Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
File:                     ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json)
Hash identifier:          /JDcNG+Fcr5WQpz4O7xsr3ooOxjWoemeLz+u2Dn8LYU=
Subject key identifier:   5D:FC:C9:B7:AF:00:FB:29:7C:83:DD:DC:21:A0:5E:1A:D7:87:21:A7
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Certificate issuer:       /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
Manifest number:          01DA
Signing time:             Thu 13 Aug 2026 03:17:25 +0000
Manifest this update:     Thu 13 Aug 2026 03:17:25 +0000
Manifest next update:     Thu 20 Aug 2026 03:17:25 +0000
Files and hashes:         1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: 8lKRnVy4hIYF9EbWTZiZYFIv1aMP3kBVzjrtNWbd9ek=)
                          2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
                          rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 03:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
        Validity
            Not Before: Aug 13 03:17:25 2026 GMT
            Not After : Aug 20 03:17:25 2026 GMT
        Subject: CN=6a7d3745-3d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:89:83:f4:8f:f1:08:ea:59:c1:1c:d7:34:
                    f0:24:30:42:f7:44:15:d8:d7:f1:f2:0e:2b:de:51:
                    ad:d5:e6:3e:69:ee:23:24:f8:da:4d:7b:f0:f7:0b:
                    fb:38:5a:11:ab:18:69:b3:27:fd:d4:e3:77:48:69:
                    7f:8c:dc:55:b2:0d:e7:77:fa:4d:6a:ae:7f:26:30:
                    26:a1:56:68:2d:da:ac:e9:71:a7:1d:bf:ea:83:30:
                    0a:36:08:f6:93:94:d0:ef:cb:96:c7:52:99:f1:59:
                    2c:86:30:9e:06:69:25:75:08:54:bd:21:4b:e6:ee:
                    8d:58:58:50:7b:bc:b2:7a:a8:68:b1:da:70:55:59:
                    5d:87:e7:14:55:5b:de:34:57:5f:ca:9a:32:8a:61:
                    5a:60:aa:9d:95:25:8a:93:48:ef:73:d1:ed:26:6c:
                    62:56:6e:ab:6f:17:31:3d:c9:fa:8e:1e:f9:bc:07:
                    90:11:47:b1:cc:66:19:cf:4f:2f:d8:95:d9:06:24:
                    ec:cd:38:81:16:e1:1d:c0:23:52:b6:fd:ad:85:96:
                    01:e3:7b:51:96:5a:89:c9:de:fc:5d:04:ff:6a:fd:
                    7e:87:33:bc:81:ff:24:e1:c2:c5:86:0b:87:3c:88:
                    6e:5d:10:0c:2c:af:38:09:ad:2e:5b:a4:bc:25:b4:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:C9:B7:AF:00:FB:29:7C:83:DD:DC:21:A0:5E:1A:D7:87:21:A7
            X509v3 Authority Key Identifier:
                keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:a3:6f:a8:41:43:d1:a2:59:27:a7:ac:1c:4e:2d:fa:63:
         1b:37:9e:8f:70:ee:9b:6e:38:68:1b:39:97:20:c8:7a:c5:3f:
         24:62:40:39:75:db:f8:c9:43:73:70:c7:6d:09:7e:57:92:cb:
         e0:8d:b9:81:73:c4:11:d3:eb:4d:e2:f3:4a:35:83:14:f3:65:
         8d:39:9a:5e:75:f4:77:5b:5e:d4:51:38:5b:8c:7b:4d:cd:d3:
         bc:1f:8f:63:a0:30:d1:37:ef:7d:cd:4b:4a:1e:b1:72:bd:b3:
         8f:04:51:f2:ba:3d:bf:5a:9e:4e:23:d2:68:05:0f:9a:6b:14:
         b0:62:66:23:64:d3:9e:5d:77:6b:87:c2:66:dd:ed:3c:0a:b6:
         09:5d:48:fb:2e:51:b5:6b:04:73:00:88:2e:de:27:91:74:63:
         09:c7:c4:39:47:69:ae:29:26:69:7d:c0:07:b6:43:b4:d4:73:
         04:e4:3e:ab:87:01:f7:97:cd:c7:82:e3:11:06:59:a8:78:c7:
         15:e1:37:79:eb:75:4d:55:2c:d6:c6:86:1e:d3:6b:3e:3d:47:
         1c:96:63:5f:c0:60:73:9d:e1:c3:58:f3:82:5f:b2:78:13:2e:
         0f:38:71:f4:1e:73:95:47:ac:a5:ab:f0:3a:bb:f2:71:a7:d2:
         af:06:64:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC
NjYyOTA1MzAwHhcNMjYwODEzMDMxNzI1WhcNMjYwODIwMDMxNzI1WjAYMRYwFAYD
VQQDEw02YTdkMzc0NS0zZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHuJg/SP8QjqWcEc1zTwJDBC90QV2Nfx8g4r3lGt1eY+ae4jJPjaTXvw9wv7
OFoRqxhpsyf91ON3SGl/jNxVsg3nd/pNaq5/JjAmoVZoLdqs6XGnHb/qgzAKNgj2
k5TQ78uWx1KZ8VkshjCeBmkldQhUvSFL5u6NWFhQe7yyeqhosdpwVVldh+cUVVve
NFdfypoyimFaYKqdlSWKk0jvc9HtJmxiVm6rbxcxPcn6jh75vAeQEUexzGYZz08v
2JXZBiTszTiBFuEdwCNStv2thZYB43tRllqJyd78XQT/av1+hzO8gf8k4cLFhguH
PIhuXRAMLK84Ca0uW6S8JbT7rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF38ybev
APspfIPd3CGgXhrXhyGnMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5
NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du
N1RsbDh0bUxiWjYyWXBCVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASlKjb6hBQ9GiWSenrBxOLfpjGzeej3Dum244aBs5lyDIesU/JGJAOXXb+MlD
c3DHbQl+V5LL4I25gXPEEdPrTeLzSjWDFPNljTmaXnX0d1te1FE4W4x7Tc3TvB+P
Y6Aw0Tfvfc1LSh6xcr2zjwRR8ro9v1qeTiPSaAUPmmsUsGJmI2TTnl13a4fCZt3t
PAq2CV1I+y5RtWsEcwCILt4nkXRjCcfEOUdprikmaX3AB7ZDtNRzBOQ+q4cB95fN
x4LjEQZZqHjHFeE3eet1TVUs1saGHtNrPj1HHJZjX8Bgc53hw1jzgl+yeBMuDzhx
9B5zlUespavwOrvycafSrwZkAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:33:55 2026 by rpki-client