Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
File:                     uPcTXGBh-I9CraXVMMFwUK66jYU.mft (raw, json)
Hash identifier:          4boxydojRzrkqpDLOkEnF6fl8jtor6Sfdzgd34jvVmM=
Subject key identifier:   5B:A3:2C:CD:7E:97:4A:4C:94:6C:AA:A3:4A:C1:F8:8E:9C:6D:C1:E7
Authority key identifier: B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85
Certificate issuer:       /CN=A91B7929/serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
Manifest number:          32
Signing time:             Sun 01 Mar 2026 10:05:32 +0000
Manifest this update:     Sun 01 Mar 2026 10:05:31 +0000
Manifest next update:     Sun 08 Mar 2026 10:05:31 +0000
Files and hashes:         1: uPcTXGBh-I9CraXVMMFwUK66jYU.crl (hash: C8eZrUCx83EOzDQd4zvZU07U4V39bhAErn80cfeQYUY=)
                          2: 79376344DB2011F082375EAE87D3641D.roa (hash: /tgduaIQHeYLKjxq98YV75mrt+Wp7Usd8BI5OBX6xcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85
        Validity
            Not Before: Mar  1 10:05:31 2026 GMT
            Not After : Mar  8 10:05:31 2026 GMT
        Subject: CN=69a40f6c-d7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:34:d6:88:8b:76:fb:5a:82:0b:72:a8:44:
                    a7:1f:53:ac:57:a3:7f:3e:ed:f2:b6:f5:37:e9:67:
                    24:8e:4a:1f:b8:49:31:58:10:13:88:14:d0:4f:97:
                    12:1f:9e:0e:12:c8:65:e2:a4:db:e3:3d:77:32:60:
                    fa:f7:88:94:1e:12:0b:ac:57:f4:4e:26:e6:bd:b9:
                    4f:1e:52:b7:26:35:6c:4b:8f:85:04:61:14:7a:ce:
                    5f:23:0f:9e:af:8d:f3:b0:fe:bf:cc:13:e4:ea:38:
                    dd:69:ba:53:f3:b4:bc:94:cf:bf:3f:df:21:6e:3b:
                    ef:19:f5:e5:4c:97:23:53:ca:0d:15:6a:e4:13:a2:
                    1d:18:96:b5:f2:73:56:b0:8d:1b:f7:f7:95:7a:34:
                    d8:f4:da:36:38:e7:73:8c:0f:e6:34:6f:d6:ee:ac:
                    ad:3c:6d:a7:93:cc:a9:dd:fb:b2:6f:23:90:fd:fa:
                    ff:18:8d:3a:db:1d:0a:9e:5f:2b:ff:77:59:55:4e:
                    66:56:fd:87:a8:b4:9a:42:e6:12:2a:d0:f3:69:4d:
                    5c:19:e9:b4:18:31:5f:73:ea:c3:08:ae:3b:04:a4:
                    ac:c2:f0:9c:91:03:8f:17:cc:e0:9f:38:84:df:19:
                    ee:5b:94:99:6a:22:7d:e6:7a:b3:14:f0:4d:8c:94:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:2C:CD:7E:97:4A:4C:94:6C:AA:A3:4A:C1:F8:8E:9C:6D:C1:E7
            X509v3 Authority Key Identifier:
                keyid:B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:dd:77:32:5a:45:f6:42:d9:b1:b2:b9:24:a8:68:c3:10:5e:
