Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
File:                     UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json)
Hash identifier:          tWNcQ0TIIviB8iL0ks1+dAASalmAwxuDxc/mMOJeFx4=
Subject key identifier:   B4:05:B8:E6:58:EE:4E:D1:AE:B8:5B:28:61:3C:F4:7E:71:F0:7B:A7
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Certificate issuer:       /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial:       0C3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
Manifest number:          0C32
Signing time:             Mon 28 Sep 2026 18:53:02 +0000
Manifest this update:     Mon 28 Sep 2026 18:53:02 +0000
Manifest next update:     Mon 05 Oct 2026 18:53:02 +0000
Files and hashes:         1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: lTKlFgnFIeoPKQdUj0oxx4PgmUOG7G4sqjUOgF1Eqg4=)
                          2: 974EBF7CB82D11F1A61D0ABF3F11F970.roa (hash: 0zU3QVFp2AuLbCUg4ObkkKjGIwaRzDdyeZGkUpalRQg=)
                          3: 95E7B8A0B82D11F1A61D0ABF3F11F970.roa (hash: R6I0vgPIkTqsA0uaPuZ4lh3kmlSAicpnMrLCVqtJI/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
                          rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3133 (0xc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
        Validity
            Not Before: Sep 28 18:53:02 2026 GMT
            Not After : Oct  5 18:53:02 2026 GMT
        Subject: CN=6abab78e-e4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:9c:69:36:02:9a:da:3e:51:44:18:66:33:
                    6f:4a:ec:0c:5b:8d:88:3e:1b:2d:34:ee:e7:a4:15:
                    4e:38:cd:30:1a:43:09:2c:17:fd:b9:69:02:5f:25:
                    20:19:74:5f:bc:d9:12:6f:a1:c1:b2:b5:d1:e1:14:
                    d6:3b:19:73:ae:3b:5c:52:e0:91:76:e5:24:cc:02:
                    7b:43:e8:4f:06:10:e9:8c:a3:3a:e0:ce:0a:1d:71:
                    cc:2b:28:26:e1:f7:a6:26:d2:fc:e1:2f:28:9a:74:
                    44:86:b3:25:47:64:13:bd:4b:7c:c1:c4:5e:41:f5:
                    2f:84:10:56:7a:19:10:7f:2d:fc:2d:f6:08:db:62:
                    42:b9:e7:30:ce:93:2c:95:63:8d:0d:56:c2:53:18:
                    34:3a:f5:bc:54:37:d7:4b:79:c4:cb:44:ba:a1:65:
                    6b:55:e1:66:74:01:0c:2f:84:18:fb:b9:16:cf:06:
                    19:b8:a9:ea:d1:7a:2a:a6:6b:44:de:48:26:56:64:
                    cb:df:ad:66:6a:f5:65:cd:81:2d:b7:3c:76:10:12:
                    2c:d0:41:57:4c:3f:16:3f:77:db:1a:bb:53:4d:e4:
                    76:1a:32:07:23:18:28:53:ff:76:fd:37:ce:fd:a2:
                    68:8b:6e:b5:ed:8d:ae:39:13:85:93:c9:4b:d6:42:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:B8:E6:58:EE:4E:D1:AE:B8:5B:28:61:3C:F4:7E:71:F0:7B:A7
            X509v3 Authority Key Identifier:
                keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:12:01:cd:a0:21:f8:37:3c:4f:e7:90:78:fe:26:d9:ba:
         02:9e:b3:e2:86:ec:a9:6f:d5:a5:88:e9:d3:06:06:ad:ad:85:
         b3:94:60:03:13:39:04:94:46:8a:c2:e2:99:ee:42:ce:5a:35:
         f3:c2:e1:b4:72:85:4b:e6:fc:97:7a:89:63:46:3b:49:dc:69:
         cb:26:41:b3:89:74:69:48:88:af:6e:5c:93:2c:3c:3e:b9:28:
         00:c6:df:61:35:29:1c:5e:18:6b:02:24:05:54:bb:b8:88:64:
         47:ba:d5:1b:45:01:6b:13:3d:8f:b0:3b:c4:de:f8:f8:19:a6:
         bb:0c:f5:ff:08:e5:1c:2c:e8:52:39:4c:b8:cd:da:55:c9:a7:
         85:4a:36:c6:2a:0b:a3:e3:79:f6:9c:16:ff:5e:23:a1:3b:45:
         80:e7:fc:b7:65:e5:e1:25:62:1c:ba:ab:7f:1c:95:7c:72:7f:
         bb:93:28:fa:13:41:99:7d:03:d1:c4:94:eb:66:5c:f9:57:3b:
         b5:ca:79:1b:31:70:0e:ca:98:0b:c0:c0:82:20:ab:5a:0b:b9:
         79:a0:bb:8b:9a:a4:0f:08:09:74:cb:11:0b:f2:98:8a:db:02:
         79:0e:c6:6a:9a:af:67:85:0e:a5:df:08:16:26:45:72:1f:5c:
         f7:63:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:58:13 2026 by rpki-client