Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          ScrXhNf3d+N9mkOtZ/q0P6xFE9sRjJDbYlVYxcw5nMo=
Subject key identifier:   03:D1:E1:37:20:24:F0:45:9C:54:F0:C1:83:56:43:4F:F8:D0:0B:A9
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       02B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          02A8
Signing time:             Sun 19 Oct 2025 03:44:11 +0000
Manifest this update:     Sun 19 Oct 2025 03:44:11 +0000
Manifest next update:     Sun 26 Oct 2025 03:44:11 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: +Ijfrhf7bZ1V4Jq0HDu34olZI0oWS2FH0dGzxc6nOXk=)
                          2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=)
                          3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Oct 19 03:44:11 2025 GMT
            Not After : Oct 26 03:44:11 2025 GMT
        Subject: CN=68f45e8b-dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:0e:0c:46:da:80:e8:c9:ec:fd:f9:9f:2c:
                    6a:05:04:2f:d4:d2:06:de:94:b9:41:66:0f:14:28:
                    d5:54:37:be:06:68:af:c8:37:37:49:f4:3b:63:bb:
                    67:9c:ec:74:e9:a7:a3:09:b0:95:fa:38:31:05:1e:
                    2e:6a:34:fc:f0:a1:a6:9d:c5:a7:0d:4b:f1:a5:ca:
                    12:85:fa:3c:be:0d:f5:99:72:01:eb:13:4f:cb:9e:
                    e4:6c:af:5a:e3:c6:36:84:cd:16:6f:dd:18:20:e6:
                    50:fd:62:3a:81:77:1c:00:29:c7:2a:54:f4:79:b4:
                    0f:14:c1:af:ee:76:ba:aa:af:eb:71:8f:db:dc:a0:
                    e9:d7:9a:fb:0b:3b:90:78:6f:53:31:94:0c:af:82:
                    12:9d:dc:7c:e6:31:22:96:b7:e5:d9:7c:33:4c:8e:
                    9a:53:c9:f9:10:01:0a:6f:b5:a2:a1:93:4c:56:69:
                    8d:93:0b:60:3c:9b:b3:c0:34:51:8f:79:c7:d8:52:
                    78:61:9a:2a:66:6a:ac:43:9e:a7:f0:dc:90:36:5e:
                    ec:76:1c:40:75:99:83:fc:44:ea:ef:63:1c:cd:d5:
                    2d:ab:78:ab:d3:56:95:cf:b7:ae:21:20:b6:cc:eb:
                    c6:a1:40:62:dc:a4:5d:24:b7:12:18:1e:38:b6:a7:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D1:E1:37:20:24:F0:45:9C:54:F0:C1:83:56:43:4F:F8:D0:0B:A9
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:08:d9:53:39:6b:66:c7:49:2f:5e:21:ef:50:b5:9c:36:
         75:6e:48:20:9b:7c:4f:7a:8a:52:b5:10:f6:ba:58:fb:76:63:
         2f:f6:6e:19:a1:e6:62:29:63:f9:ef:cb:03:09:b7:43:c1:9b:
         c5:46:29:23:3a:40:a3:03:1f:d3:03:30:0e:02:d1:82:1c:dc:
         5b:a9:14:0d:3a:36:9b:4b:60:bc:c3:d7:3f:03:d6:c9:58:a0:
         60:05:dd:f0:94:6b:c3:ad:e1:31:78:d2:0a:91:ad:b6:e7:c1:
         c1:4e:38:42:02:6b:f2:89:9d:03:66:82:d9:b1:8e:3a:5f:5f:
         18:62:8e:19:da:4b:82:c8:f8:25:22:2d:2c:20:b3:7a:fc:b5:
         b7:92:1d:ce:68:a0:d3:c6:98:74:19:67:cb:8f:89:97:34:a2:
         fa:5d:8f:d8:6b:16:01:ce:4b:5e:46:7b:a7:a2:b8:ab:a8:f4:
         ea:d5:20:88:58:e5:50:36:2b:e8:a9:77:22:4c:33:5a:9f:ed:
         ee:0c:9c:0b:f4:71:d2:ab:a8:84:7d:2b:85:73:48:0e:f4:f0:
         40:26:05:3b:45:58:51:3b:f7:25:53:fc:21:35:aa:75:d1:4a:
         a8:4c:22:aa:a7:3d:55:a1:92:6c:34:f9:c0:8d:c5:02:69:11:
         e1:07:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:12 2025 by rpki-client