Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
File:                     UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json)
Hash identifier:          AZ17N1DkbK5F9ZSJQuPbct1BosLhuBeSkwYQsPOpjF4=
Subject key identifier:   C1:76:B0:5D:5C:BA:A8:39:93:36:B2:28:29:85:C3:67:A5:9F:CD:8A
Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F
Certificate issuer:       /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
Manifest number:          01F4
Signing time:             Wed 25 Mar 2026 02:38:11 +0000
Manifest this update:     Wed 25 Mar 2026 02:38:10 +0000
Manifest next update:     Wed 01 Apr 2026 02:38:10 +0000
Files and hashes:         1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: 0c4lj9U/2ve3lysRwseV++cefPQReSVGuvnLzF44SXY=)
                          2: 52201DA252D411F0A7A6D71CC4F9AE02.roa (hash: 82JdmQP/eMkwg63B4OVRe5Ag1cOjo1M5JaRYCRSJFXo=)
                          3: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: VrQGIAvHrBKqlz/MTxLrDFPUvKForbwO84dmu+WmID8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl
                          rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F
        Validity
            Not Before: Mar 25 02:38:10 2026 GMT
            Not After : Apr  1 02:38:10 2026 GMT
        Subject: CN=69c34a93-6413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:98:90:e7:08:ff:54:1e:bb:9b:65:c2:60:
                    d8:5c:38:dd:1f:0c:87:34:66:75:68:53:93:24:28:
                    d5:e9:92:d8:86:f1:90:ea:66:02:44:49:42:7b:84:
                    1c:3a:fe:ec:0f:1f:1b:08:f4:92:82:4c:66:b8:5f:
                    b7:d3:b7:5f:c0:5d:ac:27:50:1c:d2:7b:71:1e:98:
                    80:23:71:6d:0d:af:c2:df:24:8a:33:13:72:2c:71:
                    10:00:9d:50:a3:e7:b8:a2:cf:6a:2a:80:51:92:82:
                    ed:aa:7d:7e:01:c8:04:8d:5f:58:11:9e:8f:1c:73:
                    5b:47:c2:33:02:6f:d5:18:83:04:42:f6:bc:de:22:
                    55:40:9a:49:40:6e:30:29:4e:8c:7c:8d:ed:d7:8d:
                    8e:a2:18:cb:30:ec:de:dc:04:09:c0:32:ca:71:86:
                    ec:53:78:b3:3e:58:10:56:09:46:8c:1e:9d:17:46:
                    66:60:59:d3:6e:55:23:53:f4:fa:60:18:45:f0:6c:
                    5e:a8:8d:12:0d:0e:96:82:0c:ce:b3:01:91:3d:4f:
                    0f:2c:58:78:5b:3e:a1:63:24:f3:11:47:c2:50:20:
                    ee:91:af:d0:ab:95:aa:66:8c:d0:8a:b2:c4:94:e9:
                    68:c1:cd:44:c8:10:27:50:e1:00:26:4b:c7:2b:d4:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:76:B0:5D:5C:BA:A8:39:93:36:B2:28:29:85:C3:67:A5:9F:CD:8A
            X509v3 Authority Key Identifier:
                keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:4d:95:e3:3c:9c:f3:7b:57:2d:f7:90:aa:e5:cd:38:cb:
         29:f4:e2:8b:85:7a:da:b9:66:aa:6e:47:0d:ef:5f:99:3e:12:
         8f:9e:c6:2b:dd:e9:e3:0f:d7:25:ad:2f:97:6d:a3:b7:07:13:
         e8:2c:8c:ab:71:0d:a2:a8:2e:75:0e:34:ed:a7:0f:66:83:53:
         4e:de:c6:90:81:85:e2:27:0d:c1:47:56:cc:31:90:82:5d:d2:
         7f:f7:67:f3:38:a2:e6:5b:1a:ea:84:b1:19:d2:71:dc:e2:95:
         ae:d7:a5:da:50:1e:99:80:07:ba:03:9c:ed:c4:56:95:9a:58:
         2b:8f:1c:1a:64:90:70:ad:61:12:0e:6f:6a:2e:19:1b:a1:30:
         6a:b4:e7:f9:67:67:bc:67:ae:1a:c6:9f:b7:9c:3d:22:3c:47:
         fd:66:56:e5:9e:cf:52:f4:73:3a:e2:a6:a0:2b:5c:5e:e6:64:
         55:37:ad:ff:53:65:b1:1f:6a:79:1e:a5:b7:1e:70:a0:14:27:
         d0:b5:b6:78:55:c2:45:cb:14:8a:45:4c:44:07:95:31:8a:82:
         f3:4d:77:10:04:0b:09:5f:17:bf:3b:05:8b:e9:57:2e:f0:4f:
         d6:7f:3a:8a:1e:f5:07:ea:be:21:e8:c5:5f:19:73:0f:67:79:
         28:93:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:28 2026 by rpki-client