDOHN6
S0o0bW9MMy16aXhmdWVDZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKYE3f0aI/EK4TXb1UxW2WyenpWcOky3N5fL/opb1J6kc0noqeVOdd/RzB80z
ev9au+pFjpmC6G4RGkJ73t5UD6WTUMGUgO7R6emuRA9leKnK7Mq4+bsyeCazaMCI
qJ8H9TzdGNUbYDf4liUdx8kKInbZbNCGn+EJ+/vUATCQ49eg4HnSCogJOBqfinkq
AnDBIrHbQPQfLxABdtmDe3TnqKByJciUBg+w5zLRjNG6PSfiXTSexuHvl4hbYhFh
27bjDejZjNwDRtqtOz4/XOaN9dZPTkTusUzhNxcTLP/84Kdmi8PPbYbN3t6WUJDK
af+ANRC1tgJ/FHP6OHL3szN/xA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:18 2026 by rpki-client