Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          YyQTFuAODNxoosRHpSOgD17aScwU8dtcPq1rClMHufY=
Subject key identifier:   5B:13:58:7A:10:B2:44:6E:82:82:90:2D:10:80:3D:AF:93:F8:19:CE
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          0116
Signing time:             Tue 13 Oct 2026 06:52:17 +0000
Manifest this update:     Tue 13 Oct 2026 06:52:16 +0000
Manifest next update:     Tue 20 Oct 2026 06:52:16 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: +Vkrcdy183VVunSd+Pgcf6/811uFkttT2pOW6H3B9PQ=)
                          2: F3B165FCB01311F1BDA8A9D86E11F970.roa (hash: qDbDA0EuGbPlyZkNNjbMWvStnqLgRx8pNg3aOuB6nr8=)
                          3: 8732879E95BA11F1B9CA092C4311F970.roa (hash: MEGlRUYhB4SHO0VLh+MIz2x8hOoJV3bR04uKQvrICwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 06:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Oct 13 06:52:16 2026 GMT
            Not After : Oct 20 06:52:16 2026 GMT
        Subject: CN=6acdd521-1bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:66:80:09:24:2e:14:38:39:65:6a:7c:aa:
                    cd:d4:c0:a5:a4:0a:ea:91:ba:09:0f:58:72:d5:36:
                    00:9d:3c:c8:f1:db:bd:f1:fe:e0:99:de:76:6e:6a:
                    ee:09:33:99:33:ae:ef:44:e2:4e:47:cb:3b:38:7e:
                    95:0e:4a:6f:77:e3:52:fa:36:60:6c:8f:0f:39:1a:
                    0a:a1:c2:39:38:e9:73:e2:2d:a1:db:9a:f8:10:d9:
                    3c:0d:21:de:48:21:bf:65:0b:1c:3a:90:09:79:f0:
                    a3:3a:62:f2:6d:e8:ef:68:22:62:81:ba:72:73:a4:
                    9c:05:55:77:47:a7:3f:d6:a4:04:9b:7c:35:66:3d:
                    3c:95:3e:da:d3:26:a1:23:4f:77:d5:4e:61:f7:c5:
                    c8:69:67:46:5e:96:e2:fe:54:ff:3b:c4:d0:18:92:
                    59:e6:c6:35:95:69:e5:19:48:6f:f3:9a:e2:e2:c2:
                    28:e6:5f:c7:68:d9:ea:43:48:97:68:09:f4:56:df:
                    f3:18:f8:31:ec:5b:27:6b:d5:c8:5a:5f:da:53:0d:
                    4f:83:e3:f6:76:6b:42:a3:c6:2d:f4:d9:70:ff:65:
                    a1:6e:0f:d8:47:02:26:9a:7b:b6:4b:3a:d4:92:2f:
                    cc:15:35:db:35:e2:51:d6:47:2a:41:a4:cb:f4:0e:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:13:58:7A:10:B2:44:6E:82:82:90:2D:10:80:3D:AF:93:F8:19:CE
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:06:18:ae:82:5e:2b:ab:00:67:8e:02:ed:4a:a7:a6:00:83:
         fa:be:06:e2:cc:49:a7:4f:6b:f1:83:ff:43:97:00:4c:be:e8:
         22:f1:65:33:fe:51:de:49:a6:2a:af:a0:df:e7:32:ff:4c:0e:
         47:9d:52:cb:17:c3:0e:34:f1:0d:c3:f5:2d:05:84:df:2b:63:
         05:59:ed:d0:74:8f:98:80:fd:e1:ba:45:c9:ad:75:7b:49:12:
         c4:5e:fd:ba:46:24:54:70:c6:b1:30:a2:3b:bf:3a:e1:39:1c:
         9d:19:6a:c6:58:0a:25:c9:e0:8c:8d:db:86:a4:e4:66:f1:4f:
         78:e2:3f:cd:e6:42:9f:f6:38:68:cd:67:d8:41:37:2c:88:0d:
         ad:91:23:10:b8:cf:6c:8b:54:fc:70:d9:39:e4:98:1e:ab:03:
         cb:2c:58:35:ba:da:08:4d:1c:66:5b:b8:28:8c:0a:c3:82:c6:
         08:ca:e9:a1:9f:9b:73:25:46:2d:3b:31:11:44:29:14:2b:4d:
         21:dc:5f:f1:a6:ad:7f:ca:d0:87:76:0f:dc:f0:c0:99:1b:5f:
         13:22:76:93:39:25:44:dd:37:5b:13:6a:df:ac:8c:eb:7f:35:
         02:6e:61:3b:95:06:84:e3:72:e6:de:f5:b4:12:3e:08:30:9e:
         64:31:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:36:56 2026 by rpki-client