Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          Atg0HXjIQ8BCuyqm+AqzaGuI4Jhw1bYMdNkQo32Qx+0=
Subject key identifier:   43:2B:F4:28:A1:5D:92:5D:79:D9:99:91:F3:2A:A3:53:E8:B5:1F:10
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          0123
Signing time:             Tue 27 Oct 2026 06:24:45 +0000
Manifest this update:     Tue 27 Oct 2026 06:24:44 +0000
Manifest next update:     Tue 03 Nov 2026 06:24:44 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: vFmhk4wYrrRjhtTL/FBEotiduifAeNJaZN4aOhQSffk=)
                          2: 8732879E95BA11F1B9CA092C4311F970.roa (hash: MEGlRUYhB4SHO0VLh+MIz2x8hOoJV3bR04uKQvrICwE=)
                          3: 59555A30CE4611F195338DE22466CEF9.roa (hash: NgYU1nlZIYM2w9kR/M2RnzGyWTtnruWlMf3AVLA8PCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Oct 27 06:24:44 2026 GMT
            Not After : Nov  3 06:24:44 2026 GMT
        Subject: CN=6ae043ad-5b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:e9:39:03:8b:2f:1d:9c:77:f3:11:af:91:
                    b2:d8:7b:eb:09:6f:44:5e:5c:f6:5d:24:06:f3:de:
                    d5:95:9e:6a:0d:17:4e:d0:60:4d:20:72:6b:e8:da:
                    6a:d0:fb:88:e7:ad:13:20:40:49:74:b8:0a:a9:a3:
                    40:70:91:a4:13:28:2b:c2:0d:90:a7:20:c0:c1:2e:
                    e3:54:5c:e2:cf:eb:a3:69:21:40:9e:94:cf:22:f5:
                    f5:1d:45:1b:03:af:85:82:2b:e7:73:6f:0a:3d:6c:
                    87:f9:93:c8:f4:0b:de:1c:84:8f:3b:d7:4e:54:88:
                    07:a7:73:cf:97:a6:57:cb:43:58:bc:01:fc:a3:44:
                    8f:47:44:b1:61:f7:bb:90:7f:5e:bf:1f:09:c0:a8:
                    9e:06:20:66:85:0f:03:9f:50:c4:5f:97:c2:47:64:
                    0e:e5:68:77:8d:34:62:54:7e:be:42:a2:87:3a:0e:
                    78:97:44:54:49:57:5d:42:90:e6:19:2f:b2:c8:21:
                    72:6d:8f:37:93:87:cd:23:6c:54:98:b1:89:3b:87:
                    19:32:a5:2f:6e:a8:4f:74:61:35:88:41:90:5d:e6:
                    2b:be:45:34:cb:a7:cd:4d:e3:17:80:32:e9:2e:a2:
                    4c:6d:4a:af:48:15:6d:c9:99:49:c9:0d:6a:cc:1a:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:F4:28:A1:5D:92:5D:79:D9:99:91:F3:2A:A3:53:E8:B5:1F:10
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:b5:47:cc:e8:05:ba:0b:36:c1:52:eb:13:f5:15:da:89:
         ee:ee:1f:46:0e:83:d4:31:34:13:6b:1c:da:30:c4:0b:3b:99:
         a9:c3:7e:39:28:eb:20:05:7d:79:b1:6e:e1:a3:63:8f:ce:69:
         02:82:65:2d:14:40:ea:74:41:4b:fe:a5:28:4f:9d:47:46:b5:
         7f:d7:9d:33:f1:ea:16:e4:e2:e6:76:70:60:0f:4e:cc:58:10:
         7c:4f:bd:8e:d2:87:d6:1a:af:6f:f3:de:80:65:fc:47:77:1c:
         a7:1f:2f:c2:42:15:4a:2f:bc:97:dc:b5:87:3c:5a:43:69:31:
         78:f4:af:c9:ea:c9:7f:51:8d:25:88:40:03:a8:23:9b:f2:88:
         9a:6c:30:a0:0d:b5:b6:a3:6e:4a:71:be:78:e1:e5:5c:96:ae:
         bb:85:65:83:17:44:b1:65:12:71:f9:31:05:95:1f:60:3d:3c:
         9a:ed:54:a1:fc:18:ac:cd:f3:46:95:1b:72:0b:77:94:22:cb:
         5a:8e:e3:84:58:53:fa:ed:87:29:e5:c7:49:e4:90:b1:24:00:
         99:47:ca:8f:0c:3e:d9:a9:29:e0:55:5f:37:cc:5f:aa:02:6d:
         a1:b5:e4:a9:c1:0e:e8:dc:49:fc:a1:05:62:25:e6:5c:a9:11:
         60:ac:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:44:17 2026 by rpki-client