Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          gNakIDm9yD/NE6bOUcN944dpXg6B/qq821hN2Z81bZU=
Subject key identifier:   6A:0B:75:97:1B:11:67:76:65:8E:C5:A0:65:3D:ED:AB:68:D5:22:83
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          0301
Signing time:             Sun 05 Apr 2026 01:01:15 +0000
Manifest this update:     Sun 05 Apr 2026 01:01:14 +0000
Manifest next update:     Sun 12 Apr 2026 01:01:14 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: 8iLC2dxgf4FPbEtuebdQ6r0Kc1kDKrFkvTjeH/CIJFQ=)
                          2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: pfFM49AewSnbYQOQYvGFBTcjUpW5EFPfC+P+FjjpnB4=)
                          3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +o+C/qUQzkMCGKd5HlBvgEOiBcnQ3aHh6w81utoZMtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Apr  5 01:01:14 2026 GMT
            Not After : Apr 12 01:01:14 2026 GMT
        Subject: CN=69d1b45b-8ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:75:b4:fd:ac:8b:fd:63:b6:d3:77:60:6a:
                    c6:e3:24:ca:94:40:a9:1d:31:1b:50:7d:c1:de:04:
                    12:aa:6f:64:a2:6b:a2:bd:4e:8b:92:73:20:8a:3a:
                    7d:0b:79:04:bd:03:9d:a1:6f:96:31:88:3c:d8:ad:
                    ce:a0:ce:f4:5d:b1:11:d7:58:b7:fb:0b:7c:0d:02:
                    35:3a:7f:6a:f3:29:3b:b9:1c:15:84:c7:dd:80:2a:
                    c9:5f:7c:85:ff:95:24:18:49:93:aa:65:02:ba:83:
                    fd:66:f7:63:c4:ef:17:a5:e7:12:0e:3f:b1:63:ba:
                    9f:ea:c0:63:1d:25:a3:84:98:b1:26:e3:14:86:41:
                    b0:45:89:f8:47:e4:f8:31:96:8c:5b:af:34:5e:6c:
                    3d:80:97:76:12:63:22:3d:58:d8:08:21:c7:de:b9:
                    ac:e6:be:df:20:99:19:9b:16:a0:e6:34:31:a7:e6:
                    b0:ce:6d:57:f0:23:98:ab:82:1d:3a:a3:ba:24:7d:
                    75:8c:3f:af:19:61:3f:c9:c2:90:9c:a6:ab:93:0c:
                    a4:1a:bd:32:08:ae:95:51:ee:2f:42:7f:b3:e9:67:
                    16:4b:99:38:5f:3e:ba:6e:6b:99:4f:73:f2:20:4c:
                    a1:0e:63:ba:cc:4b:82:a8:95:43:be:03:30:b1:1c:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0B:75:97:1B:11:67:76:65:8E:C5:A0:65:3D:ED:AB:68:D5:22:83
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b2:1b:cb:c6:4e:4e:2b:41:b1:f0:ea:aa:5e:14:58:c6:eb:
         e4:c2:cb:87:71:58:de:c9:22:48:66:cf:bb:42:54:33:36:a0:
         39:01:75:40:13:b2:27:01:e3:ee:5b:94:d5:a4:ef:21:68:dd:
         8f:98:59:42:40:b8:12:c8:14:74:a0:f2:00:74:34:89:49:b5:
         f8:8a:3d:21:3a:75:7f:82:69:23:a4:7e:ed:88:5c:06:f6:29:
         29:b1:76:74:8d:a1:6b:66:06:65:da:54:31:f9:84:e0:43:09:
         f1:74:90:95:e5:78:23:01:e0:a2:2a:73:38:90:ac:90:22:68:
         ff:47:8b:23:d5:21:33:63:ca:1d:9f:c6:95:27:09:a4:a5:bc:
         d3:12:9e:f7:35:ba:d2:b9:36:42:3f:45:68:1e:59:80:95:be:
         ad:b0:d8:84:43:a7:71:55:85:b4:be:56:ca:64:e1:16:b4:53:
         e7:21:ea:d4:3a:23:7a:dc:70:c7:16:32:63:d2:b1:1b:7e:53:
         80:39:b2:21:3d:23:bd:37:fe:7b:29:03:2a:54:a4:1f:6f:c5:
         6f:fb:44:c7:c1:90:3f:60:90:fc:74:60:27:7f:08:8a:38:08:
         41:8a:08:08:24:7e:3a:1d:b6:3b:46:9f:01:cf:8d:39:5f:6e:
         94:94:c4:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0
NEIyQ0M3RjQwHhcNMjYwNDA1MDEwMTE0WhcNMjYwNDEyMDEwMTE0WjAYMRYwFAYD
VQQDEw02OWQxYjQ1Yi04YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyX11tP2si/1jttN3YGrG4yTKlECpHTEbUH3B3gQSqm9komuivU6LknMgijp9
C3kEvQOdoW+WMYg82K3OoM70XbER11i3+wt8DQI1On9q8yk7uRwVhMfdgCrJX3yF
/5UkGEmTqmUCuoP9ZvdjxO8XpecSDj+xY7qf6sBjHSWjhJixJuMUhkGwRYn4R+T4
MZaMW680Xmw9gJd2EmMiPVjYCCHH3rms5r7fIJkZmxag5jQxp+awzm1X8COYq4Id
OqO6JH11jD+vGWE/ycKQnKarkwykGr0yCK6VUe4vQn+z6WcWS5k4Xz66bmuZT3Py
IEyhDmO6zEuCqJVDvgMwsRzoQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoLdZcb
EWd2ZY7FoGU97ato1SKDMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4
M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm
UEh6WXBQV1lmejVFc3N4X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgrIby8ZOTitBsfDqql4UWMbr5MLLh3FY3skiSGbPu0JUMzagOQF1QBOyJwHj
7luU1aTvIWjdj5hZQkC4EsgUdKDyAHQ0iUm1+Io9ITp1f4JpI6R+7YhcBvYpKbF2
dI2ha2YGZdpUMfmE4EMJ8XSQleV4IwHgoipzOJCskCJo/0eLI9UhM2PKHZ/GlScJ
pKW80xKe9zW60rk2Qj9FaB5ZgJW+rbDYhEOncVWFtL5WymThFrRT5yHq1Dojetxw
xxYyY9KxG35TgDmyIT0jvTf+eykDKlSkH2/Fb/tEx8GQP2CQ/HRgJ38IijgIQYoI
CCR+Oh22O0afAc+NOV9ulJTEkA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:44 2026 by rpki-client