         07:36:2f:56:58:4d:40:ed:14:89:79:d3:b0:82:e9:69:1b:9b:
         71:ef:9d:ea:49:9b:48:33:2b:00:a1:5f:f5:7c:8c:79:10:24:
         b8:63:fe:a4:45:ff:df:0a:45:03:98:59:08:d7:f5:65:79:81:
         d4:4c:6d:71:1e:24:6a:44:cb:4e:85:24:1e:6f:d4:c2:ad:86:
         c0:8a:d0:9b:73:41:7a:88:81:e1:19:0e:aa:ca:2a:f5:dc:20:
         c4:dc:40:83:85:ea:fd:4c:b8:a8:97:f1:c5:6e:bd:45:a2:e5:
         06:ea:d6:b4:e5:19:61:f8:92:dd:ad:8d:bc:40:9d:e5:47:2c:
         9f:ac:a6:58:87:f4:b9:6a:96:e2:f3:0f:95:9b:b4:1a:49:56:
         90:ae:89:a3:d9:67:e9:4c:af:6a:a5:d3:62:d5:7a:92:52:8d:
         2f:c2:1c:3a:07:92:25:1f:ab:e6:c8:b5:fd:e2:c0:a4:d6:bf:
         ab:4c:9c:67:b9:e2:ea:7a:f3:7a:ab:15:28:35:13:25:e4:95:
         b9:a7:6b:53:1b:98:b9:ef:d4:fa:95:1c:28:cc:cd:84:da:d3:
         4b:a6:3d:38:26:1b:02:19:34:c4:22:6f:59:de:64:ed:80:4a:
         d7:80:e0:f7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NzkyOTExMC8GA1UEBRMoQjhGNzEzNUM2MDYxRjg4RjQyQURBNUQ1MzBDMTcwNTBB
RUJBOEQ4NTAeFw0yNjAzMDExMDA1MzFaFw0yNjAzMDgxMDA1MzFaMBgxFjAUBgNV
BAMTDTY5YTQwZjZjLWQ3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4wTTWiIt2+1qCC3KoRKcfU6xXo38+7fK29TfpZySOSh+4STFYEBOIFNBPlxIf
ng4SyGXipNvjPXcyYPr3iJQeEgusV/ROJua9uU8eUrcmNWxLj4UEYRR6zl8jD56v
jfOw/r/ME+TqON1pulPztLyUz78/3yFuO+8Z9eVMlyNTyg0VauQToh0YlrXyc1aw
jRv395V6NNj02jY453OMD+Y0b9burK08baeTzKnd+7JvI5D9+v8YjTrbHQqeXyv/
d1lVTmZW/YeotJpC5hIq0PNpTVwZ6bQYMV9z6sMIrjsEpKzC8JyRA48XzOCfOITf
Ge5blJlqIn3merMU8E2MlI0zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW6MszX6X
SkyUbKqjSsH4jpxtwecwHwYDVR0jBBgwFoAUuPcTXGBh+I9CraXVMMFwUK66jYUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3OTI5L0JBNkNFMkQwQ0U3
MzExRjA4NjQzMjIxNEM0RjlBRTAyL3VQY1RYR0JoLUk5Q3JhWFZNTUZ3VUs2NmpZ
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdVBjVFhHQmgtSTlDcmFYVk1NRndVSzY2allVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3
OTI5L0JBNkNFMkQwQ0U3MzExRjA4NjQzMjIxNEM0RjlBRTAyL3VQY1RYR0JoLUk5
Q3JhWFZNTUZ3VUs2NmpZVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCo3XcyWkX2QtmxsrkkqGjDEF4HNi9WWE1A7RSJedOwgulpG5tx753qSZtIMysA
oV/1fIx5ECS4Y/6kRf/fCkUDmFkI1/VleYHUTG1xHiRqRMtOhSQeb9TCrYbAitCb
c0F6iIHhGQ6qyir13CDE3ECDher9TLiol/HFbr1FouUG6ta05Rlh+JLdrY28QJ3l
RyyfrKZYh/S5apbi8w+Vm7QaSVaQromj2WfpTK9qpdNi1XqSUo0vwhw6B5IlH6vm
yLX94sCk1r+rTJxnueLqevN6qxUoNRMl5JW5p2tTG5i579T6lRwozM2E2tNLpj04
JhsCGTTEIm9Z3mTtgErXgOD3
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:37 2026 by rpki-client