Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File:                     UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier:          LMBOeCPgYdK4zgE3t9CazwWVmfkFu9/yGRHw1MMX0gY=
Subject key identifier:   31:2C:34:39:94:A0:FE:1F:15:F9:DB:06:78:CB:D7:EA:0E:78:AA:67
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer:       /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial:       1ECA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number:          1EB2
Signing time:             Tue 12 May 2026 16:03:49 +0000
Manifest this update:     Tue 12 May 2026 16:03:49 +0000
Manifest next update:     Tue 19 May 2026 16:03:49 +0000
Files and hashes:         1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: c5vFExNj47f9vNJOwINQbiNRK/ktkwXQnqXbgxY0V3M=)
                          2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
                          rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7882 (0x1eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
        Validity
            Not Before: May 12 16:03:49 2026 GMT
            Not After : May 19 16:03:49 2026 GMT
        Subject: CN=6a034f65-8be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:ff:d9:f5:72:48:de:a5:06:49:bb:5a:73:
                    1a:6a:90:0b:86:8f:bc:91:a0:44:8f:9f:99:93:63:
                    7a:28:84:61:57:f1:e6:0f:50:cf:d9:3f:21:30:dd:
                    91:0e:05:dc:33:f9:e3:dc:4e:16:44:57:83:e5:68:
                    54:04:fc:a0:a1:23:aa:58:5b:c7:bc:5f:5a:3b:05:
                    a9:af:aa:ca:c6:f6:26:90:6d:33:f3:7a:7e:66:20:
                    62:a5:7a:92:6a:66:ef:32:bc:49:c5:5b:56:85:32:
                    f6:4c:69:11:f1:be:04:55:3c:5b:7a:f0:24:a6:c2:
                    49:8b:35:cb:af:7b:70:5e:30:fc:27:3f:a5:7e:af:
                    10:d2:5e:a3:4a:1f:bf:c3:5d:66:6c:2b:57:94:07:
                    31:cd:ae:05:fa:a4:3b:dc:66:c5:8d:0f:ae:09:f6:
                    3b:21:c7:9a:96:46:d3:ff:fa:44:db:64:cb:02:7b:
                    f3:53:4c:53:26:fc:af:99:42:d3:8b:98:90:45:d0:
                    27:bd:2e:38:91:2c:b0:10:c3:76:8c:d2:cd:b3:75:
                    e5:50:88:d2:4f:5f:22:da:34:4f:af:ee:41:1b:3f:
                    a2:71:a6:27:3a:4c:43:9e:e0:0c:98:83:cf:79:ad:
                    ec:c0:a7:38:b8:5a:67:d9:69:e3:a9:ac:8f:81:81:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:34:39:94:A0:FE:1F:15:F9:DB:06:78:CB:D7:EA:0E:78:AA:67
            X509v3 Authority Key Identifier:
                keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:1e:ce:fd:7a:32:ae:3b:39:5f:30:f5:a8:d8:62:b2:af:
         70:58:c5:c5:f8:ed:8a:bb:32:a4:29:27:5c:10:d4:1c:5f:94:
         78:fd:d5:c5:60:4b:a8:84:f0:9f:c2:84:57:43:13:08:e8:2c:
         98:b6:b5:a6:2b:43:74:23:eb:81:99:55:b2:13:2b:c2:f5:28:
         1a:26:25:4c:8d:2f:31:4e:a2:f1:dc:87:96:e9:46:a4:2b:f6:
         59:18:3e:7a:de:a4:0a:cd:99:44:7f:a7:29:17:12:c6:df:15:
         a4:6d:4f:9d:cf:8e:fa:da:b8:ed:b3:75:f6:6b:73:a6:51:f6:
         95:b0:89:7d:6b:a7:44:4f:c6:77:d9:ff:56:2a:9f:51:ea:e8:
         a1:76:24:23:45:69:24:e0:a7:b8:8b:4e:4a:32:56:b8:22:6e:
         1b:99:98:cc:6a:d3:7e:30:ac:6c:1f:43:79:01:b4:77:b7:fc:
         e5:00:0e:07:eb:21:ff:1a:95:af:76:b1:0c:f0:72:71:de:30:
         75:13:90:f0:00:0c:2c:45:be:26:53:bf:a6:3e:b9:e2:58:cd:
         80:c5:15:e5:7e:e3:dd:94:79:62:45:26:9a:b5:87:f2:b2:f9:
         22:9d:49:b5:fa:a1:51:ca:d2:1b:d5:69:b4:20:4a:59:f1:22:
         e2:65:5b:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3
MkNENkExMDUwHhcNMjYwNTEyMTYwMzQ5WhcNMjYwNTE5MTYwMzQ5WjAYMRYwFAYD
VQQDEw02YTAzNGY2NS04YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZH/2fVySN6lBkm7WnMaapALho+8kaBEj5+Zk2N6KIRhV/HmD1DP2T8hMN2R
DgXcM/nj3E4WRFeD5WhUBPygoSOqWFvHvF9aOwWpr6rKxvYmkG0z83p+ZiBipXqS
ambvMrxJxVtWhTL2TGkR8b4EVTxbevAkpsJJizXLr3twXjD8Jz+lfq8Q0l6jSh+/
w11mbCtXlAcxza4F+qQ73GbFjQ+uCfY7IcealkbT//pE22TLAnvzU0xTJvyvmULT
i5iQRdAnvS44kSywEMN2jNLNs3XlUIjST18i2jRPr+5BGz+icaYnOkxDnuAMmIPP
ea3swKc4uFpn2WnjqayPgYHfswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEsNDmU
oP4fFfnbBnjL1+oOeKpnMB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG
OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjNCQy8zMDQxOTdFODhGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0
VUFxMmNwdHk3VDF5eldvUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW0Yezv16Mq47OV8w9ajYYrKvcFjFxfjtirsypCknXBDUHF+UeP3VxWBLqITw
n8KEV0MTCOgsmLa1pitDdCPrgZlVshMrwvUoGiYlTI0vMU6i8dyHlulGpCv2WRg+
et6kCs2ZRH+nKRcSxt8VpG1Pnc+O+tq47bN19mtzplH2lbCJfWunRE/Gd9n/Viqf
UerooXYkI0VpJOCnuItOSjJWuCJuG5mYzGrTfjCsbB9DeQG0d7f85QAOB+sh/xqV
r3axDPBycd4wdROQ8AAMLEW+JlO/pj654ljNgMUV5X7j3ZR5YkUmmrWH8rL5Ip1J
tfqhUcrSG9VptCBKWfEi4mVbAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:34:17 2026 by rpki-client