Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          OOrn/ixLgrU2WRaU0KF0iiHsdM/plyhbNjlMlM7n+4Y=
Subject key identifier:   86:CB:A5:1C:D8:37:E0:2F:26:5E:44:9B:49:45:69:14:9D:9E:A9:8E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          A7
Signing time:             Fri 17 Apr 2026 06:59:34 +0000
Manifest this update:     Fri 17 Apr 2026 06:59:34 +0000
Manifest next update:     Fri 24 Apr 2026 06:59:34 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: Q5Rhei7xP/dOr5tCyhMM9/iesMV1Cq7xb4QNYFAGCzc=)
                          2: 4881B000288D11F19BDD6B76AC833773.roa (hash: rEN37lmGj7miwKByIvFWg1gtu5AStLDZq19R48cidBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Apr 17 06:59:34 2026 GMT
            Not After : Apr 24 06:59:34 2026 GMT
        Subject: CN=69e1da56-aff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:dc:ce:e9:aa:b7:47:e2:1b:76:9f:80:d4:
                    f8:cd:42:b4:d3:c4:eb:81:be:e1:7f:2c:4f:fe:db:
                    4a:3d:5a:ae:49:9b:80:45:a5:2e:ab:8b:2b:3f:d9:
                    0a:fe:ef:3d:27:01:5c:20:7e:a8:16:45:e0:0f:40:
                    09:2a:ce:0f:93:92:13:4a:51:16:ca:3e:68:10:ea:
                    13:be:4a:b0:1a:02:86:9a:e7:7f:ee:31:e2:26:0d:
                    9f:ae:42:56:a4:f8:64:a8:87:25:19:ed:5e:02:26:
                    f1:54:24:32:80:a4:1d:1a:d9:75:84:3f:00:68:35:
                    9f:16:4d:a6:d6:f2:ef:32:53:48:79:78:73:4d:89:
                    0f:5f:c5:cf:5b:b2:13:fe:bb:7b:1a:2e:54:8a:5b:
                    7c:f5:8e:26:59:df:e7:26:67:fc:ce:2e:e7:f4:65:
                    8b:91:7d:35:ca:42:81:76:0c:57:12:d7:c6:eb:d0:
                    8e:3a:17:12:45:bd:5c:04:89:e9:64:59:87:22:0e:
                    e2:0f:40:ae:d5:ee:6c:94:0a:37:05:6b:df:4c:e7:
                    b5:28:14:78:ea:fb:f3:72:59:ce:82:f7:32:0e:86:
                    16:20:84:81:ba:d6:9a:b3:98:59:ca:f7:9a:8b:2b:
                    13:e1:2c:df:70:83:f9:04:40:ab:3f:07:12:b6:8a:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:A5:1C:D8:37:E0:2F:26:5E:44:9B:49:45:69:14:9D:9E:A9:8E
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a3:a2:91:47:cf:b0:3e:7f:7b:a3:c0:02:d4:ef:18:aa:17:
         9a:8a:e5:79:43:a4:e2:cb:2b:ea:1a:2c:c2:b0:7a:9d:1c:0a:
         3c:2c:1a:66:df:c5:2d:49:45:f5:d4:5e:10:5a:4c:5b:22:2c:
         ea:03:06:49:43:d9:06:c2:e9:9a:d6:45:f9:29:55:35:57:37:
         2c:b5:d2:cb:a7:fa:59:9c:b0:3e:89:06:c6:7d:6e:fa:d4:d4:
         b7:6d:47:0c:e7:72:e3:1f:c2:c0:0f:25:5f:f1:ab:ba:af:b1:
         04:45:7a:5c:01:3e:08:b6:94:f8:24:ec:22:8b:c4:92:b7:6f:
         ae:7b:ac:fd:f3:2b:25:3b:73:6e:b1:0d:da:96:37:39:a1:9c:
         8b:62:61:9e:c8:0e:a8:c7:7e:5d:b3:2b:dc:a2:45:bf:d2:8c:
         07:e5:d2:e3:96:f2:d6:15:34:36:1f:80:f7:a9:70:ac:d5:bc:
         7c:63:be:55:d9:1e:cc:a8:0d:3d:b3:a1:81:da:33:04:80:4d:
         9b:cc:4c:45:0f:7f:1e:79:c7:55:78:c2:5e:5a:19:3d:e3:1b:
         fa:18:02:f7:25:2e:f6:84:23:5f:78:05:94:93:08:8f:85:fa:
         9f:e9:6e:52:06:d3:e8:2d:ce:4d:c3:6f:70:b3:14:8f:e3:d2:
         8c:01:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:53 2026 by rpki-client