Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
File:                     UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json)
Hash identifier:          EnU2zTbAf/1MiCVv79lQaTrnc645XBeNof1y9D3RANI=
Subject key identifier:   0D:C5:7B:DB:84:70:58:40:F8:B9:99:20:34:08:49:BA:B7:C8:3B:08
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Certificate issuer:       /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial:       0BE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
Manifest number:          0BDB
Signing time:             Thu 16 Apr 2026 18:49:25 +0000
Manifest this update:     Thu 16 Apr 2026 18:49:24 +0000
Manifest next update:     Thu 23 Apr 2026 18:49:24 +0000
Files and hashes:         1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: b8FpGlYPjqV0R/NZ2HS8b6AxFBd4txSbk97DxpZVsKc=)
                          2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: a4ghMtDQgFWNPHlueQACfELgSM0up8nyJnqh/QTeJiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
                          rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3043 (0xbe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
        Validity
            Not Before: Apr 16 18:49:24 2026 GMT
            Not After : Apr 23 18:49:24 2026 GMT
        Subject: CN=69e12f34-3754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:a6:d1:f6:48:22:67:33:01:34:21:7e:77:
                    1b:c7:e1:e8:78:f9:cd:a3:19:ce:6e:5a:a6:03:24:
                    a9:d0:6a:49:a0:f8:44:60:3b:7d:28:15:db:fd:56:
                    87:04:1e:82:08:57:60:60:ed:e8:92:04:82:06:42:
                    f8:53:29:3c:5f:35:65:4a:c7:72:49:ba:d0:ac:8c:
                    93:6d:de:22:0c:6f:ba:36:0d:ef:07:ec:f0:fb:4f:
                    31:de:5f:61:b5:d4:6f:7f:ac:bf:b3:30:11:c6:2d:
                    60:ea:cb:e9:27:c2:75:18:c3:02:e7:b8:12:b0:77:
                    bc:c0:94:6b:f4:35:5f:08:d2:f5:5b:3a:64:27:13:
                    a0:6f:d0:b3:69:6d:fa:f2:c1:46:81:1a:20:8e:fe:
                    67:48:88:02:83:bc:8c:25:33:a9:37:74:8b:ab:4b:
                    15:19:47:d9:c1:ad:bc:fe:c4:c2:32:fd:70:2f:c1:
                    2c:cf:a4:74:41:a7:a7:4e:5c:49:0e:5b:b1:17:d0:
                    39:d0:b0:b9:7b:6b:49:24:38:f7:b9:cd:67:53:2f:
                    31:ca:3e:68:c8:e8:29:8d:d4:2e:50:50:c6:10:f3:
                    02:19:2a:cd:a6:5c:1b:d2:d8:16:d5:72:58:ab:87:
                    0a:e8:20:08:7d:85:9c:ed:93:0d:d0:aa:3c:9a:d8:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:7B:DB:84:70:58:40:F8:B9:99:20:34:08:49:BA:B7:C8:3B:08
            X509v3 Authority Key Identifier:
                keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:7c:57:87:36:6d:c9:ed:0c:bd:f9:fd:a8:68:41:56:78:
         c1:d5:1d:9c:44:01:65:5a:b3:2f:a1:ee:a4:74:dc:5f:ef:3b:
         ef:5f:48:6d:bc:0f:3b:3b:7a:2d:e9:d5:c4:77:cd:70:b8:39:
         cf:e0:6f:94:59:37:3c:63:58:0f:ce:48:54:6c:80:e0:9e:28:
         ee:c3:30:e0:aa:1b:61:ba:56:a7:19:00:88:2f:d5:90:39:44:
         15:f7:d8:a0:8b:1d:f9:69:3d:2b:de:1d:e3:11:db:4c:4e:89:
         af:e1:62:f3:23:d6:aa:ea:e7:ed:87:bf:e6:12:de:07:00:62:
         98:68:df:52:e3:c8:f0:e4:69:52:60:ad:d5:0d:74:80:0b:51:
         80:ea:fe:97:25:4c:6e:c7:a9:7f:20:b6:fd:ff:4c:19:84:c3:
         ba:c6:82:f3:bf:8d:8e:93:6c:f4:49:e5:54:2a:ba:2f:cf:d2:
         64:06:ae:df:62:56:58:d0:bf:f4:45:c2:63:ea:ed:dd:08:34:
         ad:bb:9a:f7:77:0e:21:16:8d:fc:1c:89:b1:4e:69:31:5f:03:
         48:96:ee:3d:50:03:26:d1:4e:18:75:ed:4a:dd:54:61:d2:0d:
         75:96:c4:35:40:ed:ae:4a:9c:61:48:40:86:b5:d9:d8:da:06:
         72:3c:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:40 2026 by rpki-client