Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File:                     UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier:          ttL4lOSbN+Tid9TbVvtAfJ6RgFnJM/WIkAO+wySNy+M=
Subject key identifier:   79:84:5D:88:CF:57:F1:23:AE:DB:31:60:7B:63:17:8A:6A:4F:4F:11
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer:       /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number:          0204
Signing time:             Sat 03 Oct 2026 03:53:07 +0000
Manifest this update:     Sat 03 Oct 2026 03:53:06 +0000
Manifest next update:     Sat 10 Oct 2026 03:53:06 +0000
Files and hashes:         1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: 2HxfJIm5jUBKO5p6bNkH8CPSMHLdyMSySOGTe9QlbtY=)
                          2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: 7GYFX9zfoc6Ic/v+6arBIHYZDYEJRKqui7KSMW9xKbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
        Validity
            Not Before: Oct  3 03:53:06 2026 GMT
            Not After : Oct 10 03:53:06 2026 GMT
        Subject: CN=6ac07c23-8026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:81:09:32:c2:81:29:cb:24:c4:67:68:e8:
                    9e:12:48:e8:21:0d:f0:df:34:7f:19:de:50:76:2a:
                    9a:b4:3a:3c:af:5c:ea:54:b6:a2:22:a0:cb:f4:2f:
                    f5:5d:ce:93:ac:3c:7b:f9:0a:30:62:2c:63:ed:ae:
                    ab:a0:9b:f5:58:67:fa:b6:8d:41:6f:f0:1c:b3:16:
                    b0:b7:b2:bb:70:52:9b:e8:e9:6a:eb:42:e6:20:f8:
                    d7:c2:5a:fc:92:29:9d:88:b9:18:f8:0d:6b:e4:df:
                    46:a2:c4:80:38:27:6d:aa:ad:58:fb:fe:33:14:53:
                    e9:83:4e:fe:84:1a:d1:d2:07:42:00:05:c8:61:6e:
                    28:e6:85:ba:71:c6:dd:46:af:0a:f7:1c:be:c3:ff:
                    1e:b6:fd:50:4b:01:69:17:bc:78:5e:f3:1f:31:81:
                    ac:ac:12:6b:cc:d4:40:7f:e5:80:18:70:03:68:fd:
                    b3:24:1b:f7:6f:72:80:54:e0:1e:7e:ce:5d:76:d8:
                    ff:a7:77:44:c6:d8:71:b9:75:dd:6d:3b:d1:15:38:
                    aa:a0:da:9a:9e:38:76:f5:9d:24:55:3e:c6:1e:40:
                    12:62:f5:9c:bf:db:1a:93:29:25:9d:12:15:bd:c8:
                    e4:a8:6b:99:a7:48:4c:05:7a:e2:16:8c:35:8a:72:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:5D:88:CF:57:F1:23:AE:DB:31:60:7B:63:17:8A:6A:4F:4F:11
            X509v3 Authority Key Identifier:
                keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:c8:18:a8:7f:fd:24:44:6e:f5:aa:07:58:d5:c9:7a:9d:
         fe:40:3f:75:03:22:58:1a:8b:34:e2:71:37:ad:01:3c:7a:e1:
         85:61:9e:d2:13:9e:46:a9:55:82:c7:73:be:63:fe:e4:34:89:
         a7:37:12:d8:c3:e7:7b:86:ab:64:ff:66:7f:bd:9e:e8:b6:39:
         04:b4:2f:35:b1:0a:5d:85:de:4c:20:b5:24:09:a2:3c:ef:b3:
         1e:5a:99:ab:88:7e:58:5a:8e:01:a7:d1:c4:3c:18:37:d0:e5:
         d1:15:79:7e:f4:de:27:9e:ee:db:4b:bc:50:eb:57:a4:3d:28:
         56:9f:6b:16:71:63:17:1a:e8:f0:e2:db:67:de:a7:36:f6:4d:
         7d:36:57:74:20:be:26:5e:a2:2c:5d:3e:86:e2:74:84:17:61:
         ce:b6:35:d2:73:fc:e7:1b:f4:92:26:5b:a0:ef:10:a1:64:12:
         bc:75:2b:05:45:51:aa:30:24:f5:f6:26:c5:86:af:51:4e:49:
         fc:a9:1d:48:31:38:04:f8:37:af:c3:b4:8f:02:2e:6b:5a:4f:
         6d:a5:25:99:90:c1:ee:f3:d6:08:20:2d:89:d5:b5:b0:74:cb:
         b4:fb:db:82:4c:74:12:16:7c:a1:cc:da:11:04:40:d1:98:f0:
         84:ea:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:09:36 2026 by rpki-client