Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File:                     UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier:          DGzBwHLCF5ivfm/3IGv29sFg1bZPJzAZc7824wnxnN4=
Subject key identifier:   E3:90:35:DF:54:7F:B4:D5:7A:00:4F:35:B4:D5:EF:9B:A5:36:87:1F
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer:       /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number:          0139
Signing time:             Wed 07 Oct 2026 06:04:18 +0000
Manifest this update:     Wed 07 Oct 2026 06:04:18 +0000
Manifest next update:     Wed 14 Oct 2026 06:04:18 +0000
Files and hashes:         1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: 9mFzHWfSbTQa8qr8BRCl1J9Es4EYJk+uE6qItEAQ9aQ=)
                          2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: u0AZ+G521Y1mpL9O4RU7VPlcvfZ7loLQEOc3ANO3jN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
        Validity
            Not Before: Oct  7 06:04:18 2026 GMT
            Not After : Oct 14 06:04:18 2026 GMT
        Subject: CN=6ac5e0e2-0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:9d:78:17:3e:79:e5:98:c0:7a:66:93:91:
                    1c:4f:4c:a7:e2:14:44:6a:bd:82:c8:93:99:8c:6e:
                    89:a5:ab:67:8f:2d:0c:89:4d:4f:81:1f:c9:99:3a:
                    ab:4f:34:cf:e7:ab:ff:ce:70:6c:b4:e9:84:52:ef:
                    3b:d7:27:c8:6f:0b:dc:5e:6c:46:63:11:00:89:c8:
                    a3:d8:35:fe:6a:7c:1c:17:0f:9c:a0:f2:4f:ef:29:
                    89:20:0f:43:9f:41:f6:ea:01:63:dd:97:7f:72:05:
                    b0:58:7b:53:3b:57:8c:6b:78:88:05:51:4d:7f:76:
                    78:8d:c3:99:e6:24:7b:11:a1:1c:07:cb:f3:10:43:
                    f7:5d:00:a2:09:8c:4c:77:f6:b2:8d:56:d3:cc:44:
                    b7:9f:db:d8:4f:6a:4c:ef:e8:26:b6:69:e9:a1:13:
                    5c:d5:3d:dd:13:d2:6f:47:21:67:c5:3e:50:52:ba:
                    2e:8a:0a:1e:3e:61:65:bf:74:9e:ed:ac:79:bd:3d:
                    4d:70:60:67:e0:85:7b:9b:ad:35:7b:2c:93:ac:26:
                    9e:5b:06:f7:cd:96:25:af:0d:6c:83:7e:08:b0:c5:
                    db:2b:88:22:f5:8e:2e:01:b7:20:2e:06:1e:e3:6f:
                    ae:23:94:79:c8:f7:c3:d5:0d:91:bf:eb:a3:1d:3e:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:90:35:DF:54:7F:B4:D5:7A:00:4F:35:B4:D5:EF:9B:A5:36:87:1F
            X509v3 Authority Key Identifier:
                keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:d5:f2:28:e3:ac:81:b3:18:88:b6:32:3a:25:a9:b8:b3:
         73:73:27:95:0d:d3:37:2d:14:d7:fd:db:3b:c8:eb:2e:e5:ef:
         4c:b1:0e:df:49:47:04:65:e6:93:5f:87:7b:23:90:75:86:91:
         23:9d:cc:54:76:47:b5:58:06:e1:2a:d8:48:2a:d7:b1:c4:a4:
         85:03:7d:13:15:6b:c7:83:46:43:ae:68:59:52:a1:7a:e4:e2:
         c0:81:a2:bd:da:3e:f1:5c:f6:e0:e8:5b:d8:d2:57:d0:6f:73:
         50:11:b1:1e:82:b0:0a:70:56:cc:a5:5e:b5:36:14:d8:3b:26:
         77:68:2e:04:fc:56:aa:42:c5:99:82:1c:03:c7:8d:d0:79:7f:
         c3:e6:45:ee:79:b8:ce:06:65:04:66:6d:b5:08:54:e9:bd:ac:
         cc:aa:95:e8:e2:01:44:6a:79:a5:f8:93:3e:88:3d:39:9f:e0:
         a2:6e:28:16:24:9f:be:4b:f9:b5:42:2b:bf:ca:d3:ed:99:a5:
         5c:2a:2e:43:8b:dd:e4:ed:c6:12:3a:c7:38:4c:0a:c8:38:3d:
         42:54:d1:6f:55:23:c2:fc:1c:7c:f6:22:ac:cc:ea:2c:9a:de:
         35:f7:86:1f:3a:b7:a7:e0:3d:be:c6:ea:68:64:2a:09:bf:fe:
         aa:89:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:28:25 2026 by rpki-client