Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File:                     D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier:          /5pnbiVFBtMR7jTjKVXAutzK5cKcqPAukdL/xoD/65k=
Subject key identifier:   9C:BC:19:6F:B4:36:E7:A7:5E:10:BE:E9:8C:CF:33:BE:9B:97:97:3C
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer:       /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number:          0123
Signing time:             Sat 13 Jun 2026 05:46:32 +0000
Manifest this update:     Sat 13 Jun 2026 05:46:32 +0000
Manifest next update:     Sat 20 Jun 2026 05:46:32 +0000
Files and hashes:         1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: xo5qc9savTJZGQhQnbb45dJiClCa3vYAKvErJHUdQRQ=)
                          2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
                          rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
        Validity
            Not Before: Jun 13 05:46:32 2026 GMT
            Not After : Jun 20 05:46:32 2026 GMT
        Subject: CN=6a2ceeb8-ce42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:80:12:25:d9:7b:8f:29:dc:eb:74:6a:1a:
                    b2:77:40:ad:a4:03:46:dd:bc:ed:f7:a5:50:69:06:
                    66:0e:5b:b0:25:ee:01:13:b2:81:82:39:fa:c1:ee:
                    25:1c:09:b9:46:26:72:64:f5:2d:bb:52:68:63:6e:
                    f0:88:18:3f:04:0d:5c:07:80:c9:86:2c:52:57:ae:
                    0f:71:15:42:09:cd:8f:01:6a:6d:f6:48:54:41:b5:
                    f3:9d:b8:59:65:6e:82:4d:18:04:2f:1c:eb:61:17:
                    1a:27:68:6b:25:4d:c7:59:1b:b8:ad:ec:59:4a:97:
                    d0:e4:dc:3f:44:d6:49:ae:f9:19:dc:5a:ff:29:59:
                    ae:47:83:ff:61:e3:0b:35:e8:8b:d5:f2:0d:2e:e1:
                    bf:8b:bc:1b:c5:fd:23:f2:23:84:2f:ad:7e:3f:da:
                    c7:10:43:98:52:43:6a:90:31:e6:81:8d:1c:11:c4:
                    5f:d8:72:bf:ea:c3:ba:68:2c:7d:38:dc:47:f0:68:
                    04:ae:02:26:0c:00:0c:f3:e5:cd:e6:75:0f:31:94:
                    28:11:c2:50:cd:07:e7:b3:6d:af:1d:bf:eb:8a:37:
                    f3:6e:99:49:da:44:d4:47:c1:5b:ab:49:d6:35:56:
                    ca:45:34:50:2a:33:3d:85:37:5b:2d:aa:48:3a:62:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BC:19:6F:B4:36:E7:A7:5E:10:BE:E9:8C:CF:33:BE:9B:97:97:3C
            X509v3 Authority Key Identifier:
                keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:0e:cf:fa:ad:e2:7f:cd:23:54:88:0d:d9:d7:77:b4:9c:
         d6:73:8a:37:c7:30:1c:78:e7:c0:cc:b9:26:f8:0a:2e:7a:6a:
         e7:3e:88:f4:92:38:b5:e4:78:1a:99:25:d4:07:62:06:30:2f:
         97:85:1f:d4:e7:6e:e1:2b:4b:5e:da:7a:c0:ab:de:ce:94:f3:
         8e:e4:93:7b:d1:11:6c:88:09:aa:86:24:10:c9:ff:36:a6:3f:
         15:06:37:a4:55:30:6c:4e:f4:72:5d:34:eb:b7:8a:31:a7:f6:
         03:ac:df:81:f1:42:50:29:3a:d5:f3:1d:2d:73:08:1b:52:a9:
         09:f0:3e:a4:63:2c:d5:0c:5a:36:11:3e:b2:38:0f:2a:53:af:
         a3:0b:b6:36:e3:07:fe:e0:b7:03:26:59:9c:e9:93:6b:e7:85:
         da:ff:cb:63:d1:33:ec:55:02:eb:f4:37:e2:b2:11:91:28:07:
         38:d1:5e:03:2b:ba:c3:b3:e2:3d:1e:7e:09:a5:5b:92:7b:25:
         95:b7:41:35:de:40:f9:e7:c2:fb:09:1a:8f:9b:cf:b8:21:12:
         33:9c:6c:d9:12:78:60:b3:4f:e5:43:4c:8a:ec:22:14:6f:cc:
         4e:4a:e2:3a:b2:c9:43:8e:d1:f0:74:71:c9:54:97:4f:1b:a9:
         49:e9:8b:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC
NjcxRjg2RjMwHhcNMjYwNjEzMDU0NjMyWhcNMjYwNjIwMDU0NjMyWjAYMRYwFAYD
VQQDEw02YTJjZWViOC1jZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdKAEiXZe48p3Ot0ahqyd0CtpANG3bzt96VQaQZmDluwJe4BE7KBgjn6we4l
HAm5RiZyZPUtu1JoY27wiBg/BA1cB4DJhixSV64PcRVCCc2PAWpt9khUQbXznbhZ
ZW6CTRgELxzrYRcaJ2hrJU3HWRu4rexZSpfQ5Nw/RNZJrvkZ3Fr/KVmuR4P/YeML
NeiL1fINLuG/i7wbxf0j8iOEL61+P9rHEEOYUkNqkDHmgY0cEcRf2HK/6sO6aCx9
ONxH8GgErgImDAAM8+XN5nUPMZQoEcJQzQfns22vHb/rijfzbplJ2kTUR8Fbq0nW
NVbKRTRQKjM9hTdbLapIOmL8xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJy8GW+0
NuenXhC+6YzPM76bl5c8MB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG
MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTBCNC9FOTY0ODlBRUFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhB
dkpua1cxbDFUX2UyY2Zodk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE7AOz/qt4n/NI1SIDdnXd7Sc1nOKN8cwHHjnwMy5JvgKLnpq5z6I9JI4teR4
Gpkl1AdiBjAvl4Uf1Odu4StLXtp6wKvezpTzjuSTe9ERbIgJqoYkEMn/NqY/FQY3
pFUwbE70cl0067eKMaf2A6zfgfFCUCk61fMdLXMIG1KpCfA+pGMs1QxaNhE+sjgP
KlOvowu2NuMH/uC3AyZZnOmTa+eF2v/LY9Ez7FUC6/Q34rIRkSgHONFeAyu6w7Pi
PR5+CaVbknsllbdBNd5A+efC+wkaj5vPuCESM5xs2RJ4YLNP5UNMiuwiFG/MTkri
OrLJQ47R8HRxyVSXTxupSemLdg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:46 2026 by rpki-client