Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File:                     uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier:          pOPluvzH6C5gs66QWrv5fpKkU8hrDuSGjCLPYtnlsY4=
Subject key identifier:   41:85:99:76:21:91:03:C0:D1:DE:53:7A:4D:6B:38:C4:1A:3F:C0:43
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer:       /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial:       0B85
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number:          0B77
Signing time:             Fri 12 Jun 2026 19:12:08 +0000
Manifest this update:     Fri 12 Jun 2026 19:12:07 +0000
Manifest next update:     Fri 19 Jun 2026 19:12:07 +0000
Files and hashes:         1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: A4cciPWNchM+tz0tHYOeGNSlZK+SR2JSsJB7aOq9XFU=)
                          2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
        Validity
            Not Before: Jun 12 19:12:07 2026 GMT
            Not After : Jun 19 19:12:07 2026 GMT
        Subject: CN=6a2c5a07-0de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:33:d1:fd:44:d7:41:d7:d5:6e:d8:62:b8:
                    12:41:23:77:25:02:8c:11:9e:c7:7c:ad:dc:d2:76:
                    4f:83:73:89:c2:b2:25:a9:14:c7:0b:20:4a:cc:e7:
                    38:1b:e6:04:54:34:0e:41:91:c9:67:56:6b:60:74:
                    55:eb:f9:ca:4b:d7:60:4b:b3:2c:75:f7:3c:d4:fb:
                    6a:7c:d7:62:96:03:cd:37:b5:59:e5:e0:56:cd:f5:
                    ec:d4:a5:86:b2:82:b9:af:79:21:25:8a:af:71:6a:
                    67:1f:94:15:6e:c4:73:9e:d4:07:fe:03:21:7f:79:
                    be:d9:f1:aa:49:43:35:0d:31:3a:2f:ae:ba:38:93:
                    a8:65:8c:5b:ca:2e:b8:86:f3:68:bc:d1:92:a9:9a:
                    1f:aa:ee:8b:b9:ea:f8:26:8e:59:d6:41:88:f9:ba:
                    dc:2c:5a:90:d0:a9:21:3e:53:78:c6:19:98:ff:1c:
                    64:4b:10:3a:75:db:35:e3:52:0b:51:f6:4f:57:b8:
                    5e:8f:5d:bd:cc:6e:97:63:1f:fd:ec:fc:dc:8d:e8:
                    a4:d0:c0:4c:6d:89:ae:cc:fb:e3:99:d5:eb:9a:0c:
                    8b:88:33:fe:ef:42:81:4e:9a:da:b3:58:41:7c:24:
                    25:42:5a:e8:ac:df:fd:91:bd:80:62:bc:8b:ba:e7:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:99:76:21:91:03:C0:D1:DE:53:7A:4D:6B:38:C4:1A:3F:C0:43
            X509v3 Authority Key Identifier:
                keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:23:cc:b6:d3:7f:56:25:0d:53:e6:e8:fd:b8:11:dc:62:de:
         33:5e:65:c9:ef:10:99:69:1b:07:6a:b2:9a:bf:89:74:fa:0c:
         cc:3a:92:a5:c9:ea:31:44:d6:57:ac:82:32:64:cd:df:99:d1:
         36:b3:f2:36:77:56:43:76:c6:1f:98:dc:55:53:35:ec:bc:a5:
         83:d9:51:b9:6e:68:c4:12:a9:ab:d7:14:ae:ae:eb:de:7e:03:
         c1:d9:36:ab:52:00:ec:92:44:6d:ef:36:74:c5:4b:42:8b:ab:
         2f:5d:cc:66:d6:75:05:eb:d1:d8:6d:ce:ba:ec:6e:35:dd:83:
         b0:83:e0:0c:59:33:91:94:64:aa:50:9a:88:a7:08:4d:aa:23:
         cc:b6:16:eb:f5:db:ab:5f:3a:7b:4e:95:60:0c:01:11:64:21:
         5d:ca:d2:41:78:ec:24:a8:65:5a:b9:8c:0f:f9:63:0a:4e:58:
         3e:c9:c9:ce:72:8b:f2:e4:02:09:0a:0b:f9:15:ff:c0:46:8b:
         ad:24:e3:db:8e:cf:3b:82:58:6f:4f:0f:07:6b:13:5c:b7:15:
         1a:52:7d:18:41:d4:b7:44:28:05:65:7e:5e:8c:5f:76:dd:79:
         8e:73:d9:33:d6:88:9c:50:72:8b:c0:7e:e4:1c:f3:0d:34:94:
         dd:41:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:47 2026 by rpki-client