Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          hppc93JM2DHu+p3emQHXU7DYgrbxvmn/Pdv2pNRVDSY=
Subject key identifier:   0D:10:CB:AB:FE:63:1D:14:12:5D:59:B3:F0:C7:89:6A:12:32:C9:33
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          0146
Signing time:             Mon 01 Jun 2026 06:02:18 +0000
Manifest this update:     Mon 01 Jun 2026 06:02:18 +0000
Manifest next update:     Mon 08 Jun 2026 06:02:18 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: Fr98Y46e7SYOzNG0hoQZ9uuoiypbka4z8M3SJXZrH0k=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: no0SNYKpXHhN7AscUH3ZSqjYzZJUuDSOCn7JYbnOM8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Jun  1 06:02:18 2026 GMT
            Not After : Jun  8 06:02:18 2026 GMT
        Subject: CN=6a1d206a-8728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:5f:37:d3:e2:29:ef:3d:22:b6:55:c5:29:
                    96:61:31:b3:6c:c0:ed:2c:c6:58:30:ca:5b:9f:f0:
                    92:87:84:e3:42:da:6f:06:6d:4a:df:27:ca:c3:3a:
                    dc:3f:cb:6d:7a:73:1f:eb:79:dc:84:53:ca:b5:f0:
                    1e:dc:19:50:f1:f6:b9:9e:c5:e2:37:f4:ad:5f:85:
                    52:d3:8f:ee:75:ad:89:53:40:9d:2c:e7:7c:25:44:
                    a7:c2:4d:b3:10:4d:7b:56:b5:b3:01:a3:03:03:24:
                    33:4a:d4:ec:91:1d:49:e7:e7:b8:ac:cf:97:01:86:
                    c0:56:31:20:54:bc:8d:48:4d:61:ac:ac:80:b0:00:
                    0f:bb:87:31:31:40:ca:b3:fc:53:78:4e:c6:a0:2a:
                    fb:30:c9:65:14:66:d2:45:41:9e:2e:a7:11:a8:de:
                    69:e4:97:ac:12:6d:15:77:6d:26:61:17:9c:44:eb:
                    87:80:e2:e6:a0:b2:db:5b:ab:8e:bc:bf:d6:6a:4a:
                    3c:5f:10:7d:d2:47:2b:e6:f3:cc:cd:e8:51:87:2c:
                    4d:11:23:99:d1:05:84:d7:17:e7:65:86:c3:48:81:
                    03:13:f3:3d:ea:49:af:fe:a5:07:8c:61:7f:ee:e3:
                    da:91:9b:7d:16:9e:b9:9a:0b:29:64:62:da:f7:72:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:CB:AB:FE:63:1D:14:12:5D:59:B3:F0:C7:89:6A:12:32:C9:33
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:97:fc:c1:47:54:cf:e2:43:00:44:70:bc:94:a0:cf:b9:
         dc:b3:ad:94:6d:d7:f2:ed:9f:02:9a:76:f8:99:27:52:25:17:
         cb:6d:fc:15:51:20:6a:c6:2a:b6:12:0e:87:ac:04:5e:4f:ef:
         4f:77:19:ec:14:ff:20:2a:42:38:aa:cb:1f:1c:59:40:f8:88:
         db:75:a1:18:e2:53:b1:7b:9e:74:2d:5e:17:20:7a:fb:53:80:
         e2:da:91:16:c3:82:46:2c:8a:9d:f5:8f:51:e0:6f:e1:fa:cf:
         f8:70:16:1e:c6:d4:7a:b2:aa:bc:5f:40:37:02:14:bc:12:27:
         54:ec:54:34:48:77:9c:e5:06:24:89:2f:82:a1:4e:11:25:be:
         59:36:ee:15:9f:06:9d:b7:c5:fd:76:fb:14:55:21:dc:1b:62:
         45:71:ae:88:9b:8e:c2:b6:ef:a1:d3:76:7d:f8:21:47:19:8d:
         18:a8:4b:71:25:44:98:aa:1f:e6:1b:05:f5:5a:f3:8e:c3:a3:
         24:ea:2c:04:a0:d9:42:a9:38:16:7b:d8:98:3e:e2:f7:35:b5:
         25:33:ba:57:dd:3d:ea:95:ac:01:c9:d6:00:9f:14:2d:3c:c7:
         a9:e7:ab:08:3c:0d:72:29:2d:fd:d7:27:e9:61:d1:d4:d4:41:
         57:59:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:01 2026 by rpki-client