Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
File:                     vDUKYanj3h4eWJC-0L6KhxJP3LE.mft (raw, json)
Hash identifier:          vHlYmaGDNsQ+DdngdoDuLpMh/D08xgATibLn/UTHDLc=
Subject key identifier:   71:A8:07:A1:0C:FA:C8:D7:C8:56:A5:9A:B4:EC:81:AE:34:79:6C:AA
Authority key identifier: BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1
Certificate issuer:       /CN=A91FC3D0/serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
Manifest number:          2F
Signing time:             Wed 19 Aug 2026 09:26:38 +0000
Manifest this update:     Wed 19 Aug 2026 09:26:37 +0000
Manifest next update:     Wed 26 Aug 2026 09:26:37 +0000
Files and hashes:         1: vDUKYanj3h4eWJC-0L6KhxJP3LE.crl (hash: 1+4+MGaU0VSk2ThiKH0Tan/xb/j+bnNiivcueK8wfGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl
                          rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC3D0, serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1
        Validity
            Not Before: Aug 19 09:26:37 2026 GMT
            Not After : Aug 26 09:26:37 2026 GMT
        Subject: CN=6a8576ce-568b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:fd:3e:8a:9e:2b:9a:db:fb:a5:d7:a4:5a:
                    cb:ba:0a:9e:26:70:fb:58:95:7f:4e:42:b8:b4:ef:
                    cd:57:0c:1c:71:c9:db:4c:66:4b:70:c8:c9:02:bb:
                    c5:7d:17:ba:d5:5d:48:a4:61:34:7e:7f:3f:20:a8:
                    16:73:2c:3b:f8:73:57:39:37:44:e5:f7:1a:f8:75:
                    96:5d:2b:0f:6d:27:b0:00:61:45:66:73:93:61:4c:
                    ec:98:a6:ab:0a:63:e8:da:22:30:f1:ec:63:e5:df:
                    ff:58:e6:23:da:74:f8:aa:cf:e0:ce:eb:d3:b6:03:
                    0e:66:86:37:b2:30:de:0c:5d:dc:66:9a:ed:e5:ca:
                    29:04:3a:ff:93:ae:ed:32:0c:96:ed:39:31:5e:6f:
                    11:35:6a:de:53:4b:61:91:7c:51:e1:ed:d1:0d:f5:
                    53:ff:9a:40:24:2f:a0:06:15:98:0c:4c:68:3d:e4:
                    0b:cf:a2:d8:25:05:44:d1:dd:54:f5:db:90:1b:ad:
                    2e:5b:4d:f9:16:37:37:d5:a6:91:7f:8e:02:ca:cf:
                    1f:30:ec:0c:d7:eb:b6:64:89:79:e2:6c:ee:4d:ff:
                    7b:ab:64:8c:c3:dd:13:02:46:6b:02:dd:4b:32:19:
                    f4:9c:4c:49:dc:e7:32:29:f3:d4:4d:c6:15:ec:70:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:07:A1:0C:FA:C8:D7:C8:56:A5:9A:B4:EC:81:AE:34:79:6C:AA
            X509v3 Authority Key Identifier:
                keyid:BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5d:fa:32:c0:a3:67:1e:35:7f:fa:1b:91:ae:dd:f0:48:d0:
         ad:de:ab:dc:48:4e:64:a0:78:08:8f:08:18:63:9b:d2:da:39:
         4c:31:8a:8d:0e:fd:fa:3a:8e:8d:95:03:90:98:c6:c4:6b:14:
         71:6a:38:16:91:27:d2:55:76:18:1d:71:83:ad:2c:c9:4a:fb:
         0d:96:2f:04:b4:54:41:ad:e8:4c:a6:b1:c8:92:6e:60:9b:6c:
         dd:85:93:d9:e3:0c:e4:85:60:ae:d7:bf:7c:79:fd:29:e0:21:
         1e:b2:40:e4:2e:fa:3a:c5:4f:9f:51:87:c0:99:f8:bd:28:bc:
         d2:53:34:c8:de:53:e8:f7:6e:e0:7a:9f:55:10:17:3f:e1:8d:
         41:62:02:57:8d:c5:2d:a6:23:32:7a:93:5c:b1:5f:e8:25:d2:
         76:8b:f5:39:29:48:dc:d4:eb:a2:13:e7:21:81:1d:18:cc:ed:
         60:34:e3:a3:be:75:af:9e:20:5b:3c:45:4a:4e:7c:ff:a3:6f:
         23:e8:3b:0d:5b:06:36:ad:89:88:df:a2:03:55:ba:9d:33:6c:
         f2:20:22:8b:d9:9f:83:f2:c0:23:5f:43:0c:d7:09:72:49:c0:
         ed:84:43:3a:48:df:76:fe:f9:2e:d1:ce:9a:df:31:86:48:81:
         62:fa:d1:c1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QzNEMDExMC8GA1UEBRMoQkMzNTBBNjFBOUUzREUxRTFFNTg5MEJFRDBCRThBODcx
MjRGRENCMTAeFw0yNjA4MTkwOTI2MzdaFw0yNjA4MjYwOTI2MzdaMBgxFjAUBgNV
BAMTDTZhODU3NmNlLTU2OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqpv0+ip4rmtv7pdekWsu6Cp4mcPtYlX9OQri0781XDBxxydtMZktwyMkCu8V9
F7rVXUikYTR+fz8gqBZzLDv4c1c5N0Tl9xr4dZZdKw9tJ7AAYUVmc5NhTOyYpqsK
Y+jaIjDx7GPl3/9Y5iPadPiqz+DO69O2Aw5mhjeyMN4MXdxmmu3lyikEOv+Tru0y
DJbtOTFebxE1at5TS2GRfFHh7dEN9VP/mkAkL6AGFZgMTGg95AvPotglBUTR3VT1
25AbrS5bTfkWNzfVppF/jgLKzx8w7AzX67ZkiXnibO5N/3urZIzD3RMCRmsC3Usy
GfScTEnc5zIp89RNxhXscO7JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcagHoQz6
yNfIVqWatOyBrjR5bKowHwYDVR0jBBgwFoAUvDUKYanj3h4eWJC+0L6KhxJP3LEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDM0QwL0IwOUIyRjRDNTQ0
NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0ZVdKQy0wTDZLaHhKUDNM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdkRVS1lhbmozaDRlV0pDLTBMNktoeEpQM0xFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
M0QwL0IwOUIyRjRDNTQ0NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0
ZVdKQy0wTDZLaHhKUDNMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDFXfoywKNnHjV/+huRrt3wSNCt3qvcSE5koHgIjwgYY5vS2jlMMYqNDv36Oo6N
lQOQmMbEaxRxajgWkSfSVXYYHXGDrSzJSvsNli8EtFRBrehMprHIkm5gm2zdhZPZ
4wzkhWCu1798ef0p4CEeskDkLvo6xU+fUYfAmfi9KLzSUzTI3lPo927gep9VEBc/
4Y1BYgJXjcUtpiMyepNcsV/oJdJ2i/U5KUjc1OuiE+chgR0YzO1gNOOjvnWvniBb
PEVKTnz/o28j6DsNWwY2rYmI36IDVbqdM2zyICKL2Z+D8sAjX0MM1wlyScDthEM6
SN92/vku0c6a3zGGSIFi+tHB
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:00 2026 by rpki-client