Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File:                     yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier:          decOmYKD5EkbXr/QGbQZYGsEcbzO4TkNDXmoXy2CFlI=
Subject key identifier:   6E:D7:81:C6:C3:B4:F6:2B:F8:D2:8D:1D:D3:18:25:EB:0A:C6:6E:D8
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer:       /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial:       0BED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number:          0BE4
Signing time:             Fri 12 Jun 2026 18:55:23 +0000
Manifest this update:     Fri 12 Jun 2026 18:55:22 +0000
Manifest next update:     Fri 19 Jun 2026 18:55:22 +0000
Files and hashes:         1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: EYksrsiWbKC+BEc4xdNQ66cY8ZnMAlOYQ947akwQQ0M=)
                          2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: nsk1UqBSMxXhAmerfIUuT9a9NoDkCJE2EAsvPLMgex8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
        Validity
            Not Before: Jun 12 18:55:22 2026 GMT
            Not After : Jun 19 18:55:22 2026 GMT
        Subject: CN=6a2c561a-3f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:f0:4f:97:66:a1:86:67:80:68:85:7d:9c:
                    30:09:52:ec:67:7c:5a:e0:52:be:36:86:5f:ab:df:
                    ea:39:3e:be:bd:5b:6e:de:82:11:d5:25:73:77:d4:
                    71:77:61:a0:24:1d:c9:8e:52:29:87:05:16:84:6e:
                    34:38:6e:b3:0a:e0:41:7c:92:26:0f:73:54:88:fd:
                    6e:e7:07:f6:d1:f3:3e:f6:35:f2:20:a1:ce:cf:12:
                    e1:8c:ef:8b:4b:23:82:cd:3b:1f:f4:9d:68:3f:86:
                    f3:67:5e:42:a7:f9:6a:85:e4:54:0e:e8:ce:eb:a6:
                    01:9d:23:db:12:fe:d5:7f:38:d2:16:ed:80:ee:dd:
                    fb:64:3f:ba:6f:41:c7:b2:e2:a6:72:32:2d:94:d2:
                    3a:8d:18:5b:44:80:12:4b:32:31:d1:f1:50:86:fd:
                    14:2c:8d:96:5a:8d:ae:c9:b9:af:8c:3e:2b:cf:8e:
                    9a:19:db:45:37:7c:04:07:f4:3a:04:21:71:2e:1a:
                    93:05:3c:c6:5f:2c:54:06:54:4f:d4:c4:37:e6:11:
                    3f:cf:48:70:c7:ed:a0:02:6a:37:7c:f9:cf:67:c3:
                    07:3d:31:2f:55:c6:02:27:9f:d2:2b:33:2c:d7:12:
                    01:ac:ba:c5:f3:a9:de:9d:c4:df:5f:0d:60:4b:d9:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D7:81:C6:C3:B4:F6:2B:F8:D2:8D:1D:D3:18:25:EB:0A:C6:6E:D8
            X509v3 Authority Key Identifier:
                keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:c2:4c:0d:8d:31:a2:70:e7:7a:28:78:08:4b:af:db:9d:
         70:a0:a4:d3:47:0a:ea:21:f7:8d:d4:9a:64:ba:cc:2b:ff:90:
         84:ad:ea:16:58:c6:c6:d2:8a:fb:7f:1b:4b:ab:4b:9d:0d:6d:
         fe:a0:44:20:7c:48:1e:af:89:c8:ca:e8:c2:de:35:8a:61:8d:
         76:da:c6:ac:27:bf:2c:ab:26:66:47:ce:10:fb:fe:2a:36:13:
         e8:22:54:06:95:46:34:32:37:a6:c9:61:ed:56:b8:5e:09:78:
         52:8c:58:6d:0a:ec:cf:99:1d:1e:74:ad:02:9c:7b:43:0f:4b:
         59:48:bd:b6:77:01:e3:28:6e:dd:9d:e6:37:5f:dc:d4:b7:cf:
         db:3a:b8:6b:93:a9:1b:40:2a:53:0f:fe:38:a9:61:87:a9:2d:
         c2:08:dd:35:c8:d3:a5:7a:e7:ea:7b:c4:56:79:05:14:5f:8e:
         36:9f:1f:ca:94:3c:26:5b:41:f1:78:28:b0:16:58:af:5c:3f:
         24:f2:e9:85:76:cd:d3:27:b6:ad:1f:6e:55:1b:87:99:89:cd:
         b9:48:37:f5:b5:6a:72:92:77:56:dd:b2:8f:fd:c4:4c:e6:7c:
         88:b1:94:2d:0e:6e:57:80:f0:80:9b:94:5d:fb:63:d3:71:07:
         1c:86:20:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1QkExMTAvBgNVBAUTKENBOENFRjVFMUQ4QzNEQTVBQzlCQUVFNUIxOTZFRjA2
NjA5QTM5NTkwHhcNMjYwNjEyMTg1NTIyWhcNMjYwNjE5MTg1NTIyWjAYMRYwFAYD
VQQDEw02YTJjNTYxYS0zZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvY7wT5dmoYZngGiFfZwwCVLsZ3xa4FK+NoZfq9/qOT6+vVtu3oIR1SVzd9Rx
d2GgJB3JjlIphwUWhG40OG6zCuBBfJImD3NUiP1u5wf20fM+9jXyIKHOzxLhjO+L
SyOCzTsf9J1oP4bzZ15Cp/lqheRUDujO66YBnSPbEv7VfzjSFu2A7t37ZD+6b0HH
suKmcjItlNI6jRhbRIASSzIx0fFQhv0ULI2WWo2uybmvjD4rz46aGdtFN3wEB/Q6
BCFxLhqTBTzGXyxUBlRP1MQ35hE/z0hwx+2gAmo3fPnPZ8MHPTEvVcYCJ5/SKzMs
1xIBrLrF86nencTfXw1gS9mnXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7XgcbD
tPYr+NKNHdMYJesKxm7YMB8GA1UdIwQYMBaAFMqM714djD2lrJuu5bGW7wZgmjlZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCQS85M0UyRkIwQzNE
QTMxMUVBQTREQzNBNTlDNEY5QUUwMi95b3p2WGgyTVBhV3NtNjdsc1pidkJtQ2FP
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvenZYaDJNUGFXc202N2xzWmJ2Qm1DYU9Way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjVCQS85M0UyRkIwQzNEQTMxMUVBQTREQzNBNTlDNEY5QUUwMi95b3p2WGgyTVBh
V3NtNjdsc1pidkJtQ2FPVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADJTCTA2NMaJw53ooeAhLr9udcKCk00cK6iH3jdSaZLrMK/+QhK3qFljGxtKK
+38bS6tLnQ1t/qBEIHxIHq+JyMrowt41imGNdtrGrCe/LKsmZkfOEPv+KjYT6CJU
BpVGNDI3pslh7Va4Xgl4UoxYbQrsz5kdHnStApx7Qw9LWUi9tncB4yhu3Z3mN1/c
1LfP2zq4a5OpG0AqUw/+OKlhh6ktwgjdNcjTpXrn6nvEVnkFFF+ONp8fypQ8JltB
8XgosBZYr1w/JPLphXbN0ye2rR9uVRuHmYnNuUg39bVqcpJ3Vt2yj/3ETOZ8iLGU
LQ5uV4DwgJuUXftj03EHHIYgMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:53:51 2026 by rpki-client