Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File:                     tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier:          I4fJx8YHGPCLI4ORz5ZUBIWX/jCjTMFfYYvdFgH5964=
Subject key identifier:   89:BB:25:00:27:A2:20:F0:9C:74:02:1F:8E:5C:E1:6A:40:AC:34:49
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer:       /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial:       0AF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number:          0AE3
Signing time:             Fri 12 Jun 2026 19:26:10 +0000
Manifest this update:     Fri 12 Jun 2026 19:26:10 +0000
Manifest next update:     Fri 19 Jun 2026 19:26:10 +0000
Files and hashes:         1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: ojqOYWrNlEi0/C7nQRaiwPHlYZ5LWdT35jUtfViEhp0=)
                          2: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: utr9cvGOzINqaYUQ/dmwQU5yDRbxn3goNF9CCVXnSpA=)
                          3: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: Js8cZgoWxEm28eX384SK+YZXcmAPJ6mZANs9VezfqXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
                          rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
        Validity
            Not Before: Jun 12 19:26:10 2026 GMT
            Not After : Jun 19 19:26:10 2026 GMT
        Subject: CN=6a2c5d52-2297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:71:54:6c:01:d7:40:65:32:6d:31:ae:f5:
                    88:66:db:63:99:71:98:b4:f6:50:91:f1:4c:5f:eb:
                    8c:01:a1:f3:b7:69:ca:df:cf:57:4a:31:be:39:01:
                    c7:ef:a8:92:3b:66:80:38:14:c5:56:10:b5:20:01:
                    77:b8:8a:a3:86:ba:d5:92:56:fe:ca:eb:77:6b:a3:
                    36:59:72:52:b1:f2:50:ae:7f:ea:f4:18:2d:45:a7:
                    15:f9:9f:f1:1c:14:40:51:da:37:bd:26:7b:f6:99:
                    e5:c6:cf:f5:12:c6:f0:51:07:d9:3e:30:9a:39:97:
                    2c:a2:d2:b2:d9:ca:f3:17:f3:24:95:ac:a4:28:e4:
                    4e:45:db:e7:98:30:c2:70:f8:0d:6e:d0:7b:50:60:
                    3f:93:8e:9f:e0:bd:89:ca:d4:12:fd:1e:9e:c4:dd:
                    b4:74:63:00:15:d2:74:fb:a5:66:97:d3:ba:f1:7b:
                    c0:48:a0:32:44:78:62:a9:21:40:81:2c:89:49:5f:
                    de:38:d0:be:8c:57:d0:69:40:8b:6d:35:84:13:7b:
                    2c:8b:e1:64:03:e0:4b:72:70:25:a1:a0:6d:de:e7:
                    be:bf:bb:41:e8:0a:e3:f4:cd:18:97:4e:b4:58:25:
                    bf:03:24:56:e2:5f:c1:50:d6:65:b2:c6:00:e3:59:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BB:25:00:27:A2:20:F0:9C:74:02:1F:8E:5C:E1:6A:40:AC:34:49
            X509v3 Authority Key Identifier:
                keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:84:c2:38:de:bf:87:be:ab:b3:10:c3:69:a7:a4:ca:6d:26:
         39:d2:6c:89:5d:78:77:3c:62:1e:f6:f1:1b:85:86:11:02:f5:
         f4:dc:a0:3c:4f:47:67:d5:8e:69:41:59:23:11:04:cf:9b:7b:
         82:66:88:89:48:6b:49:b6:c3:cc:9d:67:b9:50:9a:33:c8:17:
         c8:1d:42:cd:d4:66:be:55:51:93:e8:06:ea:9f:e6:78:e8:78:
         ea:d5:08:88:dd:50:20:34:70:92:50:1b:33:4a:2a:93:7b:3c:
         44:7b:3e:da:6d:2b:8e:10:ed:a7:de:1e:44:e2:fd:96:24:6f:
         74:bd:6f:42:03:65:75:f9:9c:f6:24:f6:cf:17:92:b6:ed:0d:
         14:7f:26:f8:07:fd:7e:8e:4c:79:98:98:d6:3c:51:cc:4f:95:
         cb:f6:e0:eb:39:01:4b:0f:e4:ec:19:25:8e:31:05:83:84:ba:
         f7:c1:d4:2c:c5:f5:e3:36:8f:4b:0e:7e:fa:3a:c0:62:dd:94:
         3e:52:e4:84:f7:52:6b:00:61:8e:c6:63:9c:75:aa:1b:3b:e9:
         1b:f1:58:9c:ba:8a:0e:83:e6:38:48:71:f4:46:91:22:bf:23:
         e2:a5:7a:fc:f2:0a:a0:5d:76:dc:1c:af:6d:dc:a5:f4:f4:73:
         f5:36:b3:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5
MjcyMTRDMzkwHhcNMjYwNjEyMTkyNjEwWhcNMjYwNjE5MTkyNjEwWjAYMRYwFAYD
VQQDEw02YTJjNWQ1Mi0yMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2RlxVGwB10BlMm0xrvWIZttjmXGYtPZQkfFMX+uMAaHzt2nK389XSjG+OQHH
76iSO2aAOBTFVhC1IAF3uIqjhrrVklb+yut3a6M2WXJSsfJQrn/q9BgtRacV+Z/x
HBRAUdo3vSZ79pnlxs/1EsbwUQfZPjCaOZcsotKy2crzF/MklaykKORORdvnmDDC
cPgNbtB7UGA/k46f4L2JytQS/R6exN20dGMAFdJ0+6Vml9O68XvASKAyRHhiqSFA
gSyJSV/eONC+jFfQaUCLbTWEE3ssi+FkA+BLcnAloaBt3ue+v7tB6Arj9M0Yl060
WCW/AyRW4l/BUNZlssYA41n+lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm7JQAn
oiDwnHQCH45c4WpArDRJMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx
NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p
RC1icWt2NjhYb3FTY2hURGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjITCON6/h76rsxDDaaekym0mOdJsiV14dzxiHvbxG4WGEQL19NygPE9HZ9WO
aUFZIxEEz5t7gmaIiUhrSbbDzJ1nuVCaM8gXyB1CzdRmvlVRk+gG6p/meOh46tUI
iN1QIDRwklAbM0oqk3s8RHs+2m0rjhDtp94eROL9liRvdL1vQgNldfmc9iT2zxeS
tu0NFH8m+Af9fo5MeZiY1jxRzE+Vy/bg6zkBSw/k7BkljjEFg4S698HULMX14zaP
Sw5++jrAYt2UPlLkhPdSawBhjsZjnHWqGzvpG/FYnLqKDoPmOEhx9EaRIr8j4qV6
/PIKoF123Byvbdyl9PRz9TazGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:13 2026 by rpki-client