Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          5X+pFOGsX7gLDuXPZO6kq4AFzq1Pvhheg/0/VqfyUeU=
Subject key identifier:   A9:49:44:B9:72:2C:BC:58:EF:5A:8E:7F:45:6C:0A:15:ED:92:09:DF
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          0136
Signing time:             Mon 01 Jun 2026 06:20:10 +0000
Manifest this update:     Mon 01 Jun 2026 06:20:09 +0000
Manifest next update:     Mon 08 Jun 2026 06:20:09 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: udvaL0xxc1w/LeL6zaXJhF3Wy3+AXIkE1ZdFSRlvXDk=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: CHWaj2FyJMKWSBZ+2E7O8yNYSlqC+2eBltmle+urUy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Jun  1 06:20:09 2026 GMT
            Not After : Jun  8 06:20:09 2026 GMT
        Subject: CN=6a1d2499-4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c0:e8:69:a5:d7:4d:37:72:69:a7:33:ed:e2:
                    26:82:c7:10:c7:85:db:b7:ac:2d:25:be:92:3c:87:
                    5d:72:0c:6b:20:f9:5e:c3:b7:e6:a0:5d:12:ad:3d:
                    30:59:f7:5f:cc:a0:3a:e6:57:82:87:99:63:f7:23:
                    f9:9c:6a:f0:c7:ac:6f:ea:2f:c8:d6:7d:c7:d2:ba:
                    46:b4:3d:17:d9:f6:cf:e8:07:89:18:e1:12:0c:54:
                    01:06:01:6f:75:16:b3:6d:bd:37:a3:95:df:6a:a1:
                    7d:51:21:d9:23:90:45:89:aa:72:02:68:a7:26:df:
                    5b:78:b8:1c:13:a0:63:7c:21:bd:23:02:8a:37:c0:
                    8f:a1:a4:65:bc:f8:a7:4c:26:eb:b9:3e:4e:e7:da:
                    e1:3c:b3:28:a3:6c:45:08:22:3e:24:88:98:05:31:
                    db:b9:6e:92:f9:29:4f:52:30:d8:e4:44:b3:e8:79:
                    17:bf:eb:20:dc:29:4c:cc:aa:fe:9d:14:34:03:b0:
                    d4:e1:17:87:54:86:ff:17:fa:f5:d7:f9:0b:cc:53:
                    27:62:5f:ff:dc:69:c1:f9:cf:59:04:eb:3f:42:82:
                    47:fa:a0:ce:33:bf:0c:f5:d8:ed:c0:17:40:66:54:
                    49:7b:9a:28:d5:b8:ef:ca:e1:65:b4:e7:96:9a:4d:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:44:B9:72:2C:BC:58:EF:5A:8E:7F:45:6C:0A:15:ED:92:09:DF
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:87:7c:2f:05:21:8c:d3:b2:fa:ce:65:69:20:43:fc:f7:
         c8:9d:0e:14:74:71:00:af:de:58:2d:65:c3:d9:8f:b3:9e:35:
         d9:aa:61:2e:8d:ed:a9:c1:ea:ec:0c:e7:1f:ab:fc:21:59:47:
         17:f5:43:fb:c0:95:9d:ae:40:d4:c1:70:f5:5a:d3:3a:8b:61:
         42:68:e8:79:32:57:ca:ea:26:27:5d:7a:f6:e0:21:30:2a:34:
         d3:b2:eb:b3:36:2c:91:27:d2:f1:ba:40:55:1d:0a:27:24:53:
         6b:8c:51:29:b2:e1:36:85:38:5b:4b:af:71:52:94:ee:94:2c:
         47:c3:b8:f5:92:12:ac:f4:42:f4:bc:32:eb:af:8a:13:75:9a:
         45:43:93:d1:b3:5a:f5:37:35:9d:11:d1:75:e9:bc:19:4c:c4:
         b8:b6:1d:63:be:4d:16:5b:93:7b:ee:99:be:c8:45:93:79:91:
         9b:aa:57:ff:eb:7e:b7:94:67:cd:6c:51:be:83:3b:36:e1:fd:
         91:62:04:b8:93:3a:02:30:47:3c:43:41:57:c5:68:35:c0:8d:
         2f:e1:14:8e:1a:31:af:10:b8:2a:cf:b3:26:f3:bb:5e:8f:0f:
         32:ac:88:95:1b:db:ed:99:ea:da:e3:e2:23:1e:9f:24:7f:11:
         86:8b:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client