Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          E98hS8DkUeAgPnteFY2br0c5dR/rj18jt/wwhxL05ec=
Subject key identifier:   D6:44:49:ED:12:EC:78:F1:3B:44:1C:E6:3C:46:ED:D5:05:57:54:3E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          BE
Signing time:             Thu 21 May 2026 07:09:41 +0000
Manifest this update:     Thu 21 May 2026 07:09:41 +0000
Manifest next update:     Thu 28 May 2026 07:09:41 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: hzwihSs0rFdV6pXzB6UdxjwhTsMbKWeEa2tJj7Qdkfc=)
                          2: 21364F844F9C11F1B46382DC98833773.roa (hash: n/OInjim29mwNTmUQyu6+nqP7xx4ud4IopjoPJfXB2Q=)
                          3: E00442524EDB11F1B57B694D99833773.roa (hash: bxpjndWBJ1ln8/u3+t4VPp+yJvmgyiY62H11DXEea/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: May 21 07:09:41 2026 GMT
            Not After : May 28 07:09:41 2026 GMT
        Subject: CN=6a0eafb5-06df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:16:24:de:74:34:0a:6c:7b:56:3d:df:64:
                    41:4d:54:76:20:0a:11:39:9f:70:83:e1:2f:c5:98:
                    f7:5b:9d:8a:28:cb:f0:3e:ec:ce:09:bc:2d:93:a3:
                    c4:36:38:31:94:a6:ba:be:39:99:f0:d8:5e:cb:93:
                    f8:cb:57:c7:ab:79:9f:b5:9b:a1:f4:5d:76:95:a0:
                    77:14:5e:74:d8:90:46:74:71:2c:c6:34:fe:9f:26:
                    1f:1a:fb:06:0c:5e:5a:46:d6:88:c8:8f:db:c9:17:
                    09:b2:87:7e:aa:db:7a:04:12:f6:03:63:17:1e:03:
                    88:a5:a1:54:c7:85:2a:0f:1b:cf:04:5c:74:3d:f9:
                    fa:39:a7:a0:1d:4a:50:a5:05:3e:df:8c:af:09:d4:
                    23:cb:9d:7c:0d:4a:01:4d:83:0d:1a:5c:ad:70:f5:
                    a3:ca:cb:9e:d8:0a:8e:76:65:01:e9:0c:0f:17:8b:
                    0c:67:a1:30:e7:50:3e:ee:f6:70:e9:fc:32:1e:e4:
                    cc:2b:b1:29:9b:1f:67:c9:51:48:3f:58:66:53:7c:
                    42:d3:46:7c:d6:c5:70:58:10:99:5c:4b:55:06:cd:
                    61:b7:40:7e:9d:67:bb:48:18:b8:5b:03:a4:27:47:
                    b9:6f:ee:d6:2a:59:bf:35:06:d6:76:e5:ad:3f:6d:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:44:49:ED:12:EC:78:F1:3B:44:1C:E6:3C:46:ED:D5:05:57:54:3E
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:26:62:83:ba:08:06:fa:1e:12:66:d8:76:ee:5a:7e:b7:
         c8:6b:72:79:a0:d8:56:8e:3b:f4:17:83:83:ce:67:2c:dc:ca:
         81:ee:ef:4d:8a:9d:7b:7e:e9:bd:3c:88:b1:49:5f:7b:f3:0d:
         5c:e9:b5:12:16:f1:35:d0:c6:75:d0:da:aa:da:5c:c1:f8:4c:
         a9:0b:76:1b:8b:a6:3d:30:21:23:26:68:97:a1:79:4f:fb:92:
         88:59:5f:4f:f7:b1:40:51:fb:07:76:a1:68:11:4b:6c:18:10:
         d6:34:16:5d:08:b8:4d:25:90:74:6d:0a:d4:fd:5e:c3:d4:4a:
         f1:ea:44:f8:f1:e0:b8:6a:6e:b9:8f:b8:f0:81:8e:4e:6a:58:
         bd:7f:fd:6c:0c:18:f9:dd:19:b1:f6:91:9e:98:75:95:df:d8:
         b4:eb:93:3c:af:fe:22:d3:ed:d6:6a:89:c4:0f:22:c2:eb:20:
         02:fe:26:82:d4:c7:64:99:e3:b5:e0:05:8e:ec:e2:89:06:b2:
         61:40:b3:00:0e:a7:cb:bc:e4:ee:f9:5b:4f:ba:90:df:8f:81:
         b9:39:47:1f:d4:b7:37:36:e6:8e:2e:ed:0f:00:31:aa:89:79:
         db:7b:fd:1d:a5:3f:c8:37:93:25:b4:15:bf:c6:7b:10:87:82:
         50:fe:f0:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0
MjkxOTU0QjQwHhcNMjYwNTIxMDcwOTQxWhcNMjYwNTI4MDcwOTQxWjAYMRYwFAYD
VQQDEw02YTBlYWZiNS0wNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+IWJN50NApse1Y932RBTVR2IAoROZ9wg+EvxZj3W52KKMvwPuzOCbwtk6PE
NjgxlKa6vjmZ8Nhey5P4y1fHq3mftZuh9F12laB3FF502JBGdHEsxjT+nyYfGvsG
DF5aRtaIyI/byRcJsod+qtt6BBL2A2MXHgOIpaFUx4UqDxvPBFx0Pfn6OaegHUpQ
pQU+34yvCdQjy518DUoBTYMNGlytcPWjysue2AqOdmUB6QwPF4sMZ6Ew51A+7vZw
6fwyHuTMK7Epmx9nyVFIP1hmU3xC00Z81sVwWBCZXEtVBs1ht0B+nWe7SBi4WwOk
J0e5b+7WKlm/NQbWduWtP21cMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZESe0S
7HjxO0Qc5jxG7dUFV1Q+MB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz
RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REU2Qy82QkMzNzVCMDQzRDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5
SzNhRHlyWTloTDVDa1pWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkxsmYoO6CAb6HhJm2HbuWn63yGtyeaDYVo479BeDg85nLNzKge7vTYqde37p
vTyIsUlfe/MNXOm1EhbxNdDGddDaqtpcwfhMqQt2G4umPTAhIyZol6F5T/uSiFlf
T/exQFH7B3ahaBFLbBgQ1jQWXQi4TSWQdG0K1P1ew9RK8epE+PHguGpuuY+48IGO
TmpYvX/9bAwY+d0ZsfaRnph1ld/YtOuTPK/+ItPt1mqJxA8iwusgAv4mgtTHZJnj
teAFjuziiQayYUCzAA6ny7zk7vlbT7qQ34+BuTlHH9S3Nzbmji7tDwAxqol523v9
HaU/yDeTJbQVv8Z7EIeCUP7wzA==
-----END CERTIFICATE-----
Generated at Fri May 22 12:07:48 2026 by rpki-client