Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File:                     u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier:          pRQWEH3FKsp+59V1PJxMBbXHYvX05XV1sQvJKo+zxt4=
Subject key identifier:   57:88:D3:2C:CE:AE:94:E6:89:FC:61:66:3F:79:D2:54:26:82:55:89
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer:       /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial:       0D5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number:          0D43
Signing time:             Tue 18 Aug 2026 18:27:16 +0000
Manifest this update:     Tue 18 Aug 2026 18:27:15 +0000
Manifest next update:     Tue 25 Aug 2026 18:27:15 +0000
Files and hashes:         1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: hv5YywANh9dX7OjshzDeAVu/XlDagsMtshlLu1vNMoc=)
                          2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: H6dj7xFFUstXgEpSczjVXVqVRfoxR53Jp0gN3RANW6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
                          rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3423 (0xd5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
        Validity
            Not Before: Aug 18 18:27:15 2026 GMT
            Not After : Aug 25 18:27:15 2026 GMT
        Subject: CN=6a84a403-6b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:a1:4a:b6:cd:57:48:59:8b:31:b8:a5:eb:
                    23:e9:9b:7d:74:46:fe:a7:43:c3:e2:76:0a:3a:f5:
                    02:65:0e:6e:2d:f1:e0:7a:d8:94:c8:aa:26:d2:b7:
                    b3:8b:1e:f8:e0:7c:8c:e2:25:41:c5:1d:dd:30:fc:
                    b0:c5:1e:68:38:1d:d7:35:70:d7:50:86:cb:c2:e5:
                    ab:27:ec:04:1a:19:62:79:83:d1:89:82:ef:fa:a4:
                    c1:f8:e9:64:17:f6:10:ae:a9:5d:64:b5:f1:f1:af:
                    3f:8b:4a:df:eb:56:1d:51:b0:b5:b6:ab:16:28:78:
                    c5:5b:88:bd:fa:06:17:f2:c2:7c:b4:54:a5:13:7b:
                    6d:9c:3b:d6:02:99:ad:85:12:37:e1:f4:f5:8f:81:
                    1e:27:e8:cb:f5:a3:1a:7a:59:a2:1d:a2:fb:a9:5a:
                    d2:db:73:42:9c:d9:f6:56:8e:b5:f2:84:9e:77:ad:
                    e8:23:3b:29:a4:0f:5a:41:62:44:b6:42:b0:9c:60:
                    51:e9:48:44:af:78:8c:1d:00:98:c7:70:3c:8d:f9:
                    4c:7e:c5:da:62:13:3e:d3:1e:54:75:a8:33:8c:c1:
                    73:aa:a6:26:7b:ff:23:1b:63:d9:30:bf:12:2d:a2:
                    e8:cf:e0:a4:06:5b:16:ab:9d:f5:81:ba:6a:61:36:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:D3:2C:CE:AE:94:E6:89:FC:61:66:3F:79:D2:54:26:82:55:89
            X509v3 Authority Key Identifier:
                keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:fc:8e:29:27:5e:6e:7d:53:19:6c:75:48:0c:49:d8:db:c3:
         b8:e8:cf:ef:ff:ff:09:3c:40:35:48:6a:41:7c:d7:ad:68:22:
         3d:ed:26:32:67:27:5c:c7:52:86:9b:51:e6:c1:eb:8e:69:c3:
         0a:77:f2:27:1a:b8:2e:1f:33:fa:77:9f:97:03:9d:a2:c5:52:
         98:dd:71:dc:86:4a:ac:6c:47:4d:8b:aa:00:a9:2d:15:15:c2:
         f3:95:36:67:9f:ab:13:1a:74:97:52:42:01:73:72:40:ff:04:
         9c:44:94:36:9f:36:f7:cf:80:0e:f7:78:a4:8b:e9:b5:b3:1c:
         f4:a5:ec:85:6c:be:f6:d9:23:b4:48:8b:87:7e:29:20:73:d3:
         40:da:1d:99:68:e7:b3:a6:90:f5:54:21:fc:12:7a:a0:be:09:
         87:44:18:9f:36:31:f0:a3:e4:46:71:b5:8d:49:49:93:b2:bd:
         8f:da:65:8f:58:b1:7b:7c:78:07:9d:5c:87:4b:bd:1c:00:75:
         59:a4:b4:4e:19:81:65:cf:44:6f:a2:71:0c:14:af:ee:12:18:
         b8:4a:8e:6b:cc:cd:0d:cb:78:28:ea:89:40:a5:c3:8e:76:0a:
         cf:65:12:27:29:ce:54:7d:78:2e:76:66:ef:0e:5a:1a:e4:0d:
         66:06:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:22 2026 by rpki-client