Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
File:                     UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json)
Hash identifier:          MEgmJBxcReNcISVhEesMI+1shMyUfo392ElhK+H3VHw=
Subject key identifier:   F2:8F:CE:D7:59:F8:CA:09:15:93:F0:B9:F9:58:A8:E7:74:98:A7:62
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
Manifest number:          0812
Signing time:             Sat 04 Apr 2026 20:54:51 +0000
Manifest this update:     Sat 04 Apr 2026 20:54:51 +0000
Manifest next update:     Sat 11 Apr 2026 20:54:51 +0000
Files and hashes:         1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: HHM67iqVyDscqRFmQDdkE4WxGG9Iq4DUdtQ9/FWl0/4=)
                          2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: SQ6zwcvQ5au49qPHtRFj85d+H63jUBLTmi4VuDL7FV4=)
                          3: B3C29AE8D3C711F09E46353CC4F9AE02.roa (hash: tXcl1fBoWO8w30UDVXKFhjr8bG8EJt2SCP07PWyeSSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Apr  4 20:54:51 2026 GMT
            Not After : Apr 11 20:54:51 2026 GMT
        Subject: CN=69d17a9b-81c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:e6:ba:09:c6:9d:1c:88:69:ee:a2:29:80:
                    4a:38:14:54:63:24:02:77:33:1c:74:c5:dc:b3:fa:
                    be:c2:d7:34:27:36:2d:ef:4d:dc:de:be:8c:f2:12:
                    21:2e:ed:b6:a1:79:04:c8:e9:e0:a3:12:fa:ee:d6:
                    1b:cf:1b:60:3d:32:37:90:fb:b7:7c:af:60:14:e5:
                    63:1e:70:28:64:b7:99:d0:89:49:3b:cd:26:e9:0d:
                    64:e7:51:36:50:6f:ea:15:d9:08:ab:9b:12:1a:84:
                    92:7d:28:34:2e:5f:ab:44:92:58:8c:2f:75:19:cf:
                    ed:dd:4e:3c:4f:e2:a3:75:1f:79:51:f0:63:cf:76:
                    74:e0:85:00:69:5c:89:db:59:9f:db:d3:6c:25:45:
                    86:d6:19:40:f6:d1:42:49:9d:3e:86:ce:63:7f:55:
                    b7:d7:96:0a:36:d0:f7:ac:70:51:d7:53:9f:6d:45:
                    a9:ff:62:c0:f0:6b:6a:37:48:85:65:8c:1c:7b:8e:
                    0e:a1:e5:e3:0a:65:b0:02:d6:d1:52:63:09:4d:30:
                    a0:c0:f6:4c:60:d2:42:ab:62:07:a3:65:7d:62:10:
                    f5:31:2f:af:3c:85:60:0f:c0:a0:98:2d:60:47:e7:
                    28:d1:f8:6d:54:6c:0e:6a:d4:00:82:ff:7e:1f:1b:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8F:CE:D7:59:F8:CA:09:15:93:F0:B9:F9:58:A8:E7:74:98:A7:62
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b8:93:c5:2b:b5:ff:e9:9f:a7:30:f2:11:c1:7a:35:dc:27:
         d2:71:48:61:2a:c3:b1:02:93:f0:06:c0:8b:4d:4b:d2:a6:3f:
         59:da:7b:55:f5:d4:da:7e:1d:91:86:f5:a5:1f:8d:00:bf:40:
         70:f2:42:04:11:98:d8:1d:f4:79:15:7d:3b:11:2c:69:6c:2c:
         49:36:dc:51:e8:57:3c:60:ca:a7:c2:04:08:89:d9:42:6f:a6:
         54:a9:02:c4:a9:82:6e:bb:44:ac:62:e3:6c:ef:7d:60:26:bd:
         93:02:75:3f:65:63:da:28:92:0f:f9:e1:ad:df:68:4f:7f:a5:
         75:ef:70:d5:ae:d7:c9:f3:48:60:88:d8:33:17:d0:38:18:ba:
         3e:19:94:51:96:3e:bb:39:47:82:b5:97:27:06:e7:ba:3b:91:
         4c:f3:34:d7:ae:a9:8a:32:f8:d7:91:4d:2b:fc:b1:34:c4:37:
         8d:7e:05:ba:8f:f1:27:e7:6d:63:ad:f4:51:50:d1:45:d7:0e:
         0e:13:80:97:02:09:65:ab:47:8c:75:a5:5f:c1:8d:b4:a6:21:
         88:b7:47:32:3a:5c:53:0c:8d:c6:91:21:d0:51:2e:bf:0f:04:
         a5:5f:82:1c:03:8d:84:2d:8c:f2:ba:c3:46:c1:b2:60:78:cb:
         b2:98:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:11 2026 by rpki-client