Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          bpPSfQP+n7xGPy4xbI8/EBINMoa/KpqamJqwzQL5Hc8=
Subject key identifier:   02:F8:3C:FD:AD:11:9D:56:5E:B9:07:A9:89:7B:83:E5:D1:FD:AF:91
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          0346
Signing time:             Wed 19 Aug 2026 01:22:55 +0000
Manifest this update:     Wed 19 Aug 2026 01:22:55 +0000
Manifest next update:     Wed 26 Aug 2026 01:22:55 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: RtWbVm3bfPqwsF9NROvPGbOMDsB//atjd0dmuwb8DDE=)
                          2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: pfFM49AewSnbYQOQYvGFBTcjUpW5EFPfC+P+FjjpnB4=)
                          3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +o+C/qUQzkMCGKd5HlBvgEOiBcnQ3aHh6w81utoZMtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Aug 19 01:22:55 2026 GMT
            Not After : Aug 26 01:22:55 2026 GMT
        Subject: CN=6a85056f-b4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:14:59:ee:26:50:d8:da:ed:b1:94:82:75:
                    01:db:9e:59:06:b7:31:91:e0:5e:71:eb:64:e3:eb:
                    80:a2:ea:5c:aa:62:ad:58:c7:8d:bd:9c:a4:ba:5a:
                    5d:74:94:35:0a:b2:e8:b2:85:a9:7b:b3:eb:cf:8d:
                    7e:7a:d9:91:e3:f4:4a:1f:e8:f5:c3:62:37:ff:90:
                    2b:48:96:e4:f3:0b:e8:d2:9b:5a:b2:6a:d1:a5:4c:
                    28:cf:63:99:12:aa:2f:e1:95:31:16:07:bc:0b:b5:
                    35:a9:98:3d:f1:96:af:e1:33:25:d0:3c:41:6e:8d:
                    49:f3:24:36:a5:1e:be:f4:09:3c:53:d5:fb:15:a8:
                    03:f6:3f:13:3c:e2:03:cd:69:38:ee:e4:14:33:3d:
                    c8:8a:09:41:65:83:b4:d8:ed:50:c9:4d:6a:78:22:
                    68:bf:c0:c6:b0:f3:7f:23:c6:f2:45:99:2f:ad:57:
                    61:0f:66:db:7d:1a:04:64:1b:89:ad:0b:6b:25:36:
                    32:da:02:1c:30:f0:7f:f2:a3:4c:7f:7d:49:80:15:
                    bc:32:fd:b0:dc:35:f5:a3:02:15:13:b9:49:52:4f:
                    0b:aa:00:36:33:6c:da:f2:f3:de:04:13:b8:3c:a5:
                    1c:2c:ea:d1:67:e9:68:25:57:31:8d:f5:ea:98:a9:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F8:3C:FD:AD:11:9D:56:5E:B9:07:A9:89:7B:83:E5:D1:FD:AF:91
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8b:83:db:22:31:b8:ea:ed:c5:e9:dc:ac:63:eb:66:b2:48:
         57:61:38:d3:f8:87:1c:0a:fa:81:cc:c1:bd:dc:fa:fc:d9:5a:
         15:3b:46:60:7c:69:bd:42:bf:ad:80:07:03:a8:de:8e:1d:08:
         07:cb:ea:d5:01:c5:9a:e3:fc:78:32:20:c2:b3:11:18:ea:60:
         73:01:c5:7f:0c:86:db:e9:6e:02:8d:08:76:34:90:95:47:ea:
         08:e7:49:e0:e6:30:38:28:ae:91:1e:31:96:22:95:78:94:4d:
         d3:58:fd:75:af:6c:f3:0f:1f:16:ac:ef:b7:8e:a7:bf:b3:b9:
         94:6d:aa:69:97:ea:e6:24:e2:71:80:52:2f:61:f1:0e:71:49:
         cd:fc:9c:f8:7f:98:83:68:13:09:b6:ad:11:18:44:37:8d:75:
         77:c9:af:11:c4:cc:50:a8:8e:ce:55:26:5a:71:15:42:e2:64:
         2d:08:98:4c:6a:2a:2d:47:06:db:2f:10:77:d3:a9:b3:4b:33:
         83:66:d6:ed:c6:82:6b:3d:6c:51:e2:41:74:09:aa:c4:ba:04:
         7b:71:77:8d:66:86:12:f5:d3:8d:a6:9d:e4:fe:84:6f:c8:0b:
         ec:85:0e:fb:2a:df:a5:71:ba:b4:db:a2:47:79:9f:3a:08:7c:
         6a:0f:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:39 2026 by rpki-client