Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
File:                     UkKKuo4K7IH5nXzYknKnEHQIbEY.mft (raw, json)
Hash identifier:          MdpZeh1E0iH+rVeivTcUC/TE/8oH1ercj3PnGwRgcVg=
Subject key identifier:   B8:D3:A8:00:78:14:2B:88:1C:08:C2:40:27:3B:09:39:94:C3:CA:92
Authority key identifier: 52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46
Certificate issuer:       /CN=A9190E6C/serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
Manifest number:          3F
Signing time:             Mon 12 Oct 2026 17:52:12 +0000
Manifest this update:     Mon 12 Oct 2026 17:52:11 +0000
Manifest next update:     Mon 19 Oct 2026 17:52:11 +0000
Files and hashes:         1: UkKKuo4K7IH5nXzYknKnEHQIbEY.crl (hash: MxSULfikU3jzr1Ztk+/LQEC2opLbiWMw1wdShtfJ9PU=)
                          2: 3F551C74696A11F19F0E96FC7847A888.roa (hash: LOeF5oKzX3hsnldQfxTGyeCZaIlHTWbNNaHQcrweuJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl
                          rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 17:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190E6C, serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46
        Validity
            Not Before: Oct 12 17:52:11 2026 GMT
            Not After : Oct 19 17:52:11 2026 GMT
        Subject: CN=6acd1e4c-c364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:68:a2:8d:10:4c:c1:fa:7f:2f:c5:8d:7f:
                    1a:ec:95:64:f3:76:d5:dc:fb:21:a6:7c:14:30:9f:
                    09:f4:e2:60:05:64:1b:27:55:7e:5f:23:8c:fd:47:
                    21:1f:b8:c0:3b:f0:c3:d4:d1:9f:39:bb:4a:13:7c:
                    d0:83:1e:5e:a3:55:9c:03:d2:63:e6:ff:5c:08:d0:
                    96:48:ca:c2:bd:98:64:e9:60:d0:be:72:69:a2:20:
                    1d:8e:a1:1b:cd:f0:1b:d2:8c:14:2e:ac:89:8b:8b:
                    93:c5:5e:c8:c7:4a:33:10:b5:16:e4:12:1a:ba:f9:
                    0f:49:7f:0a:b5:99:ab:a7:da:4c:ff:99:48:30:a6:
                    00:0e:76:55:5d:2d:cf:0d:0b:cf:2a:30:93:64:e7:
                    0d:eb:df:b3:1e:f5:79:94:85:b7:52:83:ea:a6:8d:
                    b4:4d:13:72:c2:ec:7d:19:1d:49:14:49:70:36:bf:
                    72:0b:e5:61:8a:84:a7:5f:3f:fc:81:8f:da:f8:db:
                    f5:1e:2d:66:30:b8:89:e6:85:40:d4:dd:14:fb:cd:
                    ea:bf:be:fa:b4:c8:58:6a:5b:62:73:88:cb:82:9b:
                    5a:b9:c1:b2:d4:4e:05:da:e9:5e:cb:8d:67:85:24:
                    f0:41:83:b8:56:ec:1c:db:fb:8f:cc:01:b3:b1:48:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:A8:00:78:14:2B:88:1C:08:C2:40:27:3B:09:39:94:C3:CA:92
            X509v3 Authority Key Identifier:
                keyid:52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:17:16:ae:8a:1b:d1:eb:69:df:e1:f9:36:0e:5e:cc:dd:e6:
         59:eb:52:f7:17:19:4b:15:fb:52:4d:c5:14:45:3d:c2:c5:28:
         45:b6:7e:c3:56:39:2b:48:1a:fe:35:4e:8b:15:c8:50:da:1e:
         68:d8:5c:aa:01:6d:27:0e:09:b5:30:1c:d1:84:5a:43:45:6e:
         48:42:71:98:68:f3:6a:1c:e4:33:72:7c:45:67:b2:29:65:67:
         a2:c4:77:72:4c:fa:2d:86:da:e3:00:b8:02:81:e1:2a:61:72:
         39:ff:ee:bd:dd:4b:aa:9a:d6:1f:30:6a:d8:7e:dd:3d:3c:9c:
         40:40:1d:3a:93:49:a0:f8:62:6f:42:95:90:83:f6:19:0a:09:
         39:a3:62:77:23:26:73:f8:09:ed:6c:a0:e0:c1:d1:13:c0:0b:
         08:8a:ec:8b:a1:14:b7:22:b1:c9:9e:3e:e0:9a:82:48:a8:eb:
         2f:91:f6:a5:73:ee:58:38:5d:ec:8f:35:90:ea:72:63:52:c2:
         b2:71:b6:74:23:92:c7:ac:b3:d2:83:49:39:28:c1:4e:d4:ad:
         2c:d0:b4:26:5f:13:e1:fc:fd:af:20:69:20:ac:a9:8b:11:63:
         22:84:6e:29:12:bf:1e:21:b2:0b:4f:9f:e5:0d:ff:22:67:61:
         63:65:9e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:49:48 2026 by rpki-client