Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File:                     mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier:          IF3oO8LOgciECt2NUUhQbvXEeu6NYZiDNRlKTTGW6V8=
Subject key identifier:   0F:B9:40:A5:8D:3F:50:2F:79:46:4C:98:A2:6F:09:F1:E9:9F:18:BF
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer:       /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number:          0682
Signing time:             Tue 18 Aug 2026 22:52:58 +0000
Manifest this update:     Tue 18 Aug 2026 22:52:58 +0000
Manifest next update:     Tue 25 Aug 2026 22:52:58 +0000
Files and hashes:         1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: n3SqQyG0lbnldqlp7ObeAxstx5U1WNZscRbptfiQ8ik=)
                          2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 3aFodImKWMo+HHP106nEDJyeLQ2LYiLD1hjDTf3lt2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
                          rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
        Validity
            Not Before: Aug 18 22:52:58 2026 GMT
            Not After : Aug 25 22:52:58 2026 GMT
        Subject: CN=6a84e24a-2234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:7e:8a:b6:3f:ed:67:1b:2d:e4:0e:61:fd:
                    de:51:8e:6c:1f:01:c1:9d:82:e0:52:a9:3b:f3:ca:
                    8c:1c:d6:6b:f6:37:f9:64:59:3a:39:86:32:5c:92:
                    5b:1b:d4:76:14:19:d8:3f:18:3b:34:d3:e0:43:5f:
                    c1:0f:0f:85:80:4f:41:90:47:d6:fa:47:ee:ca:c0:
                    73:a7:56:70:7c:3e:3f:ee:e6:8c:7d:ee:4d:5b:f0:
                    2f:f4:f1:a6:c7:fc:7a:31:3f:99:26:2d:bb:43:45:
                    6a:3c:6b:47:20:b1:8e:4f:73:f5:31:a8:e0:a7:85:
                    a4:52:41:d5:44:4e:de:55:c0:ca:a3:fa:cb:67:01:
                    86:e1:08:c8:86:34:9b:2f:b0:aa:37:57:1b:88:54:
                    df:95:e7:af:25:75:6f:7f:ec:66:87:a3:3a:bf:92:
                    57:09:17:cd:f5:e8:79:0e:70:f5:d9:6d:0e:d4:ce:
                    d4:60:5c:45:a2:6d:cd:4a:33:3f:64:20:15:37:54:
                    a0:62:22:38:ac:9f:0b:41:49:fd:aa:91:92:34:d5:
                    74:f2:63:40:5b:3d:31:5a:4a:3f:93:53:a7:9f:6d:
                    e2:80:2a:1f:7d:9f:3d:62:37:6c:0f:05:b0:36:d4:
                    67:07:3e:c2:32:81:96:7a:e7:c8:a2:82:f1:f6:74:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B9:40:A5:8D:3F:50:2F:79:46:4C:98:A2:6F:09:F1:E9:9F:18:BF
            X509v3 Authority Key Identifier:
                keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:78:72:b3:48:5e:bf:ed:4d:c0:72:53:7d:1d:69:b4:05:
         a1:49:9d:ee:f1:34:a8:43:d7:dc:29:f8:82:70:ca:a1:49:19:
         3e:32:64:4e:44:da:09:7e:8b:bb:66:c9:92:87:8e:0e:b4:6a:
         23:78:e9:50:31:fe:f8:db:7b:d9:54:3e:b8:37:20:ca:05:87:
         3c:20:95:30:cf:35:34:db:e8:43:3a:79:a7:9a:56:cb:00:76:
         29:41:67:47:6e:b1:1a:cb:f4:28:35:59:54:2c:ec:30:cf:44:
         b6:2e:4c:ea:25:33:98:38:7f:b9:44:ec:23:1f:00:2c:8b:f2:
         f2:37:a8:3c:2c:60:36:d1:22:09:c2:89:e1:8f:e3:ed:0f:47:
         4b:3c:d3:c9:32:2a:96:aa:ec:f2:b8:1c:ae:4c:96:f3:fe:e1:
         4a:cb:f9:fc:dc:53:0f:a6:44:e6:42:b1:89:d1:1e:20:e3:26:
         4d:27:c8:ad:5c:df:57:f2:56:df:7b:9c:95:43:0c:bb:ed:80:
         87:e9:7f:22:8a:47:c0:d0:be:3a:98:85:6d:64:38:4f:c1:2a:
         14:84:43:c2:37:54:e6:de:70:bc:c7:87:59:88:ca:c4:dd:c3:
         05:7f:88:07:31:c7:f9:b1:de:02:c3:77:56:b1:0d:3e:be:91:
         30:19:4c:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3
QjdCMTJEMDgwHhcNMjYwODE4MjI1MjU4WhcNMjYwODI1MjI1MjU4WjAYMRYwFAYD
VQQDEw02YTg0ZTI0YS0yMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDF+irY/7WcbLeQOYf3eUY5sHwHBnYLgUqk788qMHNZr9jf5ZFk6OYYyXJJb
G9R2FBnYPxg7NNPgQ1/BDw+FgE9BkEfW+kfuysBzp1ZwfD4/7uaMfe5NW/Av9PGm
x/x6MT+ZJi27Q0VqPGtHILGOT3P1Majgp4WkUkHVRE7eVcDKo/rLZwGG4QjIhjSb
L7CqN1cbiFTfleevJXVvf+xmh6M6v5JXCRfN9eh5DnD12W0O1M7UYFxFom3NSjM/
ZCAVN1SgYiI4rJ8LQUn9qpGSNNV08mNAWz0xWko/k1Onn23igCoffZ89YjdsDwWw
NtRnBz7CMoGWeufIooLx9nSreQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+5QKWN
P1AveUZMmKJvCfHpnxi/MB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy
NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy
N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYxN4crNIXr/tTcByU30dabQFoUmd7vE0qEPX3Cn4gnDKoUkZPjJkTkTaCX6L
u2bJkoeODrRqI3jpUDH++Nt72VQ+uDcgygWHPCCVMM81NNvoQzp5p5pWywB2KUFn
R26xGsv0KDVZVCzsMM9Eti5M6iUzmDh/uUTsIx8ALIvy8jeoPCxgNtEiCcKJ4Y/j
7Q9HSzzTyTIqlqrs8rgcrkyW8/7hSsv5/NxTD6ZE5kKxidEeIOMmTSfIrVzfV/JW
33uclUMMu+2Ah+l/IopHwNC+OpiFbWQ4T8EqFIRDwjdU5t5wvMeHWYjKxN3DBX+I
BzHH+bHeAsN3VrENPr6RMBlMsw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:19 2026 by rpki-client