Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          Sy0Pdb9Z2FURPOtgIZ0lj9uU+xFbSU3yifLbyo7ES3s=
Subject key identifier:   D8:95:DD:0A:46:4A:67:56:A0:BE:6A:E2:8E:04:74:71:DD:67:C6:6E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          E1
Signing time:             Thu 23 Jul 2026 08:28:00 +0000
Manifest this update:     Thu 23 Jul 2026 08:28:00 +0000
Manifest next update:     Thu 30 Jul 2026 08:28:00 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: E7LkyNtR7KOpkmLlH8wQJQPujGiKpbbL1HviJ5uhDFE=)
                          2: BF01726E6F9211F1935110B76CA30FBC.roa (hash: gMZEnHabfRo33laszE3RJWZJy7WOCeRlZbtsz0VXszU=)
                          3: DB303ECE6F9811F1B69CA1B570A30FBC.roa (hash: 2i/RmVuau13EAza6ETcekxJOwQ/J9el6roQeii9jaLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Jul 23 08:28:00 2026 GMT
            Not After : Jul 30 08:28:00 2026 GMT
        Subject: CN=6a61d090-21c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:f7:4c:2f:85:5a:bd:7b:95:2e:2a:a7:58:
                    82:2e:cb:2f:d1:fd:bd:d3:54:b8:bb:aa:c1:89:85:
                    37:48:1b:d6:5e:37:c2:8c:80:ca:9f:e5:f1:0b:e1:
                    9a:fe:83:bc:90:16:a9:ef:7a:73:09:94:53:a7:a4:
                    97:38:97:c2:10:84:83:52:67:7d:26:be:63:04:9e:
                    d2:23:83:69:a8:21:be:49:3c:35:04:67:14:bb:7a:
                    f7:d0:0f:ba:31:3d:9b:e2:fc:ed:e3:61:af:ad:9b:
                    be:62:5b:22:3c:fc:93:92:37:dc:ea:8f:c6:77:2b:
                    c0:51:11:a2:8c:ea:a7:cc:cc:fa:f5:4c:3f:6b:77:
                    95:81:73:e1:80:b2:d7:2c:8c:30:eb:f7:cd:86:71:
                    a4:3f:50:0f:25:d8:c2:65:83:52:af:b2:8c:47:62:
                    df:83:50:9a:e0:39:f5:76:92:20:53:a1:7d:af:21:
                    af:0b:2c:f5:b9:77:b1:0c:75:51:09:10:70:2f:78:
                    62:c2:f9:57:ee:f8:f9:03:3c:9e:54:92:b7:15:81:
                    12:69:15:5d:ab:00:87:e5:12:5d:db:b1:33:0f:3e:
                    7f:9f:7f:e3:23:ed:b9:09:89:0f:db:a3:51:3b:e5:
                    e9:c9:6b:e5:11:d5:25:8a:c5:8d:d0:f7:20:12:4c:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:DD:0A:46:4A:67:56:A0:BE:6A:E2:8E:04:74:71:DD:67:C6:6E
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:20:6b:1a:d1:b9:59:60:97:cd:92:98:7c:d2:8b:36:d8:04:
         46:ea:ab:e9:e4:54:25:92:ce:93:ed:31:f8:16:5a:6c:6d:cf:
         05:fb:5b:fd:c7:74:85:01:84:11:53:ba:8f:b4:a5:f0:c8:60:
         b0:18:08:ba:07:7c:67:ec:7e:29:1d:73:67:04:f3:f0:29:c8:
         62:f5:b8:ea:4f:5c:7d:3b:fb:fa:8a:f5:ba:3e:73:b2:c5:b1:
         26:b9:37:f3:91:97:19:4a:9c:68:d6:e1:08:71:fd:27:65:01:
         02:9d:79:aa:20:7d:d8:c0:b4:bb:bf:64:d5:ca:9b:06:90:2e:
         f6:01:52:94:3b:5f:20:72:fb:75:cd:98:a5:cf:5e:d1:f4:fe:
         ea:2a:2a:d5:7a:5f:c6:05:d8:e9:21:5c:51:be:9e:43:17:22:
         2d:f1:f4:57:cc:cb:49:97:03:c1:69:d6:95:d1:33:bb:0f:a6:
         11:5a:e4:46:d8:02:b7:99:f0:f2:74:d0:fc:94:27:63:f0:e4:
         cf:ae:fc:ea:f0:ca:fe:69:60:3c:bc:99:58:16:e8:03:b7:02:
         58:2e:a4:c3:81:8d:bb:1a:27:fd:5e:9f:7f:aa:3d:af:8d:47:
         58:72:1b:69:0d:e4:93:5c:42:12:b5:ce:fa:4f:88:7a:1a:c1:
         da:4c:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:30 2026 by rpki-client