Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
File:                     ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json)
Hash identifier:          ft3y4+ON8T5Qq2SeOvyhi654CBpUd99qL1oVE7WQSKE=
Subject key identifier:   A6:4A:80:CA:D2:14:1F:6E:8B:7D:70:82:A7:6C:55:E8:E9:17:E2:B7
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Certificate issuer:       /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
Manifest number:          0368
Signing time:             Fri 05 Jun 2026 04:13:42 +0000
Manifest this update:     Fri 05 Jun 2026 04:13:42 +0000
Manifest next update:     Fri 12 Jun 2026 04:13:42 +0000
Files and hashes:         1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: UpUEnJvAuUoslCT5H7+yi4V9qKYfvdKxZYa+/rsB6gk=)
                          2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 04:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
        Validity
            Not Before: Jun  5 04:13:42 2026 GMT
            Not After : Jun 12 04:13:42 2026 GMT
        Subject: CN=6a224cf6-7bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:13:98:f8:d4:3f:6c:12:d0:19:57:71:34:
                    e0:1e:9d:33:3c:db:e4:0d:42:3d:0c:13:c6:cd:da:
                    56:b6:8c:9a:16:28:11:c7:da:71:85:91:8f:6b:03:
                    53:81:76:71:21:36:94:5f:dc:e5:2c:a3:69:20:a6:
                    06:81:de:40:fb:b1:6a:f4:9c:40:61:b4:9d:e9:73:
                    86:bc:d2:38:08:40:63:9f:02:77:60:d8:0a:91:5a:
                    a2:b8:90:cc:b0:b3:00:20:9a:7d:36:7f:77:a2:35:
                    70:53:2c:04:ab:04:89:fa:6c:74:b3:0f:79:2d:7b:
                    11:ac:ff:98:f9:60:cf:50:59:8b:53:89:dd:d7:d2:
                    50:8c:4e:ee:91:ab:5d:9c:ae:55:6c:78:9e:61:de:
                    a0:f5:74:82:29:26:21:7b:2f:79:76:63:20:0f:50:
                    81:fc:84:7c:7a:5a:69:00:08:77:84:4d:da:50:14:
                    ea:bb:57:ae:94:34:ad:19:8b:e5:43:c7:eb:e6:06:
                    a9:85:e2:ad:9b:04:9b:8c:7f:d9:19:bd:ca:9c:44:
                    cd:87:d8:16:ee:09:ee:27:c8:36:1e:9d:7c:6e:99:
                    b6:5d:c4:a3:98:d2:be:35:a2:c5:21:df:4c:37:f8:
                    47:30:e6:85:aa:b8:7b:90:62:21:0f:70:da:29:72:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:80:CA:D2:14:1F:6E:8B:7D:70:82:A7:6C:55:E8:E9:17:E2:B7
            X509v3 Authority Key Identifier:
                keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:09:83:69:2d:8e:c5:fe:23:d3:47:53:fb:0b:28:f3:ac:
         d3:a5:d5:6a:63:94:92:f2:72:4f:75:a5:fd:78:aa:5c:33:c2:
         d0:59:bf:7c:dd:31:33:06:fd:28:c7:fd:b0:7d:a1:23:8a:66:
         cb:8e:18:b4:c4:f2:20:77:86:6d:6c:6c:f7:f1:52:c7:80:aa:
         72:9a:b0:80:f1:50:5a:51:ac:6f:a7:ff:2f:f4:33:b5:33:bd:
         06:41:ed:be:c3:3c:3a:cb:26:ef:ba:07:7b:42:eb:5a:14:04:
         9a:58:1b:ca:af:50:22:6c:bb:a8:bd:84:34:6d:b0:5e:fe:5e:
         b0:fe:a1:82:95:e5:56:f4:16:c6:1e:7a:57:03:ec:80:20:f7:
         90:19:02:02:14:fb:20:e1:9e:86:ad:ee:16:6c:bc:cd:b8:c0:
         f5:a2:26:d5:c6:f0:8b:6f:45:3e:ad:59:c0:7a:ea:c7:9c:8e:
         31:bd:00:9c:20:cf:25:75:28:b6:a1:61:9b:5b:c3:1a:5c:4b:
         cb:a3:a6:5d:e7:f7:e5:b0:d8:7b:a9:ff:11:b9:c0:b9:a3:2d:
         ca:8b:98:eb:d5:6a:46:05:3f:22:42:0d:35:8f:71:19:0e:8c:
         76:a0:60:dc:ed:07:c9:06:89:ea:1b:e6:12:63:32:9a:b3:27:
         5c:b0:b4:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx
MTY5MDhBMzIwHhcNMjYwNjA1MDQxMzQyWhcNMjYwNjEyMDQxMzQyWjAYMRYwFAYD
VQQDEw02YTIyNGNmNi03YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjaoTmPjUP2wS0BlXcTTgHp0zPNvkDUI9DBPGzdpWtoyaFigRx9pxhZGPawNT
gXZxITaUX9zlLKNpIKYGgd5A+7Fq9JxAYbSd6XOGvNI4CEBjnwJ3YNgKkVqiuJDM
sLMAIJp9Nn93ojVwUywEqwSJ+mx0sw95LXsRrP+Y+WDPUFmLU4nd19JQjE7ukatd
nK5VbHieYd6g9XSCKSYhey95dmMgD1CB/IR8elppAAh3hE3aUBTqu1eulDStGYvl
Q8fr5gapheKtmwSbjH/ZGb3KnETNh9gW7gnuJ8g2Hp18bpm2XcSjmNK+NaLFId9M
N/hHMOaFqrh7kGIhD3DaKXJ3swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZKgMrS
FB9ui31wgqdsVejpF+K3MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2
OF91Y3k1elMyRWdSYVFpakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9UJg2ktjsX+I9NHU/sLKPOs06XVamOUkvJyT3Wl/XiqXDPC0Fm/fN0xMwb9
KMf9sH2hI4pmy44YtMTyIHeGbWxs9/FSx4CqcpqwgPFQWlGsb6f/L/QztTO9BkHt
vsM8Ossm77oHe0LrWhQEmlgbyq9QImy7qL2ENG2wXv5esP6hgpXlVvQWxh56VwPs
gCD3kBkCAhT7IOGehq3uFmy8zbjA9aIm1cbwi29FPq1ZwHrqx5yOMb0AnCDPJXUo
tqFhm1vDGlxLy6OmXef35bDYe6n/EbnAuaMtyouY69VqRgU/IkINNY9xGQ6MdqBg
3O0HyQaJ6hvmEmMymrMnXLC0DA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 01:59:05 2026 by rpki-client