Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          KlEXgoJM85KCjXfoKqO7AYrUQtqOJpBmeh4RI1I0ORo=
Subject key identifier:   47:F3:ED:43:EC:8E:73:D5:25:F5:2B:E4:8D:FC:2C:28:FD:EF:91:3E
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          0115
Signing time:             Sun 01 Mar 2026 06:54:36 +0000
Manifest this update:     Sun 01 Mar 2026 06:54:35 +0000
Manifest next update:     Sun 08 Mar 2026 06:54:35 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: UVBuvk/+ql9p+sM467EepGUNyZO89NBb51dtlzrCST4=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Mar  1 06:54:35 2026 GMT
            Not After : Mar  8 06:54:35 2026 GMT
        Subject: CN=69a3e2ac-4a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:e0:35:0c:a6:39:71:ff:4f:fb:cd:38:99:
                    f0:59:0c:44:56:6d:dd:04:32:c1:75:f3:f8:81:2d:
                    ef:fe:03:26:df:3e:f9:ff:4e:81:93:fe:b5:44:2f:
                    16:39:c9:1f:22:c4:da:eb:eb:28:c5:db:6e:a1:6d:
                    af:94:8f:0a:5d:20:09:a8:4a:9f:2e:05:b3:50:74:
                    6d:0e:3d:34:e2:a7:91:7b:cf:7a:e7:14:67:49:66:
                    21:3e:e8:c0:50:94:36:5b:80:ae:2f:60:71:61:86:
                    4d:5f:ff:e6:c3:94:e4:47:63:13:b7:19:9b:cd:2e:
                    92:90:fe:15:74:11:af:89:3f:6f:f1:71:9a:16:c6:
                    76:28:f1:67:4b:6b:c3:94:2b:fb:53:cb:cd:04:bc:
                    ac:8a:8a:62:7f:23:34:46:2b:10:30:cd:34:5f:a3:
                    5a:7d:25:ac:39:60:a5:4d:d8:85:04:28:19:6a:a4:
                    72:21:3b:ee:82:a0:8d:e1:45:30:7d:35:df:b7:47:
                    f1:9f:3c:f5:a6:ee:85:0f:02:6d:cf:ee:47:38:3f:
                    fe:29:7f:37:69:11:7f:1f:14:2b:47:63:05:f4:a0:
                    c1:35:1f:6b:79:98:f8:7b:2c:d8:71:99:5d:ca:aa:
                    5b:61:c7:d8:d0:e5:1a:eb:c0:e9:2e:7c:e0:c2:f2:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:ED:43:EC:8E:73:D5:25:F5:2B:E4:8D:FC:2C:28:FD:EF:91:3E
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:3c:24:4d:b9:8e:35:1f:d5:6c:bd:1c:85:ca:30:22:9e:
         09:2a:7f:b2:5d:04:47:57:69:75:90:d1:8c:d0:c3:cf:ab:2f:
         a7:59:9e:19:45:58:16:e5:db:c2:06:c0:01:84:5d:06:31:f9:
         e7:1b:0f:32:fc:fe:0b:02:35:8d:f3:0e:31:48:23:22:a7:3f:
         d9:9e:a9:94:03:aa:f3:23:97:db:28:58:86:1f:dc:b4:31:2c:
         4b:5b:9c:12:f3:e4:ae:13:c5:93:fc:f4:47:2b:c8:35:9a:f4:
         97:1b:dc:ec:3f:7e:b7:21:21:fa:35:bd:39:18:dc:7a:c9:af:
         f4:1d:15:fe:b7:c2:e9:6f:a6:ed:f3:61:14:63:2f:ce:ea:07:
         f7:b2:65:18:20:07:8d:ce:05:28:50:77:06:6a:e0:e3:a4:19:
         3c:ae:fa:5c:77:bb:6f:fb:d9:1c:c4:ab:30:98:54:93:7d:97:
         da:75:3d:3c:5c:08:d4:43:cd:6f:93:20:ac:0d:55:d3:cf:87:
         73:98:1d:3d:cf:49:98:89:34:f7:d6:25:57:a1:bf:c9:c8:1a:
         a8:76:2d:6e:71:0e:71:dc:b6:d8:08:42:86:d8:f0:36:4a:7b:
         0f:79:fa:ec:92:9d:c0:40:6c:6c:fa:35:79:54:a3:0e:d5:22:
         9e:42:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:16 2026 by rpki-client