Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File:                     k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier:          5xL8Se3kbD6Yx6yJc+D5ugE4fVCsRP6e+jZ8NKSGVkc=
Subject key identifier:   FA:30:D3:22:C2:91:38:CA:53:0B:6C:16:33:C2:76:E4:12:AD:69:1F
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer:       /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number:          0631
Signing time:             Fri 02 Oct 2026 23:02:40 +0000
Manifest this update:     Fri 02 Oct 2026 23:02:39 +0000
Manifest next update:     Fri 09 Oct 2026 23:02:39 +0000
Files and hashes:         1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: Gwd3wL/vnhs+/3GtTkYVj4SY413NrtYNJ5x7ekq5Www=)
                          2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: 5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
                          rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
        Validity
            Not Before: Oct  2 23:02:39 2026 GMT
            Not After : Oct  9 23:02:39 2026 GMT
        Subject: CN=6ac03810-f336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:3b:0f:92:6d:0c:66:11:a0:7c:de:70:81:
                    84:d9:80:4a:dd:07:10:35:88:10:7c:c0:3d:6a:9c:
                    a6:f1:d2:cf:1e:5c:a7:65:92:ff:53:aa:35:1b:60:
                    32:94:e9:d6:46:6c:c6:8b:38:41:81:c3:1e:f5:cc:
                    4f:0b:65:35:64:f7:47:ba:26:00:da:f0:39:6a:0a:
                    28:c9:5f:ea:a0:44:b5:fc:02:78:f2:d2:1c:8a:4e:
                    c4:65:bc:ae:37:de:f5:d7:12:e1:f9:69:22:58:e5:
                    1c:e2:1f:f2:57:1a:28:76:b2:d3:8c:86:57:ce:6c:
                    77:00:63:a2:e9:47:8c:2e:88:72:b1:15:15:b9:7d:
                    7b:92:9c:4f:0a:c6:98:dd:97:9e:ae:ea:ee:53:a8:
                    8c:f7:a8:cc:71:74:5a:fc:07:3b:35:92:59:d5:48:
                    46:89:07:41:d3:fe:3e:79:6f:19:c8:27:d5:51:03:
                    f8:41:cc:f1:57:ef:f2:c8:6e:85:ef:95:ba:ba:0e:
                    7b:d9:c5:43:b5:c4:c2:5d:fc:f1:50:b1:7f:28:44:
                    5c:04:a3:5d:9d:7f:d5:d7:1d:82:f6:77:b7:79:b9:
                    8e:90:e6:88:95:88:bb:4c:77:1b:b1:e6:01:61:91:
                    79:97:61:ae:6f:92:a2:6d:f8:f3:4f:00:1c:2a:26:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:D3:22:C2:91:38:CA:53:0B:6C:16:33:C2:76:E4:12:AD:69:1F
            X509v3 Authority Key Identifier:
                keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:69:5c:72:10:b1:b8:3f:b2:b1:1f:6b:d7:8a:3e:c5:9b:
         63:ab:78:4f:41:c8:fc:f3:1c:a7:5f:91:20:67:ae:06:7b:01:
         44:4f:a5:0c:ca:18:4a:ab:23:5e:c9:23:e6:22:69:14:c1:81:
         b6:cc:ce:cf:e9:5f:bf:30:8c:65:9a:2c:81:af:64:30:48:be:
         55:b5:9f:79:cd:73:80:e7:3d:47:a3:c1:9c:0d:05:20:a3:0f:
         c2:34:4b:cb:59:0a:1e:55:ba:f5:c6:bf:b7:cb:c5:48:3f:6c:
         2a:b6:5b:85:8e:25:d4:9f:b3:24:27:95:75:b0:47:e2:1d:51:
         89:18:18:9f:0b:0f:40:93:ad:92:85:e0:a8:04:7f:d0:ff:8f:
         e0:d7:f0:f4:45:62:2a:4f:12:6c:bc:a4:e3:c2:26:20:d1:8f:
         6c:95:88:d9:5b:21:7f:bd:60:56:99:6b:79:58:3a:62:99:94:
         4b:1e:ca:07:14:09:50:ac:3a:88:6e:01:15:b2:5a:96:39:0b:
         2f:16:52:50:2c:d7:4f:f4:43:74:12:9b:cb:f1:e5:11:57:05:
         c1:73:5d:43:e9:47:99:97:18:b4:be:17:2c:88:90:3c:c9:0c:
         fc:af:dd:62:42:13:43:fb:7c:98:17:c1:33:04:a6:e3:d4:1c:
         8d:e1:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:07:25 2026 by rpki-client