Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          AN2QJsdmpbzkBwmBl9JXih8eDb0pEYYj7jA1ziacBG4=
Subject key identifier:   31:A3:FB:BA:10:A0:7E:4A:FD:E8:84:1C:3E:DE:23:93:C3:A3:AE:B7
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          012F
Signing time:             Fri 17 Apr 2026 05:14:50 +0000
Manifest this update:     Fri 17 Apr 2026 05:14:50 +0000
Manifest next update:     Fri 24 Apr 2026 05:14:50 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: WDrwDwxPwI+l8uR4qI8Csa6AR0WewEqNyMRV40iBs2Q=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: no0SNYKpXHhN7AscUH3ZSqjYzZJUuDSOCn7JYbnOM8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Apr 17 05:14:50 2026 GMT
            Not After : Apr 24 05:14:50 2026 GMT
        Subject: CN=69e1c1ca-ee1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:e8:e0:9f:31:88:c4:ff:69:f8:04:fe:ba:
                    37:04:4f:6f:e5:bb:cd:d7:c4:e4:3a:9b:21:06:01:
                    f0:00:fc:d1:65:16:cc:b1:97:58:ef:c1:22:a2:45:
                    7f:7c:b9:10:cf:c2:f0:3e:8a:83:1e:8b:ad:11:89:
                    bc:eb:ad:48:86:00:87:bf:2f:02:15:9d:b9:00:ee:
                    83:a6:05:f3:09:8b:98:21:24:63:03:5a:1e:b5:a8:
                    b9:be:7a:62:f1:dc:81:d6:7f:20:eb:88:d5:cb:3a:
                    ae:fb:a7:f4:db:5f:8f:93:39:2d:80:98:68:fa:8c:
                    d4:d5:33:a4:db:26:d9:a0:40:91:96:d9:a9:b9:d4:
                    4d:ee:18:9c:16:07:77:54:b4:b2:d1:c7:77:19:e5:
                    57:44:2e:5c:7a:43:f2:b3:b3:82:21:70:c9:a2:86:
                    d9:77:f7:7c:ee:a5:29:ed:be:3b:4f:01:89:47:b2:
                    04:97:4c:6f:df:fe:24:44:4e:b7:a3:fc:e6:c7:c8:
                    24:a9:c0:a0:c2:0a:b5:68:e2:3b:1a:03:3c:b6:c7:
                    b8:dd:89:2d:a3:c0:98:7a:43:5d:72:fe:5d:da:22:
                    e8:6a:9a:cb:08:2d:66:d7:9f:0b:fd:5d:c0:12:ad:
                    fe:0f:43:36:77:60:9e:52:1d:b8:c7:ef:9f:84:01:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:FB:BA:10:A0:7E:4A:FD:E8:84:1C:3E:DE:23:93:C3:A3:AE:B7
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:86:9c:a4:b5:62:f0:a6:96:7e:fb:71:7c:91:4b:b5:b1:54:
         f8:2e:33:df:a1:95:d6:42:11:ca:55:86:1f:0a:e1:ba:34:2d:
         56:a2:a1:ae:7d:44:8f:77:52:24:c3:0a:55:80:5b:aa:16:22:
         16:30:31:d2:ae:23:68:d8:6a:61:c0:ea:12:76:e1:61:f0:af:
         d4:60:1a:c6:ec:7f:74:d4:fa:9c:65:60:db:f5:9c:32:5c:a6:
         c4:9e:34:b7:fd:8c:9a:f2:ac:f5:00:53:16:ba:b8:32:17:9b:
         8c:e6:f1:9e:aa:e3:fd:87:1d:7e:15:15:4e:39:2b:a6:a0:57:
         93:d2:30:c0:18:a5:6f:53:0c:45:92:75:3b:4a:cd:fa:f0:f3:
         aa:fd:52:70:a8:46:ed:13:f6:ff:73:3c:0b:3d:ad:b5:ac:18:
         78:ae:4d:7c:c3:0d:b6:c8:82:9d:1a:d9:c5:49:fe:05:aa:63:
         af:58:0f:24:7f:66:11:52:14:91:81:ab:c7:d8:8d:aa:d3:89:
         ce:ff:b3:ba:e1:1f:61:27:5d:15:8e:cb:57:a7:dd:2c:cc:29:
         45:3a:90:51:b1:54:b2:76:42:f0:ee:da:c2:88:82:de:5c:60:
         19:18:51:d3:04:bb:d2:cf:d7:8d:21:4c:a3:b0:4c:0e:37:b5:
         56:06:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:26 2026 by rpki-client