Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File:                     k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier:          3DSQ4dVET7nX8jC14Ut/y1AVgayews/one/oMox2CFQ=
Subject key identifier:   75:96:7A:55:26:83:22:15:1D:94:5D:C4:E9:E4:DF:9C:12:FE:F5:AD
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer:       /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial:       0633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number:          062C
Signing time:             Tue 22 Sep 2026 22:26:28 +0000
Manifest this update:     Tue 22 Sep 2026 22:26:28 +0000
Manifest next update:     Tue 29 Sep 2026 22:26:28 +0000
Files and hashes:         1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: lKwzbym8x8OUm72TLu5yGcv3l3mr7soWa+P3VOjE9lQ=)
                          2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: 5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
                          rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
        Validity
            Not Before: Sep 22 22:26:28 2026 GMT
            Not After : Sep 29 22:26:28 2026 GMT
        Subject: CN=6ab30094-95f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:5a:dc:0e:8e:3d:ca:2c:0e:2e:4d:ee:95:
                    c8:55:53:39:ca:65:aa:92:d4:dc:f2:82:24:08:44:
                    72:97:81:95:b1:9b:35:11:f8:bd:1c:77:11:5d:de:
                    45:45:61:35:f5:17:a2:16:3a:2e:93:bd:79:cd:b4:
                    75:a3:a4:df:0c:89:0c:d3:22:b3:f8:7c:55:09:79:
                    4c:00:61:cf:cb:b9:dc:f0:d5:63:c3:c7:36:30:25:
                    a3:2f:5b:a6:54:1d:68:5f:56:51:12:81:e2:50:10:
                    b0:f0:33:43:ca:96:aa:ba:e3:22:9a:53:5f:c7:0a:
                    e9:86:b7:d8:83:95:7b:71:e7:e2:04:99:59:20:f8:
                    35:92:98:24:66:3c:c8:cb:c7:2a:f1:a7:fe:52:66:
                    35:31:a0:ae:e8:4e:0a:2b:61:20:fd:34:20:da:b5:
                    8c:3a:79:46:de:05:e7:d3:b5:85:fc:ce:7b:c1:ec:
                    cf:72:e9:e7:db:c1:a7:5b:04:81:29:1c:60:d4:49:
                    5f:d4:ca:2f:b4:51:8f:fb:41:ab:91:0b:f2:d2:a9:
                    6e:d0:61:4a:8f:c9:99:81:6b:e3:b0:57:f1:7f:44:
                    bd:fd:41:40:1b:82:f8:58:b7:38:3c:f5:f0:26:dd:
                    4b:b4:45:ad:ab:dd:dd:39:a4:05:3e:dd:05:30:92:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:7A:55:26:83:22:15:1D:94:5D:C4:E9:E4:DF:9C:12:FE:F5:AD
            X509v3 Authority Key Identifier:
                keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:37:bd:18:8d:63:46:3b:d1:4f:ff:cd:1b:3a:30:ce:7e:
         c7:15:e2:27:c5:91:90:f2:23:5b:10:66:51:a8:2b:64:62:eb:
         4d:72:01:92:be:82:ab:e8:02:d3:e8:d9:ef:b4:b3:d4:aa:43:
         1c:b0:4e:6d:dc:4e:50:9c:7d:55:b1:a5:69:f1:d5:45:21:1c:
         dd:02:e3:04:49:3e:c9:cf:33:de:68:f6:2b:ff:60:64:58:c4:
         25:82:4a:bc:1e:fc:89:a4:80:66:55:15:ef:95:96:72:65:07:
         93:23:5f:ab:47:35:c7:96:d2:a2:d0:ee:86:8e:df:68:40:d3:
         9f:35:99:a7:b1:98:31:c9:d5:7e:92:ae:ee:c5:ff:4a:45:d2:
         d7:41:a9:ac:c2:36:c9:10:22:97:b2:53:c2:3f:7a:fc:ce:74:
         aa:19:01:26:9b:20:70:6b:af:f8:d6:bd:8d:32:89:94:0b:41:
         3e:2d:1e:08:2c:e3:3a:50:55:57:e5:81:2c:58:9c:31:26:df:
         67:f2:7e:1d:f3:71:da:11:59:4d:9f:b7:d3:7e:76:b0:ec:77:
         02:2e:d2:da:c5:89:92:31:08:7e:1a:da:c4:36:1d:d0:03:b5:
         b3:df:70:f4:c9:8e:49:98:a7:ee:4f:2c:cc:cf:3b:24:07:22:
         ef:b3:00:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx
RjBCRUZFRTcwHhcNMjYwOTIyMjIyNjI4WhcNMjYwOTI5MjIyNjI4WjAYMRYwFAYD
VQQDEw02YWIzMDA5NC05NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0G9a3A6OPcosDi5N7pXIVVM5ymWqktTc8oIkCERyl4GVsZs1Efi9HHcRXd5F
RWE19ReiFjouk715zbR1o6TfDIkM0yKz+HxVCXlMAGHPy7nc8NVjw8c2MCWjL1um
VB1oX1ZREoHiUBCw8DNDypaquuMimlNfxwrphrfYg5V7cefiBJlZIPg1kpgkZjzI
y8cq8af+UmY1MaCu6E4KK2Eg/TQg2rWMOnlG3gXn07WF/M57wezPcunn28GnWwSB
KRxg1Elf1MovtFGP+0GrkQvy0qlu0GFKj8mZgWvjsFfxf0S9/UFAG4L4WLc4PPXw
Jt1LtEWtq93dOaQFPt0FMJKTawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWWelUm
gyIVHZRdxOnk35wS/vWtMB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5
QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N
TjdkX2w1QTNCcllmQy1fdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa0s3vRiNY0Y70U//zRs6MM5+xxXiJ8WRkPIjWxBmUagrZGLrTXIBkr6Cq+gC
0+jZ77Sz1KpDHLBObdxOUJx9VbGlafHVRSEc3QLjBEk+yc8z3mj2K/9gZFjEJYJK
vB78iaSAZlUV75WWcmUHkyNfq0c1x5bSotDuho7faEDTnzWZp7GYMcnVfpKu7sX/
SkXS10GprMI2yRAil7JTwj96/M50qhkBJpsgcGuv+Na9jTKJlAtBPi0eCCzjOlBV
V+WBLFicMSbfZ/J+HfNx2hFZTZ+30352sOx3Ai7S2sWJkjEIfhraxDYd0AO1s99w
9MmOSZin7k8szM87JAci77MA7w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:06:51 2026 by rpki-client