Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File:                     UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier:          KVOaRpdnnkwnTK0sLDuODBAXQBkD3cBpbRHC1oOpepQ=
Subject key identifier:   B8:D5:46:AE:85:A0:68:F4:10:9B:01:5D:1A:5D:60:38:78:E5:01:58
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number:          01E8
Signing time:             Mon 02 Mar 2026 01:59:38 +0000
Manifest this update:     Mon 02 Mar 2026 01:59:36 +0000
Manifest next update:     Mon 09 Mar 2026 01:59:36 +0000
Files and hashes:         1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: HAqnT6zBbVijsvUrPcPOuSJPBeLjJa//KMlwpmRiF4c=)
                          2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
                          3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
                          rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Mar  2 01:59:36 2026 GMT
            Not After : Mar  9 01:59:36 2026 GMT
        Subject: CN=69a4ef0a-c328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:2d:ff:2a:43:83:34:43:1b:1f:05:5c:ec:
                    4e:18:3a:58:6d:b7:68:bd:f9:9a:e8:a5:6b:97:86:
                    79:7c:b1:b6:ca:d1:bc:c2:06:a8:cb:d4:ea:49:3c:
                    61:10:b3:ca:1a:ac:95:dd:1c:82:58:08:6f:7b:ed:
                    62:7b:d2:d9:f3:98:08:ed:bc:3f:24:9c:b9:c0:13:
                    42:c9:a6:ad:89:60:04:6b:74:08:a9:5b:99:79:90:
                    0a:1e:ed:07:06:ad:6f:8f:2b:e9:6b:ef:6c:b0:04:
                    b0:5b:61:5b:67:a2:90:57:46:d1:4c:51:b3:0f:81:
                    62:e5:74:79:a6:49:c9:08:2e:bb:08:57:40:7b:fa:
                    44:c4:ac:ac:8d:fe:20:41:a9:d8:fb:bb:75:fe:d8:
                    a6:aa:ff:14:e7:96:63:bf:02:44:30:9b:ba:02:46:
                    b6:70:8b:c9:a6:d6:81:2a:1d:a9:29:58:a4:47:bb:
                    e8:c9:d9:5f:be:18:5b:21:90:61:49:56:d2:8d:c2:
                    94:3c:ac:1e:ab:0f:be:9c:58:ce:53:1e:42:3c:aa:
                    76:04:8d:0a:09:ac:e4:26:db:76:77:bf:fe:bf:74:
                    4e:b2:79:c8:8f:14:55:19:72:a1:7d:a0:de:c9:90:
                    4b:61:dc:2e:19:12:b9:b9:37:3d:73:17:fb:d7:ee:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D5:46:AE:85:A0:68:F4:10:9B:01:5D:1A:5D:60:38:78:E5:01:58
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:df:c8:52:8b:d1:15:37:24:8f:b4:f4:a2:08:94:c5:4d:9d:
         a6:68:67:1a:ce:76:e5:f5:b6:3a:9e:34:72:ae:4f:68:f1:a3:
         e6:04:20:41:a9:bc:ed:17:15:f5:83:6f:a1:96:bb:74:00:b4:
         7d:81:d6:04:02:ee:fd:15:21:d9:fd:d5:71:e5:2e:89:8b:b6:
         94:3a:cf:35:9a:ad:23:77:25:25:1f:c4:1a:43:d3:2f:fb:bf:
         9b:49:7c:f6:c9:99:9a:a2:d1:8e:f6:a9:46:31:ca:be:8f:71:
         3c:44:ef:9d:7d:93:e0:00:42:0c:db:b2:d1:2c:84:44:c9:95:
         e6:94:7c:3e:42:a5:51:29:a8:f4:cc:5b:0d:e9:a0:a7:84:7b:
         14:2f:65:a5:95:18:87:d3:4f:f3:17:47:c5:8e:02:f1:0e:b5:
         67:dd:3a:3b:d7:c8:53:2c:52:6c:b6:35:5c:4a:d7:cb:fe:87:
         39:9d:8c:0a:62:0c:7a:7a:2a:69:d8:bf:31:b6:7e:57:59:b8:
         45:f3:c3:f2:9f:d0:54:5f:1f:5a:e2:ce:3b:5b:2b:2d:4c:4f:
         f3:c0:51:f2:e4:d8:37:2b:de:60:a4:fb:5c:e3:8b:06:91:74:
         67:7d:fd:08:ec:41:e3:4d:27:28:2d:e6:02:2a:7e:f8:81:f3:
         46:b2:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:14 2026 by rpki-client