Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File:                     UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier:          2Zg3SmykOZbejJpQLbsh3GTWqCkSO5pGxlXLT66CEXE=
Subject key identifier:   21:D9:AB:A5:33:4B:25:9B:B9:BF:6E:D0:01:97:6D:F8:DB:BA:03:00
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer:       /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial:       05F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number:          05E3
Signing time:             Tue 12 May 2026 23:04:21 +0000
Manifest this update:     Tue 12 May 2026 23:04:21 +0000
Manifest next update:     Tue 19 May 2026 23:04:21 +0000
Files and hashes:         1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: 3IT9AGtlWs/7t7S7MCiKs4jjsNOiZhPkY+J/VTVqP0A=)
                          2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
                          rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
        Validity
            Not Before: May 12 23:04:21 2026 GMT
            Not After : May 19 23:04:21 2026 GMT
        Subject: CN=6a03b1f5-0073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:b1:0f:d2:36:94:a0:75:88:3b:14:c3:a2:
                    c4:82:1b:de:ff:68:5d:35:3d:48:36:b6:50:39:4a:
                    f0:9e:6d:43:50:2d:de:c7:6b:9f:2b:03:cd:89:83:
                    f5:6d:ec:e1:0e:c6:b4:46:cc:28:8f:a1:25:11:1b:
                    62:70:b4:68:cf:9a:ae:6a:25:50:5c:e3:fb:b9:e3:
                    28:6a:8d:d0:fb:2e:6a:06:8c:ee:7f:0b:81:f5:eb:
                    0c:7a:82:09:3b:55:05:49:4b:09:71:01:44:aa:93:
                    bd:11:d4:97:74:8c:1b:c7:34:31:10:b9:e4:d6:19:
                    29:d7:41:f5:72:1e:82:47:c3:b6:d1:a2:d5:6a:97:
                    b7:08:a0:0c:50:a8:0e:bf:34:e1:f9:94:b8:99:16:
                    33:8a:f8:02:96:ae:e9:41:4e:3a:d1:3f:1f:3f:31:
                    b2:02:b9:18:69:63:3a:03:23:9f:80:27:7e:12:9b:
                    54:5c:94:57:03:01:17:87:52:4e:84:ce:4d:6e:af:
                    7b:26:fa:d4:b7:b2:b4:dd:8d:8e:2d:df:85:66:30:
                    13:6d:5d:24:5a:df:06:f9:29:53:57:2b:7f:ab:ef:
                    39:00:92:4c:25:3f:51:01:f5:29:a2:50:77:79:16:
                    8a:33:19:76:33:92:53:42:f7:6d:0a:8a:14:98:56:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:AB:A5:33:4B:25:9B:B9:BF:6E:D0:01:97:6D:F8:DB:BA:03:00
            X509v3 Authority Key Identifier:
                keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:d0:07:fe:cc:5b:5c:0d:2d:3a:b8:5b:f5:67:d6:08:8b:
         25:06:1e:cd:a5:a0:2a:e1:06:40:88:0d:59:ab:b8:0d:58:4d:
         20:e4:bf:08:17:42:e3:fc:2d:b2:25:c8:be:2c:62:2d:e8:ed:
         ad:41:d7:58:a0:49:08:fe:cd:2c:32:7d:04:b9:e5:e0:b6:99:
         3e:8b:85:04:a8:d0:6c:28:87:38:24:14:b7:0e:15:00:0f:c2:
         db:ce:7e:41:ed:24:95:cc:58:fd:e5:27:ab:1a:a7:c4:c9:a8:
         aa:c1:25:ad:1a:1f:64:73:f1:f9:e4:2f:68:1b:1a:98:11:18:
         d6:5f:55:92:f4:41:c4:fb:7d:55:14:a0:f2:c9:78:46:8a:89:
         df:50:e4:70:ba:9c:fe:b8:55:af:8e:48:04:5f:58:a9:ed:12:
         d4:f5:70:6d:54:bf:6a:ff:68:ef:de:c2:50:a5:ff:59:3f:0b:
         e8:3f:33:d3:75:e9:da:f3:db:5f:48:4a:d9:38:90:a8:50:7f:
         83:85:5f:3b:b7:15:31:d0:26:37:0f:56:c6:9e:c7:68:c2:1d:
         2e:5a:2b:bc:88:1d:77:7b:d8:98:01:55:64:e4:af:d4:dc:9b:
         a7:a8:5b:f2:a1:ab:c8:fd:2d:fe:f5:2b:a0:dd:f8:3b:f7:81:
         4b:67:89:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0
OTcwNkU5NTcwHhcNMjYwNTEyMjMwNDIxWhcNMjYwNTE5MjMwNDIxWjAYMRYwFAYD
VQQDEw02YTAzYjFmNS0wMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUuxD9I2lKB1iDsUw6LEghve/2hdNT1INrZQOUrwnm1DUC3ex2ufKwPNiYP1
bezhDsa0Rswoj6ElERticLRoz5quaiVQXOP7ueMoao3Q+y5qBozufwuB9esMeoIJ
O1UFSUsJcQFEqpO9EdSXdIwbxzQxELnk1hkp10H1ch6CR8O20aLVape3CKAMUKgO
vzTh+ZS4mRYzivgClq7pQU460T8fPzGyArkYaWM6AyOfgCd+EptUXJRXAwEXh1JO
hM5Nbq97JvrUt7K03Y2OLd+FZjATbV0kWt8G+SlTVyt/q+85AJJMJT9RAfUpolB3
eRaKMxl2M5JTQvdtCooUmFZ8+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHZq6Uz
SyWbub9u0AGXbfjbugMAMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC
MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw
bEZCQmpKVnJoM0pKY0c2VmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaF3QB/7MW1wNLTq4W/Vn1giLJQYezaWgKuEGQIgNWau4DVhNIOS/CBdC4/wt
siXIvixiLejtrUHXWKBJCP7NLDJ9BLnl4LaZPouFBKjQbCiHOCQUtw4VAA/C285+
Qe0klcxY/eUnqxqnxMmoqsElrRofZHPx+eQvaBsamBEY1l9VkvRBxPt9VRSg8sl4
RoqJ31DkcLqc/rhVr45IBF9Yqe0S1PVwbVS/av9o797CUKX/WT8L6D8z03Xp2vPb
X0hK2TiQqFB/g4VfO7cVMdAmNw9Wxp7HaMIdLlorvIgdd3vYmAFVZOSv1Nybp6hb
8qGryP0t/vUroN34O/eBS2eJ1A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:04:42 2026 by rpki-client