Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          NTcrR9bEuu4shvPB0BV45NS5NYWgP9bWVCtwtCnWOEY=
Subject key identifier:   F2:2F:0A:48:B8:EE:4E:A2:2C:89:5B:0C:5C:3A:FD:DD:47:6C:C6:DC
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          0162
Signing time:             Wed 29 Jul 2026 06:13:44 +0000
Manifest this update:     Wed 29 Jul 2026 06:13:43 +0000
Manifest next update:     Wed 05 Aug 2026 06:13:43 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: iJ29BTWHdFZptzmp5N6IEcoWtELayUoUSkZcRz9M5Qs=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: no0SNYKpXHhN7AscUH3ZSqjYzZJUuDSOCn7JYbnOM8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Jul 29 06:13:43 2026 GMT
            Not After : Aug  5 06:13:43 2026 GMT
        Subject: CN=6a699a18-67c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:a6:ab:37:f4:f3:ad:d0:4b:ad:a4:6c:88:
                    2a:ac:f7:0d:30:0d:64:94:b8:39:79:b1:dd:c0:e7:
                    e1:37:bc:ab:d9:cf:ab:62:e6:c8:32:7c:90:57:44:
                    ba:6b:e2:66:d2:cd:d9:27:63:fb:50:a7:2a:31:b5:
                    f0:3d:98:bf:b9:73:9f:87:ab:84:b4:a7:34:cd:5b:
                    2a:bb:4b:6d:23:67:4f:7b:1d:dc:a4:9f:d5:db:05:
                    29:cc:87:be:5c:73:4d:df:31:67:be:3f:ec:d2:2a:
                    53:1e:96:0b:30:08:99:2d:35:1e:14:fc:93:59:97:
                    68:27:2b:4a:74:cb:6d:7a:d0:63:9f:dc:b6:23:ec:
                    11:0a:fc:cc:aa:2d:55:4f:d4:4f:c9:bb:6b:82:09:
                    c0:6c:a7:08:a3:27:34:f3:b1:4f:16:3d:6a:f1:b3:
                    99:5d:ef:2f:30:23:60:72:12:70:77:49:f7:58:f7:
                    b9:ff:76:f5:61:ae:0a:01:36:4a:9a:40:5a:b6:99:
                    ad:86:f3:8d:2d:81:4b:82:39:7d:f4:6b:00:f0:b9:
                    c3:14:54:aa:4a:50:f1:69:58:e7:d9:04:c6:c8:62:
                    e2:d7:b7:12:17:93:72:0c:b0:f8:c7:ca:98:6e:bc:
                    b0:7a:7b:16:a7:66:9c:20:92:31:6a:31:02:b7:34:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:0A:48:B8:EE:4E:A2:2C:89:5B:0C:5C:3A:FD:DD:47:6C:C6:DC
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:67:29:7e:02:12:4c:e5:5e:f1:13:6b:ac:fd:e6:7a:6e:
         c0:af:7b:73:2e:84:10:7d:15:ba:35:79:2e:be:e8:14:32:aa:
         5b:35:17:ec:43:05:22:e0:50:67:46:1e:63:6c:40:58:bd:68:
         dc:50:86:fd:eb:db:e6:3c:fd:3f:f7:d2:34:65:ae:77:94:0b:
         4d:55:2b:5d:70:e2:0c:9e:8e:0e:dd:5d:29:61:51:18:3d:7a:
         bd:83:cd:5b:40:d5:07:21:dd:2f:6b:89:c5:68:f3:97:6f:10:
         62:6d:de:3d:e3:52:61:ed:ae:7f:60:8b:b3:3c:32:43:92:5c:
         64:bf:7f:e9:a9:20:d8:5d:d4:4a:c8:82:da:22:55:b4:ae:d7:
         fb:66:53:44:ff:b2:6a:81:ca:b4:38:21:17:24:1c:ab:9f:b2:
         8f:b1:be:74:33:70:b6:75:b3:f1:a8:d9:37:46:04:74:9d:98:
         08:77:a0:bb:cc:e0:20:be:50:3f:10:ce:0e:4f:0f:9f:b8:44:
         9d:a9:56:c4:73:08:17:a8:9d:ab:0b:95:39:52:bc:ba:8b:a1:
         5e:3e:7b:3d:a1:49:1f:ad:29:d7:d9:45:e7:48:4a:c7:4e:2b:
         e8:10:8d:e9:a7:d9:9a:ff:7b:84:2c:f2:c7:d7:20:a3:f0:08:
         d0:58:55:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5ODExMTAvBgNVBAUTKDUyMEJBOTRDRDBGQjlFN0MxNDBERkJDMENDNThCOTND
RjU0QzIyRjMwHhcNMjYwNzI5MDYxMzQzWhcNMjYwODA1MDYxMzQzWjAYMRYwFAYD
VQQDEw02YTY5OWExOC02N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+Wmqzf0863QS62kbIgqrPcNMA1klLg5ebHdwOfhN7yr2c+rYubIMnyQV0S6
a+Jm0s3ZJ2P7UKcqMbXwPZi/uXOfh6uEtKc0zVsqu0ttI2dPex3cpJ/V2wUpzIe+
XHNN3zFnvj/s0ipTHpYLMAiZLTUeFPyTWZdoJytKdMttetBjn9y2I+wRCvzMqi1V
T9RPybtrggnAbKcIoyc087FPFj1q8bOZXe8vMCNgchJwd0n3WPe5/3b1Ya4KATZK
mkBatpmthvONLYFLgjl99GsA8LnDFFSqSlDxaVjn2QTGyGLi17cSF5NyDLD4x8qY
brywensWp2acIJIxajECtzSfAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIvCki4
7k6iLIlbDFw6/d1HbMbcMB8GA1UdIwQYMBaAFFILqUzQ+558FA37wMxYuTz1TCLz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8xQ0Y2Q0Q3NDZD
N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25ud1VEZnZBekZpNVBQVk1J
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk4MS8xQ0Y2Q0Q3NDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25u
d1VEZnZBekZpNVBQVk1Jdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV7pnKX4CEkzlXvETa6z95npuwK97cy6EEH0VujV5Lr7oFDKqWzUX7EMFIuBQ
Z0YeY2xAWL1o3FCG/evb5jz9P/fSNGWud5QLTVUrXXDiDJ6ODt1dKWFRGD16vYPN
W0DVByHdL2uJxWjzl28QYm3ePeNSYe2uf2CLszwyQ5JcZL9/6akg2F3USsiC2iJV
tK7X+2ZTRP+yaoHKtDghFyQcq5+yj7G+dDNwtnWz8ajZN0YEdJ2YCHegu8zgIL5Q
PxDODk8Pn7hEnalWxHMIF6idqwuVOVK8uouhXj57PaFJH60p19lF50hKx04r6BCN
6afZmv97hCzyx9cgo/AI0FhVDw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:25 2026 by rpki-client