Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File:                     UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier:          6fO9thTLdc/bfe9exHEOVE0UQVRKgpZ6vDcOzco42vQ=
Subject key identifier:   0B:84:CE:6E:4B:B2:5D:85:7C:49:D8:A3:3E:0A:9E:A2:B7:2C:B4:E0
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number:          01E6
Signing time:             Sun 01 Mar 2026 04:11:13 +0000
Manifest this update:     Sun 01 Mar 2026 04:11:13 +0000
Manifest next update:     Sun 08 Mar 2026 04:11:13 +0000
Files and hashes:         1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: SjMfdmftc9kACwYQdVwNGBx6pXAsdVS+GkOfGHrTH60=)
                          2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: ArfhB2PhVsHpBnCuxTAZaN9fEqhnqfH2tcV0KRWRM8s=)
                          3: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: fV4R5q8jmyaZ1y6M6EGHK7qWH/l+INutGWYgcX5lTMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
                          rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Mar  1 04:11:13 2026 GMT
            Not After : Mar  8 04:11:13 2026 GMT
        Subject: CN=69a3bc61-3713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:be:23:72:2f:59:88:d3:42:5f:01:1c:a9:
                    72:b1:e3:67:08:2a:ed:de:6f:1c:c1:46:17:c1:8a:
                    27:97:7d:c7:46:2a:ed:b1:b2:98:35:47:1d:64:2f:
                    b2:4c:24:44:83:84:69:15:8e:14:c0:ae:a8:24:72:
                    60:09:df:4a:17:ab:61:db:b8:0d:94:d2:82:8d:df:
                    cf:90:9d:0b:0a:9b:63:bb:ff:70:f6:19:7a:08:25:
                    f5:1d:5a:8f:26:06:c1:dc:47:75:d4:94:a4:06:7b:
                    47:c8:b4:02:96:4d:ee:83:93:16:0c:a5:de:23:6e:
                    2f:e2:f6:e4:5d:c5:5e:e0:fd:36:ca:0d:1b:25:dd:
                    f8:c1:a7:b8:2e:90:f8:0a:a8:b5:45:28:3c:d6:01:
                    4c:57:61:a2:cc:9a:95:e7:6f:a1:0c:ba:f6:8f:3d:
                    67:9f:75:fb:1c:3f:d2:d6:5b:b6:71:07:82:cc:21:
                    b5:6f:54:dd:c9:a4:91:2d:f3:58:e0:46:94:e0:8d:
                    01:75:9f:9b:3f:d7:7c:d3:28:72:55:c4:0d:8d:09:
                    ff:e0:99:e8:f2:71:9d:9a:d8:92:ae:0d:9c:b2:b4:
                    c0:a8:f8:0f:ca:5d:5a:47:eb:0d:f0:93:01:41:65:
                    00:e0:b3:14:c4:ef:dd:87:d6:56:1a:1c:a3:63:ed:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:CE:6E:4B:B2:5D:85:7C:49:D8:A3:3E:0A:9E:A2:B7:2C:B4:E0
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:50:bb:b9:a7:b1:3f:d9:c1:62:cb:35:99:61:a4:a8:38:26:
         59:95:47:98:7a:23:cf:94:f0:0b:46:ba:0b:33:83:e9:f7:b5:
         13:48:15:11:83:2d:8b:6d:2f:8b:8b:2a:54:a8:e8:10:d4:3c:
         7c:c1:0e:f8:a5:19:54:cf:fe:f3:7b:a4:50:95:3f:9c:76:a8:
         11:b6:ef:9c:ff:fc:ea:d5:9d:6a:8c:34:ab:18:ea:3f:5c:14:
         9b:c8:6e:50:5b:de:6d:33:68:b4:98:a1:d3:2a:96:6b:08:fc:
         4c:6a:c4:ca:b0:00:35:94:4a:4c:2a:db:49:55:66:9e:84:52:
         e6:d1:d2:53:c7:fa:df:c9:b1:1e:1f:f6:a3:04:02:cc:a7:fd:
         67:b0:03:de:fa:8d:e3:fd:3c:1f:17:50:c1:ec:f3:92:a1:23:
         28:9f:a5:3f:3b:14:a7:93:14:aa:6e:be:7d:b8:6a:f9:e0:ed:
         3e:33:47:2f:4c:05:0e:59:f7:52:76:db:18:81:a7:68:48:43:
         3f:0b:c4:2b:7d:06:4c:fc:73:2b:cb:bf:86:b4:65:8f:e3:36:
         fa:80:9e:d9:34:f5:66:d1:06:4d:81:0c:bb:41:5a:ee:9a:ef:
         a1:e9:51:a9:44:13:b0:0d:0b:a6:06:75:99:cb:96:0e:08:ff:
         6f:bb:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:56 2026 by rpki-client