Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File:                     UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier:          2v2azJho4mZvoyWGPK+bnfyoxQJBAaFSe4bx3RSjZWo=
Subject key identifier:   F6:EF:09:B1:C1:B6:B0:00:E0:17:67:49:50:6E:0A:76:A9:5D:41:F0
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer:       /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number:          0103
Signing time:             Tue 23 Jun 2026 06:25:24 +0000
Manifest this update:     Tue 23 Jun 2026 06:25:23 +0000
Manifest next update:     Tue 30 Jun 2026 06:25:23 +0000
Files and hashes:         1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: HcaAQndNKSuYqaf3ffdA3XS48oPvoPrndaA3PP8gZv0=)
                          2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: u0AZ+G521Y1mpL9O4RU7VPlcvfZ7loLQEOc3ANO3jN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 06:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
        Validity
            Not Before: Jun 23 06:25:23 2026 GMT
            Not After : Jun 30 06:25:23 2026 GMT
        Subject: CN=6a3a26d4-d045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:05:70:91:54:89:29:3c:9a:72:ee:c4:40:69:
                    10:7d:98:cb:bc:1f:20:95:af:19:02:00:12:ff:69:
                    86:e2:b5:87:65:c9:5e:28:b1:43:82:67:84:eb:61:
                    9d:51:93:68:5f:35:8a:05:93:0e:a9:ae:31:c3:ea:
                    b8:d2:77:01:15:95:67:d7:96:15:4d:bf:fa:91:cd:
                    05:ac:ab:58:fd:86:d6:ee:c4:50:e4:aa:70:ce:11:
                    0c:88:bd:79:ef:a7:12:6a:7b:23:39:f4:13:8e:6b:
                    c0:e0:28:ad:89:30:2e:69:e6:e4:7c:14:fa:66:8d:
                    57:3f:f0:f8:61:3b:c9:01:f6:3e:13:ca:5e:80:98:
                    31:b4:ae:37:92:2d:0c:e0:a6:c5:6c:ea:0b:ab:a9:
                    b3:1f:7e:0f:75:ec:2e:ce:d1:b7:4e:6a:fe:07:2b:
                    0b:8a:cb:02:e2:1c:cc:ea:91:6e:e7:85:36:51:5f:
                    9f:88:c8:0c:ed:77:85:09:3b:72:c0:21:0d:13:e8:
                    ef:0c:ad:2f:53:f3:c2:b3:eb:5f:5e:c2:93:5e:a7:
                    ac:a8:b9:80:00:5f:0a:3e:3d:ea:6e:ac:21:97:45:
                    68:cd:10:86:d8:75:76:47:41:3f:70:5b:04:cd:97:
                    b0:da:19:01:b6:df:dc:85:26:90:7d:2b:a3:c2:42:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EF:09:B1:C1:B6:B0:00:E0:17:67:49:50:6E:0A:76:A9:5D:41:F0
            X509v3 Authority Key Identifier:
                keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:29:b7:12:63:bf:33:8f:c3:73:33:9e:4c:60:06:36:94:e7:
         dd:ee:a6:a2:ea:5d:59:34:a0:df:08:69:a8:33:67:eb:09:6a:
         ee:da:cf:18:d2:43:73:8d:34:d2:18:01:7a:78:cb:dc:ec:c4:
         a0:49:ae:b0:86:97:bc:5c:57:66:a8:17:30:5b:0d:ac:21:88:
         1c:77:cd:3c:e7:a5:4d:89:09:6a:84:f9:1c:78:0d:d9:ac:aa:
         1a:3a:4d:b8:b7:dc:f5:23:aa:5b:7d:f8:e5:78:63:97:84:c8:
         32:ad:c2:4e:ad:90:11:21:ac:2e:ac:dd:41:cc:8e:4b:5c:f3:
         2e:69:c8:6a:bf:79:ff:56:f6:54:ee:33:bd:24:75:ad:39:bd:
         bd:bb:17:92:1e:8a:c4:fd:d0:f1:cf:d9:c0:ba:af:b0:7f:a3:
         ae:d6:4f:55:33:7a:35:f9:1b:85:ab:04:31:00:e4:2e:07:e4:
         db:c6:a8:72:f8:7d:66:8c:18:74:a2:69:41:2e:25:30:2b:7f:
         6b:a9:02:af:1c:a5:aa:11:8c:e4:27:97:d4:c9:aa:ed:cb:63:
         e4:96:fe:7b:43:fa:2f:69:11:76:3d:be:78:94:9a:2a:a9:d2:
         45:8c:fe:41:19:e4:9e:21:75:b8:9d:0c:ad:20:85:2a:05:20:
         2b:28:46:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5NzgxMTAvBgNVBAUTKDUwMEM2MEE3RjY5QzA0QkU4NEZDRjNDNjU3MjNDMDc5
NzBFNUExMjgwHhcNMjYwNjIzMDYyNTIzWhcNMjYwNjMwMDYyNTIzWjAYMRYwFAYD
VQQDEw02YTNhMjZkNC1kMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+AVwkVSJKTyacu7EQGkQfZjLvB8gla8ZAgAS/2mG4rWHZcleKLFDgmeE62Gd
UZNoXzWKBZMOqa4xw+q40ncBFZVn15YVTb/6kc0FrKtY/YbW7sRQ5KpwzhEMiL15
76cSansjOfQTjmvA4CitiTAuaebkfBT6Zo1XP/D4YTvJAfY+E8pegJgxtK43ki0M
4KbFbOoLq6mzH34PdewuztG3Tmr+BysLissC4hzM6pFu54U2UV+fiMgM7XeFCTty
wCENE+jvDK0vU/PCs+tfXsKTXqesqLmAAF8KPj3qbqwhl0VozRCG2HV2R0E/cFsE
zZew2hkBtt/chSaQfSujwkL+7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbvCbHB
trAA4BdnSVBuCnapXUHwMB8GA1UdIwQYMBaAFFAMYKf2nAS+hPzzxlcjwHlw5aEo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk3OC81NjJCREIyMkVB
NjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JMNkVfUFBHVnlQQWVYRGxv
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBeGdwX2FjQkw2RV9QUEdWeVBBZVhEbG9TZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzk3OC81NjJCREIyMkVBNjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JM
NkVfUFBHVnlQQWVYRGxvU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAym3EmO/M4/DczOeTGAGNpTn3e6moupdWTSg3whpqDNn6wlq7trPGNJDc400
0hgBenjL3OzEoEmusIaXvFxXZqgXMFsNrCGIHHfNPOelTYkJaoT5HHgN2ayqGjpN
uLfc9SOqW3345Xhjl4TIMq3CTq2QESGsLqzdQcyOS1zzLmnIar95/1b2VO4zvSR1
rTm9vbsXkh6KxP3Q8c/ZwLqvsH+jrtZPVTN6NfkbhasEMQDkLgfk28aocvh9ZowY
dKJpQS4lMCt/a6kCrxylqhGM5CeX1Mmq7ctj5Jb+e0P6L2kRdj2+eJSaKqnSRYz+
QRnkniF1uJ0MrSCFKgUgKyhGHQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:12 2026 by rpki-client