Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File:                     k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier:          PfwF0ACb4e4oYzsz1LUy84URqVHkkjwD5BoMw9V6VBI=
Subject key identifier:   6B:F9:5A:85:AD:BD:F2:1B:B3:EE:2B:F1:32:36:3B:D4:B1:00:70:C8
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer:       /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number:          0623
Signing time:             Fri 04 Sep 2026 22:34:28 +0000
Manifest this update:     Fri 04 Sep 2026 22:34:27 +0000
Manifest next update:     Fri 11 Sep 2026 22:34:27 +0000
Files and hashes:         1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: kGFZitH6kw1a0zak4KCm3e1YLbLO3AJfs9+5EtAI0sA=)
                          2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: 5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
                          rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
        Validity
            Not Before: Sep  4 22:34:27 2026 GMT
            Not After : Sep 11 22:34:27 2026 GMT
        Subject: CN=6a9b4774-0b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:b9:82:cc:0e:69:74:76:01:1c:50:ae:61:
                    2a:75:c6:01:19:69:db:34:97:05:f1:55:a5:fe:a5:
                    1b:28:cb:5a:3d:2f:f3:b8:3d:df:ba:09:00:44:1d:
                    91:ae:4d:90:dd:22:fb:9e:92:61:66:91:58:d5:d8:
                    f4:41:64:8e:1b:c2:be:49:64:41:b9:d5:a3:ad:3b:
                    c6:95:d7:90:7c:7b:61:b6:b1:e1:1e:8b:e7:09:94:
                    b9:8f:fd:52:b0:a1:f9:71:8b:71:e3:9b:80:2b:87:
                    90:70:ad:f7:ba:f8:c8:de:cc:2c:49:8e:08:d2:cd:
                    ca:53:63:ab:30:dc:b5:de:2b:01:d7:fe:a6:16:b5:
                    d7:e1:b1:38:45:56:6c:12:d7:bd:f8:44:fb:82:fe:
                    9b:c7:2e:c7:f7:99:46:6d:ca:2c:05:ec:20:eb:ce:
                    27:f0:c1:03:03:9b:ad:56:fb:2b:50:05:f3:f4:0d:
                    0e:3b:59:87:b0:c9:d3:c7:37:80:a1:62:b6:94:b5:
                    f5:e9:7f:c2:ae:b5:d2:94:7e:89:6c:aa:72:fa:f7:
                    84:03:c8:f2:c4:5e:d5:d8:b1:1b:b0:20:62:ad:93:
                    64:af:01:20:a2:3f:6f:df:72:e3:0f:c2:b0:eb:3c:
                    7f:67:be:da:42:50:94:20:ca:60:2e:84:ff:35:bb:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:5A:85:AD:BD:F2:1B:B3:EE:2B:F1:32:36:3B:D4:B1:00:70:C8
            X509v3 Authority Key Identifier:
                keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:5b:c0:82:70:97:1e:52:1e:52:f0:92:e4:99:e9:25:4b:
         d9:7a:ee:47:70:ea:31:61:f8:1f:42:8d:78:e2:4c:8f:34:a8:
         c4:f2:38:28:3e:8e:0c:0b:c2:4e:6a:52:ff:bd:55:47:41:a8:
         1c:b5:2f:2d:0b:ea:30:80:3d:6a:6c:28:de:28:f6:e5:5f:72:
         9f:96:87:59:ef:c7:59:4c:e2:49:e4:34:90:fa:70:7b:af:68:
         ba:ab:20:a8:43:0a:e6:c2:c8:62:76:a7:77:48:dc:f8:b4:96:
         f3:d5:c3:64:c2:59:16:30:f5:e9:cc:2c:40:74:55:4f:91:42:
         d6:37:bb:1a:9a:8e:a8:7d:64:48:ec:11:2a:06:70:39:7f:67:
         19:52:d6:87:18:96:2d:3a:7c:cd:44:7c:02:2d:d7:3c:ec:3e:
         ac:21:75:83:01:9b:7f:1b:50:6e:52:48:89:03:24:8d:8b:8f:
         45:8c:ad:18:a4:79:f5:f9:18:4f:26:a6:b8:37:39:93:92:6f:
         08:7e:09:a0:58:64:d4:09:64:63:dd:b9:32:22:78:9a:30:bb:
         62:f4:1d:51:2c:8f:bf:b7:8d:9c:b5:94:9c:d9:12:54:34:c6:
         e2:03:df:d0:d2:0d:81:e7:b0:35:20:69:8c:47:83:33:57:09:
         e8:91:52:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx
RjBCRUZFRTcwHhcNMjYwOTA0MjIzNDI3WhcNMjYwOTExMjIzNDI3WjAYMRYwFAYD
VQQDEw02YTliNDc3NC0wYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKy5gswOaXR2ARxQrmEqdcYBGWnbNJcF8VWl/qUbKMtaPS/zuD3fugkARB2R
rk2Q3SL7npJhZpFY1dj0QWSOG8K+SWRBudWjrTvGldeQfHthtrHhHovnCZS5j/1S
sKH5cYtx45uAK4eQcK33uvjI3swsSY4I0s3KU2OrMNy13isB1/6mFrXX4bE4RVZs
Ete9+ET7gv6bxy7H95lGbcosBewg684n8MEDA5utVvsrUAXz9A0OO1mHsMnTxzeA
oWK2lLX16X/CrrXSlH6JbKpy+veEA8jyxF7V2LEbsCBirZNkrwEgoj9v33LjD8Kw
6zx/Z77aQlCUIMpgLoT/NbudNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGv5WoWt
vfIbs+4r8TI2O9SxAHDIMB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5
QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N
TjdkX2w1QTNCcllmQy1fdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVjxbwIJwlx5SHlLwkuSZ6SVL2XruR3DqMWH4H0KNeOJMjzSoxPI4KD6ODAvC
TmpS/71VR0GoHLUvLQvqMIA9amwo3ij25V9yn5aHWe/HWUziSeQ0kPpwe69ouqsg
qEMK5sLIYnand0jc+LSW89XDZMJZFjD16cwsQHRVT5FC1je7GpqOqH1kSOwRKgZw
OX9nGVLWhxiWLTp8zUR8Ai3XPOw+rCF1gwGbfxtQblJIiQMkjYuPRYytGKR59fkY
TyamuDc5k5JvCH4JoFhk1AlkY925MiJ4mjC7YvQdUSyPv7eNnLWUnNkSVDTG4gPf
0NINgeewNSBpjEeDM1cJ6JFSeg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:08:21 2026 by rpki-client