Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          LlHt3WRHTAyrwa8MJdlCjknWdkwIFJpw0CJmfxOKsMo=
Subject key identifier:   DC:5B:92:08:18:85:0B:1B:C6:A6:92:B1:D6:E9:47:83:66:4E:AC:93
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          CA
Signing time:             Sat 13 Jun 2026 07:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:18 +0000
Manifest next update:     Sat 20 Jun 2026 07:01:18 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: eu3qJPHapT0HDnwHlYuUF2Gj+N3jTBHB+j+1fKVmEJ0=)
                          2: 21364F844F9C11F1B46382DC98833773.roa (hash: n/OInjim29mwNTmUQyu6+nqP7xx4ud4IopjoPJfXB2Q=)
                          3: E00442524EDB11F1B57B694D99833773.roa (hash: bxpjndWBJ1ln8/u3+t4VPp+yJvmgyiY62H11DXEea/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Jun 13 07:01:18 2026 GMT
            Not After : Jun 20 07:01:18 2026 GMT
        Subject: CN=6a2d003e-9454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:c3:6b:8d:0b:34:8a:fb:66:71:03:65:b4:
                    57:bc:c5:63:ca:56:dd:ed:1a:b5:9c:48:e7:92:d2:
                    29:4a:35:0f:63:51:d1:b3:54:3e:60:ce:97:cb:81:
                    37:b9:76:49:bd:cf:82:12:49:c7:37:fe:c3:4b:30:
                    d9:fc:76:7a:ac:b9:27:5d:7d:3b:d7:3c:3e:04:da:
                    22:57:b8:41:61:cc:a2:17:b4:c2:d4:5a:91:02:bf:
                    1e:05:36:2f:d0:64:0c:65:6a:f6:d4:cb:c5:50:26:
                    f0:60:ed:d8:eb:bb:55:10:15:df:3b:dc:b6:fa:dd:
                    14:9d:04:77:c2:66:8a:af:21:02:8f:85:5f:54:de:
                    65:20:5d:9f:25:89:99:7d:c0:38:ab:a9:65:1a:cb:
                    85:86:23:37:66:74:9e:15:ee:06:24:18:23:1e:45:
                    f5:9b:60:3e:fa:ba:e7:26:47:b8:79:5a:63:ba:dc:
                    88:df:2a:9d:36:e0:a9:0c:de:dc:f7:23:98:93:d2:
                    88:9a:70:1c:bc:97:bb:e4:b6:0c:2d:20:32:8c:7f:
                    56:01:8d:85:58:1b:da:76:fd:27:7d:75:fe:ae:b3:
                    3b:3a:b1:0c:c5:77:06:96:17:7a:24:75:ce:55:32:
                    04:5e:d8:5f:50:bb:1c:c7:c1:82:76:46:c9:43:4a:
                    8c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:92:08:18:85:0B:1B:C6:A6:92:B1:D6:E9:47:83:66:4E:AC:93
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:8e:21:ae:27:a2:32:7d:05:30:13:cc:2c:70:8b:68:c5:
         b1:12:9e:a6:96:21:1f:84:69:b8:68:81:a8:96:c2:18:92:b1:
         67:fd:14:1e:c7:4c:45:b7:82:5a:35:e3:95:8d:fd:91:69:99:
         ec:4d:65:4a:ca:95:a7:18:52:12:0b:5c:4b:a3:70:eb:7a:ca:
         05:7d:00:0e:58:fa:23:aa:29:7c:4f:73:7d:66:8f:e1:fa:d6:
         e7:be:22:5d:1a:33:ff:6a:c6:a5:a7:cb:ba:5c:e7:33:84:de:
         6b:93:4b:2f:1c:28:f5:16:3e:1a:32:2e:61:57:c0:91:b3:d8:
         fd:a6:26:c8:fe:de:a0:f8:40:ce:24:0b:37:b2:a1:d4:32:fe:
         91:16:b0:02:f9:a0:73:64:38:e2:de:f9:24:3b:c7:7a:33:8a:
         79:4b:09:2f:da:f1:e9:2f:d6:08:94:3c:e9:7f:9d:f4:06:9a:
         f5:28:30:6f:f6:b9:80:25:3e:15:49:43:de:ee:2f:c6:3d:80:
         db:58:f2:8f:25:53:2d:2d:5f:9b:98:52:27:84:53:f0:d5:db:
         c9:f1:64:53:f4:12:27:0f:91:7e:e9:fd:ba:7f:92:dc:88:14:
         56:89:7b:1c:95:73:43:b5:14:81:4d:f6:79:78:86:f2:4d:e9:
         a0:c5:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:51:59 2026 by rpki-client