Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
File:                     ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json)
Hash identifier:          R3sFAOp2T2PEeCMChIg0YsUQDZXF8rkRLs+Ky+++tMg=
Subject key identifier:   72:90:E8:76:11:E4:17:7A:0A:C8:EF:1E:56:12:66:54:E9:15:A3:AD
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Certificate issuer:       /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
Manifest number:          03D4
Signing time:             Sat 19 Sep 2026 03:30:41 +0000
Manifest this update:     Sat 19 Sep 2026 03:30:41 +0000
Manifest next update:     Sat 26 Sep 2026 03:30:41 +0000
Files and hashes:         1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: 5nuD6W45XQ1XV46T3p0NorwZIAWa5x/1uQQBlJv1Gjg=)
                          2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
        Validity
            Not Before: Sep 19 03:30:41 2026 GMT
            Not After : Sep 26 03:30:41 2026 GMT
        Subject: CN=6aae01e1-481e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:3f:65:f7:84:fd:01:a3:86:55:93:2b:6a:
                    31:d2:e4:90:93:d7:69:a1:b9:41:ac:b3:f5:1b:5f:
                    d4:79:e8:27:dd:2e:da:fb:03:fa:1f:f2:ce:e8:fa:
                    4e:4a:9b:42:9a:d9:eb:23:5e:66:b3:dd:a7:db:76:
                    7d:62:b7:eb:82:2c:cc:96:f8:df:e9:5d:20:27:e3:
                    5e:6a:61:73:da:67:3a:7b:43:e9:1a:1f:ad:5d:4b:
                    7a:11:2b:a9:4c:08:12:5a:13:3a:94:28:ca:57:6d:
                    21:ef:62:c1:ad:1a:54:20:ed:be:fc:6a:08:f0:28:
                    5b:7e:c7:56:38:ab:90:7a:a4:7d:80:ba:46:1e:70:
                    e6:53:f4:44:d6:dd:7d:9f:3c:bf:72:39:6f:3e:2b:
                    dd:a8:03:75:be:5f:99:96:7f:01:b2:6b:c6:30:c0:
                    32:e2:9e:db:41:d5:7d:48:f9:a1:c6:cd:1b:9e:92:
                    ad:ca:3c:3a:29:34:b5:66:46:d3:b9:46:72:17:ff:
                    8e:75:d8:e1:da:aa:91:73:1f:dd:cc:2c:96:1b:b0:
                    d7:a7:a9:ed:60:80:82:b8:08:c4:1d:9a:2c:5d:88:
                    50:cb:66:b2:f1:7b:63:59:1f:de:cb:07:61:cb:6c:
                    e0:00:54:0c:a9:cb:53:5c:93:66:0c:fc:85:f3:55:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:90:E8:76:11:E4:17:7A:0A:C8:EF:1E:56:12:66:54:E9:15:A3:AD
            X509v3 Authority Key Identifier:
                keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:74:c7:3a:82:ed:3b:81:4a:e0:59:eb:a2:37:57:60:1c:
         72:fb:ec:36:ec:cd:a5:d7:69:35:93:46:b9:dc:d8:23:96:1b:
         30:2d:9d:f5:d6:b1:d3:fd:3d:de:b9:4d:e1:9e:ea:00:79:e6:
         86:bc:63:a2:af:57:e8:00:b2:da:ca:aa:bb:e0:10:b7:70:9f:
         e7:eb:29:77:a2:9f:39:f5:cf:0d:80:10:72:76:6c:d6:6c:72:
         5d:d4:3d:69:e6:eb:00:1f:da:d7:f2:bc:cc:7c:96:5e:79:ef:
         64:d5:70:dc:98:70:1a:0e:d0:69:eb:2b:30:49:23:26:fa:27:
         75:bf:54:a0:10:b6:8c:a5:c7:01:98:f8:71:1f:00:4f:e6:e7:
         5d:77:af:75:2a:cf:90:bf:ba:a6:71:12:41:6f:da:0d:e5:d7:
         a2:0f:3b:e6:35:3d:87:75:e4:5e:55:1b:c8:fc:ea:19:aa:1e:
         12:ab:e5:81:08:8c:06:87:47:2a:77:12:90:a2:2e:04:19:e5:
         60:78:50:3e:97:94:c3:01:fd:8d:b7:42:a7:d9:85:0d:4c:e6:
         3c:ce:30:33:d2:26:c3:91:be:67:3a:17:dd:ec:fc:34:b6:d4:
         c4:5f:98:98:25:13:8f:ea:ff:a5:72:ac:87:39:62:62:9f:f8:
         bb:65:e0:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx
MTY5MDhBMzIwHhcNMjYwOTE5MDMzMDQxWhcNMjYwOTI2MDMzMDQxWjAYMRYwFAYD
VQQDEw02YWFlMDFlMS00ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA45E/ZfeE/QGjhlWTK2ox0uSQk9dpoblBrLP1G1/Ueegn3S7a+wP6H/LO6PpO
SptCmtnrI15ms92n23Z9YrfrgizMlvjf6V0gJ+NeamFz2mc6e0PpGh+tXUt6ESup
TAgSWhM6lCjKV20h72LBrRpUIO2+/GoI8ChbfsdWOKuQeqR9gLpGHnDmU/RE1t19
nzy/cjlvPivdqAN1vl+Zln8BsmvGMMAy4p7bQdV9SPmhxs0bnpKtyjw6KTS1ZkbT
uUZyF/+Oddjh2qqRcx/dzCyWG7DXp6ntYICCuAjEHZosXYhQy2ay8XtjWR/eywdh
y2zgAFQMqctTXJNmDPyF81UnMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKQ6HYR
5Bd6CsjvHlYSZlTpFaOtMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2
OF91Y3k1elMyRWdSYVFpakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqrB0xzqC7TuBSuBZ66I3V2AccvvsNuzNpddpNZNGudzYI5YbMC2d9dax0/09
3rlN4Z7qAHnmhrxjoq9X6ACy2sqqu+AQt3Cf5+spd6KfOfXPDYAQcnZs1mxyXdQ9
aebrAB/a1/K8zHyWXnnvZNVw3JhwGg7QaesrMEkjJvondb9UoBC2jKXHAZj4cR8A
T+bnXXevdSrPkL+6pnESQW/aDeXXog875jU9h3XkXlUbyPzqGaoeEqvlgQiMBodH
KncSkKIuBBnlYHhQPpeUwwH9jbdCp9mFDUzmPM4wM9Imw5G+ZzoX3ez8NLbUxF+Y
mCUTj+r/pXKshzliYp/4u2XgGg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:00 2026 by rpki-client