Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File:                     UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier:          ySzSnoAn48s4ypiXLMwBVaiZmtJ/aFpu5OPtjoGQwSI=
Subject key identifier:   91:29:DF:ED:80:D6:7D:5A:04:D7:93:0E:62:35:DB:34:42:34:7F:44
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer:       /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number:          0133
Signing time:             Fri 25 Sep 2026 05:43:04 +0000
Manifest this update:     Fri 25 Sep 2026 05:43:03 +0000
Manifest next update:     Fri 02 Oct 2026 05:43:03 +0000
Files and hashes:         1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: vZJF1K9esqErr5TA0AWOmAAwnYv+IYXr1BpyabBZtwQ=)
                          2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: u0AZ+G521Y1mpL9O4RU7VPlcvfZ7loLQEOc3ANO3jN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
        Validity
            Not Before: Sep 25 05:43:03 2026 GMT
            Not After : Oct  2 05:43:03 2026 GMT
        Subject: CN=6ab609e8-44d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:95:66:57:ba:71:c1:51:36:1d:61:56:79:
                    8f:e1:ee:a4:84:6d:2e:1b:19:0e:97:00:b0:f9:0f:
                    92:84:d1:ab:ad:50:fa:fc:28:28:5f:ec:f9:e3:27:
                    10:bd:e3:96:b7:a1:d7:82:04:ae:d9:4a:37:7e:26:
                    ba:a8:74:c1:8d:90:0e:c2:19:f6:ff:90:9a:93:41:
                    34:45:bf:b1:89:4c:17:e9:6f:e9:04:8c:2e:6a:61:
                    1d:e4:f0:b3:78:33:ae:cf:0b:4a:08:f2:26:2c:66:
                    ac:c5:c3:7e:51:66:2b:85:e0:b2:83:bc:fd:cc:bc:
                    33:d5:c6:ad:d7:ea:e0:af:cc:7c:d5:e2:61:16:fa:
                    89:20:13:3b:e6:1e:57:2b:5a:3f:8b:f4:4d:24:8a:
                    eb:a4:e7:44:a8:9b:65:b5:8f:1a:67:ef:d5:90:d9:
                    d7:75:e2:71:93:82:5e:ad:c1:7e:bb:53:9c:50:43:
                    dc:19:bd:80:c0:69:48:c1:e3:26:b3:e8:00:29:3d:
                    85:52:36:63:ab:39:7e:67:8d:69:97:55:1a:12:8f:
                    b9:62:54:66:4e:e3:bf:93:5b:5e:58:0b:ce:72:df:
                    3b:4e:75:c1:d8:cf:4e:9a:db:aa:df:bb:5d:bb:f2:
                    b0:0b:2e:f3:43:e6:ef:16:55:b9:58:c5:82:c9:5c:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:DF:ED:80:D6:7D:5A:04:D7:93:0E:62:35:DB:34:42:34:7F:44
            X509v3 Authority Key Identifier:
                keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:e1:16:84:b7:61:b4:de:ab:67:09:c5:29:8d:91:1c:1c:
         78:56:d8:e6:46:54:4b:79:86:b4:82:b0:3e:d8:2d:0d:02:22:
         70:e9:0a:3c:19:08:99:a5:4e:04:7f:1a:c6:c0:2a:c4:da:9f:
         68:77:4b:62:ae:f2:3f:14:c9:2b:57:0b:68:c1:a8:de:79:2e:
         3f:32:52:dd:fc:9c:08:8e:e6:34:3d:4b:70:ed:67:3c:20:98:
         c9:bc:c7:78:e8:e3:2c:02:16:38:ac:67:c2:a6:e5:56:7a:9e:
         a8:aa:5f:b6:e7:bd:81:19:a4:e6:0c:73:c4:d5:7e:36:31:47:
         35:de:66:e7:07:8c:d2:71:0c:61:0c:26:33:3d:2f:7b:7e:90:
         4b:22:aa:bb:8d:da:ae:58:9a:34:61:7e:8d:e7:c0:8d:de:9a:
         a6:1c:9e:f5:80:72:fb:f0:18:f0:84:32:a5:e0:8a:4c:ed:f9:
         e9:d2:5a:96:d9:a2:7e:f6:d4:21:af:51:ef:57:48:f8:11:a9:
         be:4b:80:3d:e0:d8:8d:d7:7a:0e:5f:33:2f:2c:5e:b7:71:f3:
         9c:ba:23:4b:45:36:b7:41:b0:40:a2:9a:08:d7:57:ca:44:80:
         b9:16:5e:44:21:79:2b:a2:bc:21:63:cd:d0:93:2a:a1:da:db:
         cb:26:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:41 2026 by rpki-client