Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File:                     u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier:          DZQJQYOQnsA/vQD5hZBEYHc22ZxpxSdfskprh8uVV8A=
Subject key identifier:   C2:B0:1E:74:77:7D:FE:B0:D2:A3:54:C5:D6:A9:A0:00:68:07:D7:B4
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer:       /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial:       0D71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number:          0D55
Signing time:             Tue 22 Sep 2026 18:04:11 +0000
Manifest this update:     Tue 22 Sep 2026 18:04:11 +0000
Manifest next update:     Tue 29 Sep 2026 18:04:11 +0000
Files and hashes:         1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: FIdSmkZShTeuVt1DjGps14LDMYareW+5tF0Baq/Ukns=)
                          2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: H6dj7xFFUstXgEpSczjVXVqVRfoxR53Jp0gN3RANW6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
                          rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3441 (0xd71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
        Validity
            Not Before: Sep 22 18:04:11 2026 GMT
            Not After : Sep 29 18:04:11 2026 GMT
        Subject: CN=6ab2c31b-5b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:e6:e9:35:ab:bd:9c:61:83:30:e5:01:81:
                    10:30:13:3f:72:6b:ef:e8:72:61:59:47:89:44:b6:
                    3f:09:6d:65:8a:34:ce:5e:34:8e:8a:e8:b9:ca:64:
                    ba:15:d7:ab:43:9f:1d:41:3b:b6:08:ba:00:86:7b:
                    2f:1f:fe:7f:0a:09:ea:29:06:d6:54:c1:3a:15:3b:
                    b7:97:11:01:e9:30:49:49:2d:ec:21:e5:8f:76:fe:
                    57:fb:23:02:7b:2e:97:f6:f1:95:44:8a:e4:aa:27:
                    f9:3c:e3:fa:6f:1f:3a:33:d3:dc:24:df:63:a4:39:
                    7c:6a:b6:16:1d:c6:23:92:c9:28:5d:7c:b4:68:36:
                    51:0f:04:68:6c:43:5d:d6:a7:f9:5e:24:a4:a5:44:
                    b1:05:d1:19:24:73:e5:77:40:87:9e:46:4c:c1:47:
                    cc:df:7f:eb:6d:a7:81:b7:54:a6:f1:b9:c5:b1:12:
                    d7:84:8e:b1:11:d5:52:4d:70:d3:b6:1a:bf:bf:3e:
                    a3:40:d8:ff:c9:38:22:29:62:96:08:06:3b:14:23:
                    c4:9c:8b:c8:5b:de:a7:7d:b5:29:24:bd:cb:ea:3a:
                    5c:23:dc:5a:aa:14:90:90:67:7a:59:10:b0:e2:e1:
                    67:74:e1:72:2d:fe:fb:e0:a3:49:bc:04:81:c6:f7:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B0:1E:74:77:7D:FE:B0:D2:A3:54:C5:D6:A9:A0:00:68:07:D7:B4
            X509v3 Authority Key Identifier:
                keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:98:d7:f2:dc:25:d6:e3:c5:41:aa:5d:6c:69:ee:3f:a6:ce:
         94:a1:78:6f:f0:13:c4:08:4c:3e:5b:97:df:a1:30:ca:ff:fa:
         fe:d8:9c:d1:6e:cc:f8:3f:87:9c:f4:c6:30:56:76:f0:93:a4:
         47:d5:31:71:c7:29:f8:f2:c9:40:e2:75:93:26:2b:bd:de:80:
         e8:50:e6:7a:3d:4a:90:2d:af:fa:39:cb:b6:f8:c1:b4:65:4b:
         56:20:e9:ee:6d:c7:00:af:11:18:3a:64:e9:79:63:93:10:db:
         a7:a2:42:50:2e:98:74:b4:89:e7:47:e3:36:a5:4e:05:72:3c:
         0e:ca:32:6c:7c:9e:93:92:83:97:4d:da:de:07:27:1c:a8:72:
         d5:68:a5:cd:d2:6a:2d:43:b8:dc:c3:18:02:bb:1e:fc:4b:54:
         36:90:e7:dd:d3:03:2a:c8:04:e0:fc:c8:42:03:46:8e:4a:c0:
         14:4a:c8:b5:91:b3:1b:cd:f1:ef:cc:59:01:9b:10:21:ca:e9:
         14:f4:b9:8c:6f:82:f0:4a:66:62:4d:e0:37:87:09:04:42:31:
         a0:96:96:84:1c:a1:83:26:c0:f2:ed:21:12:42:97:0a:29:6a:
         90:8b:c8:07:cf:12:f9:f6:ed:d3:2b:8e:c6:8a:f2:86:97:28:
         3c:9b:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:18:48 2026 by rpki-client