Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          ABM5yZ3qvQl545J73NVIhlfbhv88u59ap/h6f1s8aZU=
Subject key identifier:   5D:E7:9C:0C:54:B1:16:31:B9:BA:75:47:61:2A:EA:75:BD:F0:B1:BF
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          A1
Signing time:             Sun 05 Apr 2026 06:43:38 +0000
Manifest this update:     Sun 05 Apr 2026 06:43:38 +0000
Manifest next update:     Sun 12 Apr 2026 06:43:38 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: 91DRXlkvWJjvBciXbIv4blTaVeP9j7OZlHTHd2Nt9lQ=)
                          2: 4881B000288D11F19BDD6B76AC833773.roa (hash: rEN37lmGj7miwKByIvFWg1gtu5AStLDZq19R48cidBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Apr  5 06:43:38 2026 GMT
            Not After : Apr 12 06:43:38 2026 GMT
        Subject: CN=69d2049a-f3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:09:04:59:f8:7b:79:72:81:ba:06:23:80:2b:
                    00:e5:78:3d:a1:86:3a:9f:8e:0a:d9:33:f3:48:b5:
                    fe:7f:7a:85:31:af:4f:1e:57:8b:c3:4c:db:52:0a:
                    2b:30:42:93:e5:75:17:f5:de:ab:09:db:6e:54:c0:
                    14:55:33:28:2d:e9:f5:b4:57:b3:5f:4c:c7:35:d3:
                    d4:60:e3:48:57:c0:e3:d3:86:4f:b5:a4:bb:65:07:
                    c0:7d:bc:3e:07:65:d7:d3:24:c3:22:ca:f0:ec:d7:
                    10:ff:b8:fe:0c:09:10:00:4c:6a:cf:f8:51:df:23:
                    8a:49:6f:81:e1:52:c1:bf:f3:ec:52:a0:06:7b:9c:
                    2e:5b:6d:eb:a9:a5:dc:cb:93:40:12:d4:e5:a1:3b:
                    e0:bd:f4:62:30:3c:7e:8f:da:6b:a6:02:a1:84:7d:
                    25:2b:30:60:df:aa:71:1e:b4:91:82:ea:86:29:ea:
                    2c:92:9c:16:c9:4c:16:bf:9a:d2:5a:49:90:12:77:
                    b4:3f:69:69:b7:e3:6c:d6:c5:b3:9a:55:54:56:2d:
                    5c:1b:b5:da:37:9b:17:c5:1e:1a:20:27:78:c6:aa:
                    e3:85:31:56:5b:49:5c:94:c9:2c:a9:12:f4:12:dd:
                    1a:a4:57:06:b0:61:f4:54:36:e5:21:20:aa:62:a4:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:9C:0C:54:B1:16:31:B9:BA:75:47:61:2A:EA:75:BD:F0:B1:BF
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:64:3c:ce:43:33:ca:25:c1:1d:81:c7:54:e5:c6:6b:f0:64:
         0f:7c:9c:ca:51:7c:2d:ca:c4:3e:58:aa:d4:63:34:f7:26:1a:
         9f:de:56:f2:a4:c3:f3:81:b6:86:9f:e6:a4:3a:a5:d3:87:5f:
         06:b9:0b:9e:f9:8c:9a:de:84:9d:17:c8:fc:46:61:ed:ca:6d:
         61:24:0f:f6:cf:bd:0f:86:00:2a:8e:51:6b:5d:97:8e:bc:3a:
         59:36:7f:7b:ba:b9:84:e8:2d:e9:3b:2d:35:93:8c:86:08:4c:
         49:7c:4c:3a:f4:92:e3:be:1c:d0:3c:04:55:da:16:82:99:2e:
         a8:ce:f1:1b:4a:57:33:5f:c2:66:39:11:99:bd:c7:54:bc:3b:
         76:8a:40:7a:e5:10:99:50:5f:b3:98:22:19:85:a8:e1:ea:47:
         09:34:fa:8c:51:9e:12:48:bc:fa:34:c6:b9:24:78:27:15:26:
         6d:28:1c:d3:a7:d1:54:91:a2:75:e5:5f:d2:51:3a:89:3a:32:
         f7:57:26:56:89:1d:da:db:43:39:ef:d0:ab:75:f6:ae:e6:36:
         db:e6:ed:b0:54:b1:56:b0:63:73:8b:89:ff:0f:6a:c9:da:95:
         9c:da:9d:e8:15:ac:b3:d7:07:9a:c6:ee:e1:d9:fa:f6:d6:ad:
         85:d5:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:18 2026 by rpki-client