Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File:                     uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier:          r4wE1mn2pfZV6FNgn78PsQpSPVd7jgeF4v1RL3MjPrA=
Subject key identifier:   7A:23:93:DD:1F:B8:DF:A4:3B:93:46:6B:30:21:1E:E8:0B:D3:36:7B
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer:       /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial:       0BB7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number:          0BA9
Signing time:             Fri 18 Sep 2026 19:03:45 +0000
Manifest this update:     Fri 18 Sep 2026 19:03:44 +0000
Manifest next update:     Fri 25 Sep 2026 19:03:44 +0000
Files and hashes:         1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: B9JU5XjVwZ2j45yey5zpP0Or6UWS0VoRXHGnue7JiKM=)
                          2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
        Validity
            Not Before: Sep 18 19:03:44 2026 GMT
            Not After : Sep 25 19:03:44 2026 GMT
        Subject: CN=6aad8b11-ee2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:77:d4:33:79:0a:45:30:0a:e2:e2:27:74:
                    6b:64:9e:4e:0b:ca:3c:eb:18:eb:ca:df:32:03:c8:
                    af:71:61:9b:50:c5:67:e6:2b:af:c3:8f:95:c4:02:
                    13:7f:75:94:65:08:31:96:1d:c0:ce:1a:60:54:21:
                    bb:ab:76:03:ff:87:93:96:93:f3:fc:d1:dd:27:53:
                    11:21:2e:19:27:e8:e2:e6:54:5c:b1:ed:b9:01:65:
                    7d:62:d3:a1:f1:49:31:0e:e0:2f:55:ff:be:31:7c:
                    36:b7:63:09:05:6d:db:38:b2:e6:2f:e4:75:be:08:
                    02:10:77:e5:62:74:16:18:0c:c2:19:9f:69:0b:87:
                    85:b2:b4:19:d5:74:42:12:6b:81:45:60:8a:60:70:
                    43:d0:53:62:d4:7c:46:32:75:ab:86:71:03:14:28:
                    17:fc:62:2f:de:bb:6e:9e:78:6a:72:51:9b:5d:e0:
                    2e:bf:19:32:de:2e:47:61:be:91:6c:60:da:5e:dd:
                    77:c4:4a:57:2e:da:58:8c:dc:49:a0:8a:77:95:34:
                    cf:ed:ff:28:f5:c9:f6:e8:14:ad:9a:8c:ec:58:d4:
                    f5:2d:e4:91:ac:02:4c:3a:ab:cb:b6:ce:ff:6c:84:
                    59:d3:cb:cf:33:9a:76:d3:a8:8d:41:cc:26:19:90:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:93:DD:1F:B8:DF:A4:3B:93:46:6B:30:21:1E:E8:0B:D3:36:7B
            X509v3 Authority Key Identifier:
                keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:ef:c5:5b:db:62:6a:11:28:ac:fa:d0:2e:85:b3:f6:19:
         fb:76:49:cc:6c:01:eb:7f:4c:3d:00:44:12:7d:b1:cd:0d:2e:
         ed:92:c4:1e:20:1b:0d:8c:71:07:50:10:6b:1b:bd:15:eb:e1:
         ff:5b:9a:24:79:f7:08:95:b5:94:90:66:25:c8:83:93:f9:0a:
         f0:94:0a:d9:51:a6:1a:4e:4b:7f:74:f4:fa:04:ee:97:14:fb:
         9d:bf:72:fa:8c:1e:08:f2:c1:3c:35:fb:8f:21:8d:45:4f:f0:
         01:97:3a:78:7e:d0:63:5e:fa:76:be:90:61:be:dc:21:ac:5a:
         68:79:6b:98:35:15:08:88:82:ba:23:2c:85:6e:8a:c2:ec:96:
         74:78:d2:66:ca:e3:fa:a2:4c:0e:a9:a3:ea:4b:ed:98:da:13:
         fa:ac:ae:f1:b9:35:12:d3:a4:14:59:1f:b3:64:77:8e:ba:99:
         83:ac:9e:af:6d:a0:37:41:06:db:23:63:a7:de:89:96:6d:9b:
         8f:15:9a:5d:97:be:71:62:f0:83:cd:43:62:75:6a:fa:a0:93:
         9d:b5:78:9c:e2:4c:22:f0:be:11:aa:73:62:0c:53:c2:90:21:
         83:c3:ff:7d:29:96:0b:7c:07:ee:ef:07:b9:92:b4:cf:7b:bc:
         db:91:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:03:07 2026 by rpki-client