Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File:                     UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier:          gCzlThG7shV7wDj9JoudrLtf8O6zj8MMrerK+MzUK3o=
Subject key identifier:   C7:58:E9:DB:26:9F:72:F6:93:B8:92:3C:CF:CF:24:5F:E3:3F:1C:3D
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number:          021C
Signing time:             Sat 13 Jun 2026 02:53:41 +0000
Manifest this update:     Sat 13 Jun 2026 02:53:41 +0000
Manifest next update:     Sat 20 Jun 2026 02:53:41 +0000
Files and hashes:         1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: lcHNHSovfFhuyJ6nzVBSLYaBooOsUUrBuEcgnyQEohY=)
                          2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
                          3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
                          rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Jun 13 02:53:41 2026 GMT
            Not After : Jun 20 02:53:41 2026 GMT
        Subject: CN=6a2cc635-821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:b8:50:b6:af:be:8a:67:73:fe:11:f1:f9:
                    4e:36:09:a3:aa:6c:1b:e0:eb:16:f1:50:dd:f4:52:
                    72:9f:78:3c:f1:e5:df:ec:e3:74:88:79:ce:9f:d1:
                    0c:9e:33:cd:2c:ac:40:ae:af:2a:44:48:35:90:d8:
                    62:ce:31:9f:61:a8:14:75:22:da:cb:69:ad:5e:76:
                    8d:79:41:ab:f9:ed:3d:d9:ca:53:5b:e8:ab:89:24:
                    e6:73:97:3c:45:8f:dd:70:eb:ee:11:b8:aa:07:3c:
                    9d:42:29:77:c9:21:9f:4a:49:19:6e:aa:bf:e9:fe:
                    26:e2:35:02:bc:43:ea:a2:7d:c0:6c:9f:10:ac:a8:
                    e3:e1:71:35:fb:71:fe:ae:de:87:db:71:c4:3e:e5:
                    b5:c4:b0:e8:70:77:e6:92:55:a0:c4:a8:4b:4d:21:
                    6c:30:e2:09:fa:58:23:28:f7:96:12:72:79:eb:00:
                    ff:8f:cb:6b:d9:49:6c:42:87:69:0b:08:61:57:5b:
                    4e:be:a7:c1:a3:28:34:9f:60:85:13:6d:7d:f4:01:
                    36:f0:7e:f7:14:a1:7c:86:02:4a:4a:90:bb:40:e9:
                    ac:54:de:7c:92:f1:e1:72:e3:a2:cb:90:7e:e6:b5:
                    60:c1:e2:c5:a3:d0:70:82:88:b7:b5:0c:e8:59:a6:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:E9:DB:26:9F:72:F6:93:B8:92:3C:CF:CF:24:5F:E3:3F:1C:3D
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:5f:4f:bb:18:a3:08:54:7b:14:7c:22:73:ae:de:b9:7b:
         61:83:e0:78:2e:b5:15:7d:76:91:69:47:59:9b:71:98:b8:c1:
         aa:7d:cf:e5:59:2e:31:bf:7d:cf:82:60:cf:9e:9f:fd:ec:9b:
         f0:31:3d:c4:20:43:10:dc:32:65:dc:70:92:70:73:e4:99:6d:
         d4:f9:89:9a:ad:e8:2f:29:74:98:94:92:80:9e:66:94:8e:35:
         10:d4:2c:68:dd:44:16:c9:9c:57:d7:eb:6e:01:af:28:1c:f7:
         e4:76:46:4e:48:b2:dd:d1:ea:92:23:c2:eb:3f:74:6a:93:53:
         b6:94:00:b3:eb:40:d7:82:01:a3:5e:4e:b9:c8:96:ef:0b:38:
         0e:53:1d:47:c8:dd:52:8d:c5:8c:b4:08:31:47:69:ab:4d:40:
         8a:51:c8:1c:8a:7f:44:2a:56:22:97:35:18:f6:22:49:d4:34:
         cc:f8:68:9a:e9:d9:0b:76:0b:d4:39:50:47:4f:13:59:15:4b:
         d4:93:61:1f:55:27:85:55:10:5e:5d:5a:2c:02:e2:80:9f:b7:
         4c:e3:74:78:c1:6e:52:a5:fd:69:3a:38:f9:47:8b:32:5e:18:
         18:54:b4:7e:e2:ed:c4:aa:07:cd:ec:29:60:0d:0b:71:52:d4:
         b5:44:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:19 2026 by rpki-client