Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File:                     u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier:          6NobqahvUI3z3K4lW8kjStJLOwETrkXuygV6GDZhiFI=
Subject key identifier:   6F:65:DC:CA:BB:AB:F3:62:EB:0A:64:B0:FC:69:DE:35:B3:54:1A:63
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer:       /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial:       0D1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number:          0D02
Signing time:             Thu 16 Apr 2026 18:11:58 +0000
Manifest this update:     Thu 16 Apr 2026 18:11:58 +0000
Manifest next update:     Thu 23 Apr 2026 18:11:58 +0000
Files and hashes:         1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: I13PLydCN/9P6a9sv9wHjLin/8xKXPqnBggNpPovgpM=)
                          2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: hBVlKog5sRwEaP/MDsz0qoe8RZcUtfVi0W/VBym4um0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
                          rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3357 (0xd1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
        Validity
            Not Before: Apr 16 18:11:58 2026 GMT
            Not After : Apr 23 18:11:58 2026 GMT
        Subject: CN=69e1266e-26d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:1e:cf:54:64:47:89:7b:9c:34:6d:6a:07:
                    f2:fb:39:a9:26:46:0b:64:52:e8:46:ee:f0:5d:2f:
                    3b:dd:f7:59:3c:4d:ca:83:62:2f:fe:d3:c4:6e:03:
                    f5:f7:6e:69:a1:99:dc:63:05:2f:cc:5d:44:b7:45:
                    cd:92:12:a6:ab:a8:35:40:1f:1c:f5:3a:3b:e5:f6:
                    55:c8:57:b7:f9:79:b9:7b:75:e0:52:f2:b6:67:37:
                    26:52:b9:1f:6c:27:38:23:8d:5c:2d:f7:fd:b6:5b:
                    4a:c5:34:0f:50:a1:f5:a9:48:8e:81:20:6c:1d:87:
                    24:4d:64:bc:41:2f:47:35:08:c6:89:49:d1:a9:93:
                    ae:0c:b2:48:6e:45:54:07:ae:63:b7:f9:5c:0f:4f:
                    ac:72:62:28:b3:3b:17:33:57:26:ad:ca:18:79:ab:
                    09:4e:7e:f2:a4:bc:4c:e3:45:ca:26:d6:41:93:66:
                    4d:7f:f9:0e:dc:19:81:d9:f9:3c:b9:c0:69:67:59:
                    85:b2:de:c8:89:a8:ee:77:97:4f:c1:02:45:ed:19:
                    2e:76:47:39:72:fd:a7:d1:ac:6e:2c:88:80:0d:cd:
                    67:c0:03:d3:56:5b:e1:8e:bb:02:ed:2e:b3:b5:4e:
                    cf:5f:ee:1d:eb:68:4d:99:9b:3a:94:5b:9a:a0:4f:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:DC:CA:BB:AB:F3:62:EB:0A:64:B0:FC:69:DE:35:B3:54:1A:63
            X509v3 Authority Key Identifier:
                keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:c1:de:1f:74:05:b5:83:49:b5:26:79:c5:8b:d1:de:26:
         8f:64:28:4d:09:16:2e:31:c2:04:90:88:01:16:55:6c:a1:4c:
         3c:22:5d:75:31:78:9b:92:9c:6b:de:22:70:78:04:8f:11:2e:
         83:2b:08:1e:ca:2f:c6:c2:c3:a7:1a:3d:77:01:c1:28:1b:9a:
         a5:15:fd:bb:24:18:65:ff:0d:f0:06:ea:6a:8d:c5:4f:3a:ec:
         bd:cc:fb:af:8f:d4:6c:18:0f:7f:19:f4:d3:c5:53:15:36:fa:
         cc:f9:0b:98:44:5d:71:d8:7d:86:1b:0e:17:3b:61:1f:c8:be:
         20:25:ed:06:32:03:5b:80:77:b8:96:47:13:6a:41:ff:ee:09:
         ed:13:f0:9a:6e:94:02:de:83:66:e8:aa:54:bc:3d:42:85:e5:
         fb:e8:dd:90:f9:3b:94:74:0c:36:e2:ec:c4:53:56:3f:59:e0:
         fa:12:40:66:ca:c8:15:b2:f2:cb:3e:05:e9:0e:ca:66:67:44:
         0e:4c:60:a0:9c:83:2b:3c:7e:fa:3f:64:7a:84:0b:fa:ee:06:
         4b:9f:a5:8f:9d:b5:a8:7f:2f:a0:c2:e8:36:5f:e7:59:99:29:
         57:18:0d:98:17:88:7b:90:f1:6e:2a:96:60:13:69:2a:b6:33:
         7a:9f:2f:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy
QzYwMDQ2MzgwHhcNMjYwNDE2MTgxMTU4WhcNMjYwNDIzMTgxMTU4WjAYMRYwFAYD
VQQDEw02OWUxMjY2ZS0yNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3OYez1RkR4l7nDRtagfy+zmpJkYLZFLoRu7wXS873fdZPE3Kg2Iv/tPEbgP1
925poZncYwUvzF1Et0XNkhKmq6g1QB8c9To75fZVyFe3+Xm5e3XgUvK2ZzcmUrkf
bCc4I41cLff9tltKxTQPUKH1qUiOgSBsHYckTWS8QS9HNQjGiUnRqZOuDLJIbkVU
B65jt/lcD0+scmIoszsXM1cmrcoYeasJTn7ypLxM40XKJtZBk2ZNf/kO3BmB2fk8
ucBpZ1mFst7Iiajud5dPwQJF7Rkudkc5cv2n0axuLIiADc1nwAPTVlvhjrsC7S6z
tU7PX+4d62hNmZs6lFuaoE9RFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9l3Mq7
q/Ni6wpksPxp3jWzVBpjMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2
MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI
QjJXMDVoMS11YklzWUFSamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjVfB3h90BbWDSbUmecWL0d4mj2QoTQkWLjHCBJCIARZVbKFMPCJddTF4m5Kc
a94icHgEjxEugysIHsovxsLDpxo9dwHBKBuapRX9uyQYZf8N8Abqao3FTzrsvcz7
r4/UbBgPfxn008VTFTb6zPkLmERdcdh9hhsOFzthH8i+ICXtBjIDW4B3uJZHE2pB
/+4J7RPwmm6UAt6DZuiqVLw9QoXl++jdkPk7lHQMNuLsxFNWP1ng+hJAZsrIFbLy
yz4F6Q7KZmdEDkxgoJyDKzx++j9keoQL+u4GS5+lj521qH8voMLoNl/nWZkpVxgN
mBeIe5DxbiqWYBNpKrYzep8v0g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:53 2026 by rpki-client