Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File:                     kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier:          c+SYTZdOh0aNxee8QHTfSShyK6IfOLi9Bhenc6ghL7c=
Subject key identifier:   6A:0C:EF:A2:EE:AF:8C:3A:BD:1E:72:D5:2F:B2:67:33:BA:06:AA:F4
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer:       /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number:          01FC
Signing time:             Tue 11 Aug 2026 02:52:09 +0000
Manifest this update:     Tue 11 Aug 2026 02:52:09 +0000
Manifest next update:     Tue 18 Aug 2026 02:52:09 +0000
Files and hashes:         1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: jig1fKKksA13KvRgISbqFm+BTG60idJohKiBEMp5su4=)
                          2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: EaakEgdFwicKWl6P4v+HQcFOhGMzWeAMEZbE1mBKQ84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
                          rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 02:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
        Validity
            Not Before: Aug 11 02:52:09 2026 GMT
            Not After : Aug 18 02:52:09 2026 GMT
        Subject: CN=6a7a8e59-472d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:8b:f2:84:c1:61:ee:75:36:3e:52:60:e9:
                    e5:f9:51:82:69:a0:3c:fd:71:ba:c3:14:2a:7d:52:
                    dd:d1:64:8f:e2:c0:0e:c3:75:1f:7d:7b:97:8c:73:
                    7b:f8:2b:a3:26:b8:a1:d1:a6:e0:85:22:cb:b2:6d:
                    ce:68:89:53:08:ef:31:e4:4b:06:fc:62:f6:2c:c5:
                    2d:91:7e:31:dc:e9:02:a1:6c:23:f2:b8:36:23:77:
                    db:78:b7:f3:ae:e9:56:b1:9f:62:45:82:b2:e6:66:
                    b8:fa:24:d4:9a:91:aa:f1:75:e8:76:d9:d1:58:b4:
                    c0:76:bb:17:3d:5e:d5:03:b3:3e:36:73:09:ec:06:
                    e4:7b:4e:6b:1f:44:37:36:3f:37:e1:f3:12:02:53:
                    47:09:3a:d6:e7:ed:d7:e3:70:2b:8d:ab:c2:58:ba:
                    63:2f:01:f6:a6:1a:0b:47:48:79:3d:f3:4b:84:5a:
                    c4:a3:67:4b:ae:32:08:83:26:18:0e:b1:fa:74:c1:
                    ac:12:e8:c4:1c:7c:8d:76:8b:24:0a:92:33:60:fa:
                    5b:b9:6e:26:78:bd:d7:de:f1:6b:b2:35:c3:aa:a6:
                    f6:7c:b3:ac:65:d9:78:8d:ae:9a:2e:ed:f6:3b:e4:
                    89:a7:7e:ef:93:dd:3c:76:ad:90:d5:75:99:25:44:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:EF:A2:EE:AF:8C:3A:BD:1E:72:D5:2F:B2:67:33:BA:06:AA:F4
            X509v3 Authority Key Identifier:
                keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:68:ad:4f:71:09:eb:95:01:ad:05:7e:07:72:22:65:1c:3b:
         f4:9e:00:48:a1:2a:bb:09:d7:f2:ec:6e:a5:ae:c6:4e:07:ff:
         ac:a5:1b:47:58:6e:5e:71:1f:fa:44:72:be:50:b1:35:fd:11:
         d0:98:31:c6:8e:22:8d:29:bc:e8:53:ef:08:8e:c1:45:c4:05:
         a3:37:8a:93:0f:1e:0c:eb:f1:74:4a:52:03:bf:58:69:f6:5f:
         e8:75:e5:cc:8d:c9:f2:a8:f6:ad:1d:9f:75:a9:98:40:5d:2a:
         29:57:08:d9:21:2f:92:5a:f9:6d:50:24:50:6e:3d:44:59:b2:
         89:ea:88:f4:bd:49:8c:e3:53:53:48:09:64:4e:8e:58:20:f7:
         57:6a:14:db:12:3e:7c:70:98:73:6d:7f:f8:ec:d6:aa:a9:ad:
         00:b9:f3:77:6f:e4:d9:cc:72:97:a7:42:8c:8a:a3:41:5b:11:
         4c:8c:44:ea:7b:c6:d3:17:8c:2c:3b:cd:73:8b:26:6a:37:d4:
         cf:32:f1:4d:f7:83:d7:f8:a1:86:d3:93:6c:82:87:5d:1e:08:
         d9:cf:78:d4:22:f8:4a:12:fc:d6:6e:c5:12:d7:1f:e0:d3:44:
         c9:f6:47:b9:c9:7c:d2:98:b8:1a:0e:f9:f6:4d:27:6e:91:38:
         b0:ab:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:11:09 2026 by rpki-client