Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File:                     UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier:          hWvjd8udshVtI/feLrr5Uo1eBh1z/WUPlpeBloBfaFU=
Subject key identifier:   1A:AA:E4:B2:B1:D0:A0:F8:F8:D1:47:45:31:B7:34:48:9B:8D:2F:C8
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer:       /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number:          0112
Signing time:             Thu 23 Jul 2026 07:43:30 +0000
Manifest this update:     Thu 23 Jul 2026 07:43:30 +0000
Manifest next update:     Thu 30 Jul 2026 07:43:30 +0000
Files and hashes:         1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: Gskz2LnpQTHJLZAbtQtWplYGqOpg50UyqLnyS7rHxcc=)
                          2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: u0AZ+G521Y1mpL9O4RU7VPlcvfZ7loLQEOc3ANO3jN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
        Validity
            Not Before: Jul 23 07:43:30 2026 GMT
            Not After : Jul 30 07:43:30 2026 GMT
        Subject: CN=6a61c622-b4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:21:c3:c7:bf:fd:b3:44:7d:dd:9f:93:57:
                    57:6c:87:e4:5f:25:d0:9e:d8:2c:90:1a:7f:20:95:
                    e1:fd:d4:3a:be:b1:55:ac:3d:2c:96:1a:fa:d7:2c:
                    be:2f:a7:ae:9e:45:57:a0:7d:3e:ac:31:85:c9:09:
                    a1:98:70:27:30:9d:79:03:10:b4:86:b8:65:69:43:
                    c5:56:3f:26:bf:2f:89:f2:09:c9:3f:b1:0c:56:49:
                    42:e4:56:a1:b2:28:99:45:1b:cc:2b:13:ce:ca:53:
                    5c:b3:16:d2:41:f6:9a:ae:9e:36:ac:26:7f:c1:32:
                    8a:df:60:75:23:88:ba:0b:92:8d:82:77:fb:7c:5e:
                    91:fd:05:c6:cc:b6:33:43:61:b3:db:38:52:7b:40:
                    98:bd:b4:9c:77:e8:65:92:f1:90:fe:69:02:62:9e:
                    7e:1d:a4:e2:b8:2a:b0:80:ca:39:47:04:57:1e:e4:
                    56:57:19:18:49:7b:b1:d3:d3:86:e3:93:fc:58:0c:
                    67:58:d6:34:20:a2:78:64:6d:41:18:cc:37:b8:b3:
                    70:57:7e:09:5b:56:16:cc:7e:39:c1:4d:0b:72:f1:
                    28:59:1b:0b:36:29:4b:6f:3b:eb:c3:19:78:d1:87:
                    8e:86:d2:fa:a0:98:56:7f:33:6e:7f:d0:43:ed:26:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:E4:B2:B1:D0:A0:F8:F8:D1:47:45:31:B7:34:48:9B:8D:2F:C8
            X509v3 Authority Key Identifier:
                keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:41:d0:74:da:dc:2b:7c:9c:d8:dd:ef:e3:4f:9a:86:9e:
         5e:7a:91:24:94:b0:85:b5:fe:93:46:34:84:73:52:36:64:84:
         ba:27:d4:3f:ba:28:42:68:bb:89:fa:b5:2d:be:eb:3b:a1:97:
         48:19:b8:9c:17:44:d5:a5:9e:8a:69:57:d2:bd:2c:9c:41:28:
         32:83:c6:d1:d1:68:f5:be:1b:61:41:ce:83:cc:ba:f7:4f:3f:
         6c:b5:22:65:52:23:7d:c3:e6:5c:56:8b:b0:43:fd:f9:35:e4:
         fc:22:74:1c:bd:49:b7:f3:ed:8d:3d:f3:9e:af:38:0e:ab:3e:
         e4:61:a7:87:eb:8f:ab:57:d7:e5:b9:d2:31:36:97:fe:2d:b5:
         83:ca:b0:a5:64:b3:be:d6:eb:cd:70:6e:da:d9:37:54:40:8d:
         9b:3d:5e:53:00:6c:63:6a:c4:85:bb:ed:fc:0c:f5:3d:ea:63:
         0a:39:a2:a9:2c:c9:fd:09:47:cf:47:cd:61:00:b6:53:e1:56:
         41:7b:57:db:f1:0b:a3:7b:1f:6d:dc:60:ac:a4:ca:46:73:d8:
         5f:3b:aa:2e:e4:b0:42:cd:51:b7:a7:74:14:c7:61:2e:78:1b:
         24:29:35:e7:5d:c2:5f:81:6c:bc:2e:66:b6:ef:07:7b:07:83:
         53:2f:44:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5NzgxMTAvBgNVBAUTKDUwMEM2MEE3RjY5QzA0QkU4NEZDRjNDNjU3MjNDMDc5
NzBFNUExMjgwHhcNMjYwNzIzMDc0MzMwWhcNMjYwNzMwMDc0MzMwWjAYMRYwFAYD
VQQDEw02YTYxYzYyMi1iNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXkhw8e//bNEfd2fk1dXbIfkXyXQntgskBp/IJXh/dQ6vrFVrD0slhr61yy+
L6eunkVXoH0+rDGFyQmhmHAnMJ15AxC0hrhlaUPFVj8mvy+J8gnJP7EMVklC5Fah
siiZRRvMKxPOylNcsxbSQfaarp42rCZ/wTKK32B1I4i6C5KNgnf7fF6R/QXGzLYz
Q2Gz2zhSe0CYvbScd+hlkvGQ/mkCYp5+HaTiuCqwgMo5RwRXHuRWVxkYSXux09OG
45P8WAxnWNY0IKJ4ZG1BGMw3uLNwV34JW1YWzH45wU0LcvEoWRsLNilLbzvrwxl4
0YeOhtL6oJhWfzNuf9BD7SZ0OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqq5LKx
0KD4+NFHRTG3NEibjS/IMB8GA1UdIwQYMBaAFFAMYKf2nAS+hPzzxlcjwHlw5aEo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk3OC81NjJCREIyMkVB
NjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JMNkVfUFBHVnlQQWVYRGxv
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBeGdwX2FjQkw2RV9QUEdWeVBBZVhEbG9TZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzk3OC81NjJCREIyMkVBNjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JM
NkVfUFBHVnlQQWVYRGxvU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKudB0HTa3Ct8nNjd7+NPmoaeXnqRJJSwhbX+k0Y0hHNSNmSEuifUP7ooQmi7
ifq1Lb7rO6GXSBm4nBdE1aWeimlX0r0snEEoMoPG0dFo9b4bYUHOg8y6908/bLUi
ZVIjfcPmXFaLsEP9+TXk/CJ0HL1Jt/PtjT3znq84Dqs+5GGnh+uPq1fX5bnSMTaX
/i21g8qwpWSzvtbrzXBu2tk3VECNmz1eUwBsY2rEhbvt/Az1PepjCjmiqSzJ/QlH
z0fNYQC2U+FWQXtX2/ELo3sfbdxgrKTKRnPYXzuqLuSwQs1Rt6d0FMdhLngbJCk1
513CX4FsvC5mtu8HeweDUy9EIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:17 2026 by rpki-client