Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
File:                     UkKKuo4K7IH5nXzYknKnEHQIbEY.mft (raw, json)
Hash identifier:          YPgEeBhwQaOAbnmMZAuJ6n7QFlpth7Tld2mvVYkK2LM=
Subject key identifier:   57:29:94:BD:24:17:E6:1F:0A:23:97:D7:D6:B2:60:08:AA:47:2E:D4
Authority key identifier: 52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46
Certificate issuer:       /CN=A9190E6C/serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
Manifest number:          40
Signing time:             Wed 14 Oct 2026 17:53:22 +0000
Manifest this update:     Wed 14 Oct 2026 17:53:22 +0000
Manifest next update:     Wed 21 Oct 2026 17:53:22 +0000
Files and hashes:         1: UkKKuo4K7IH5nXzYknKnEHQIbEY.crl (hash: aRRqIUj9dHzTm6yQzjbUWvdqMf14uwd75VN3ras0vq8=)
                          2: 3F551C74696A11F19F0E96FC7847A888.roa (hash: LOeF5oKzX3hsnldQfxTGyeCZaIlHTWbNNaHQcrweuJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl
                          rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190E6C, serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
        Validity
            Not Before: Oct 14 17:53:22 2026 GMT
            Not After : Oct 21 17:53:22 2026 GMT
        Subject: CN=6acfc192-a0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:aa:48:d7:a3:43:d2:56:25:fa:1d:56:43:
                    b6:a0:4d:93:f3:84:75:d2:89:11:0c:0f:ea:67:70:
                    e8:f9:28:7d:02:16:9f:cf:69:fc:78:7c:54:59:db:
                    da:cc:e8:e6:32:52:e6:83:dc:27:0c:fc:50:a9:0d:
                    3f:e4:49:63:52:ba:29:db:fb:92:cb:46:87:d5:41:
                    19:ee:ef:b7:96:2a:37:1d:3d:de:b1:5a:f7:09:12:
                    79:b2:b3:11:f1:0e:da:c4:c1:e0:68:2f:5c:24:8c:
                    10:e8:03:8f:da:d1:d3:53:33:e2:1f:b4:60:83:7c:
                    10:87:89:6e:e5:0c:85:87:a0:40:64:d3:33:30:55:
                    7f:b8:47:07:72:b9:35:c7:53:66:6e:50:bc:6c:e5:
                    f2:e1:10:b1:fd:e4:8c:25:35:37:cb:b2:b7:31:84:
                    78:a5:f2:c1:cd:c8:9d:b1:74:05:26:19:e1:df:19:
                    00:cb:40:52:f6:01:79:4e:70:5d:b8:1c:23:d3:a4:
                    89:73:61:7d:15:1c:84:a9:cc:6b:c7:da:3f:13:88:
                    85:35:56:f5:8c:c2:fd:a2:8b:46:01:7f:62:82:ec:
                    a0:a7:5c:67:98:b9:11:bf:e3:cd:8a:fc:c6:4e:97:
                    db:8b:00:6c:0b:79:83:cf:37:e6:09:b2:34:05:bf:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:94:BD:24:17:E6:1F:0A:23:97:D7:D6:B2:60:08:AA:47:2E:D4
            X509v3 Authority Key Identifier:
                keyid:52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:2a:e5:1e:f7:fe:00:09:2c:df:c6:63:f9:c7:81:ba:7c:
         db:b0:99:df:19:8b:dc:7c:ab:79:4d:70:a5:02:02:4c:93:44:
         3c:8f:7c:db:59:d1:f0:e4:0c:a9:20:bd:65:18:01:99:a3:d7:
         65:7e:a2:18:41:1c:10:9e:ee:2a:f7:9d:b3:a4:71:75:3a:46:
         da:4e:37:f3:e1:99:2d:b7:7d:4d:17:a5:49:ae:ca:e0:bb:56:
         72:8d:03:fe:63:a3:59:5f:ea:fa:cf:64:cb:54:24:f6:6e:e0:
         05:3a:a3:c5:98:77:c3:60:40:63:04:ad:2a:8d:eb:07:b9:62:
         ff:06:95:de:06:b2:53:18:34:0c:7f:85:78:b2:4b:74:b6:87:
         e9:c1:c3:4d:43:e1:51:fd:82:f8:cd:ac:74:6c:80:8c:22:7f:
         02:94:0c:08:74:0d:ff:98:a1:9f:9f:06:bd:0c:13:6c:86:35:
         cc:bb:e1:bc:72:9f:17:f5:31:74:92:85:3b:d8:e7:d7:00:41:
         6a:fc:5c:9c:b9:2e:2d:84:ce:9e:02:5d:70:93:17:08:21:f9:
         54:37:f4:95:e5:0b:93:31:4f:e2:75:09:cd:27:f0:a4:7a:67:
         a3:f9:0a:b8:72:0e:b8:1a:3b:af:5d:3b:12:aa:93:af:0c:bb:
         a9:cf:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:14:57 2026 by rpki-client