Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          fPWey5FGy8jloKAdcPols5VO+xe6S8mVGQcIgieg4d0=
Subject key identifier:   6C:E3:6D:CD:86:06:10:91:8A:76:C5:54:CC:FD:82:36:74:D9:ED:66
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          0187
Signing time:             Mon 05 Oct 2026 04:54:35 +0000
Manifest this update:     Mon 05 Oct 2026 04:54:35 +0000
Manifest next update:     Mon 12 Oct 2026 04:54:35 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: AvTOcwUhiBvokign3cjRw8+ifPhVA73EiQt0vt/Zi54=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: TOr3lSEvYAhPjFeYT97SY9GDA4wLaqovZ7Rh+RBe+3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Oct  5 04:54:35 2026 GMT
            Not After : Oct 12 04:54:35 2026 GMT
        Subject: CN=6ac32d8b-6543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:22:32:e5:b4:45:1e:79:a2:57:63:92:96:
                    0f:99:ad:bf:95:cf:98:d7:8a:b8:d7:ee:98:1d:96:
                    4f:e8:1d:87:a6:28:54:0c:b8:4a:cd:e6:9f:76:24:
                    4b:a2:e0:ab:c6:1b:4f:0c:75:bb:42:fe:05:50:35:
                    e4:d2:20:c5:92:47:4a:5d:64:51:c7:52:d3:63:6f:
                    fe:81:26:b0:2b:ee:a9:0e:09:ca:13:33:e2:85:30:
                    69:75:5a:ed:18:f8:31:79:70:f2:a0:e9:98:3c:9a:
                    a7:d6:93:70:e9:b7:56:cf:a9:b3:af:c5:55:d3:d1:
                    a1:18:3b:17:c6:78:ef:89:e3:f6:71:d5:ea:fc:cc:
                    82:0b:61:ef:c4:3a:5e:7e:e4:b3:d9:69:16:3e:0f:
                    b9:4a:81:a7:65:c3:03:0b:69:f6:09:52:cb:c1:69:
                    4e:53:af:18:fa:77:8f:92:3f:e1:e7:ab:e2:29:4d:
                    a7:9b:ff:bb:6f:f4:ad:d8:58:07:2e:b0:f9:bc:53:
                    5c:e2:21:8b:99:c5:b1:08:b3:9d:ef:ec:26:6a:0c:
                    3b:8e:cb:1e:c8:bf:8e:4f:30:b1:a0:65:f1:df:04:
                    61:a6:91:51:94:17:47:c7:54:fd:6f:12:53:75:17:
                    b9:b1:f5:7d:61:a0:e6:1d:f6:b8:4e:70:c1:db:7d:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:6D:CD:86:06:10:91:8A:76:C5:54:CC:FD:82:36:74:D9:ED:66
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e2:fe:ab:88:30:8d:e4:2f:ee:c5:71:d9:fc:c8:d1:a9:90:
         8e:ea:ba:c8:52:42:5c:30:21:b6:82:e9:37:83:1f:54:31:92:
         6b:91:4a:e0:cc:72:b4:f4:20:ea:40:d9:ec:7d:b1:98:54:09:
         6c:81:a8:a7:cf:a8:19:b4:80:b8:47:c8:ef:a1:12:67:85:d3:
         dc:0c:e9:e3:69:4b:01:ac:8f:fd:21:7b:2a:1c:46:af:20:b6:
         8f:12:70:4d:49:33:4b:80:44:b4:89:53:f9:fd:bc:0a:bd:c1:
         88:a9:35:f9:ce:cf:80:b4:d7:97:13:3e:53:05:ee:00:32:22:
         34:af:ef:21:c7:41:0c:f6:fb:92:37:d1:70:ff:e6:41:06:50:
         2e:42:ec:70:f2:50:28:b0:64:ce:cb:8f:5c:85:b5:89:3a:44:
         83:07:f4:ce:51:92:0c:43:cf:b4:58:1b:82:6e:57:bb:98:a0:
         2d:c0:e0:83:35:1f:6b:e2:ed:29:b5:3d:b9:8e:41:b7:ec:e8:
         20:44:b4:03:ba:42:1e:b3:96:1b:77:12:0a:e8:f0:66:70:23:
         98:dc:9b:31:2d:81:9d:36:d5:a0:83:57:69:a6:0d:a8:d1:c3:
         e3:3a:f0:89:7e:28:26:99:4b:8d:ec:7c:23:2d:ca:8c:7b:e7:
         49:3d:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:21:03 2026 by rpki-client