Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
File:                     NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json)
Hash identifier:          zTpmHqlgD6F1GYZ2cKVBXixv4zMB8Jik1Qnf4+qMJNc=
Subject key identifier:   16:31:CD:AE:85:F7:94:DC:DE:4D:CE:96:2D:D8:E8:C1:A6:FC:5B:D3
Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28
Certificate issuer:       /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228
Certificate serial:       04C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
Manifest number:          04BB
Signing time:             Fri 12 Jun 2026 23:54:15 +0000
Manifest this update:     Fri 12 Jun 2026 23:54:15 +0000
Manifest next update:     Fri 19 Jun 2026 23:54:15 +0000
Files and hashes:         1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: DfgBDpbdN1R+zuqJvjI1CuFG+YjSVfqF40VOX4eLkkk=)
                          2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl
                          rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228
        Validity
            Not Before: Jun 12 23:54:15 2026 GMT
            Not After : Jun 19 23:54:15 2026 GMT
        Subject: CN=6a2c9c27-cd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:b4:0c:1f:41:d5:f2:77:fd:d0:55:56:63:
                    bf:af:1f:55:8f:a7:fb:49:90:e1:94:cb:0d:9e:07:
                    aa:42:a8:05:ad:d3:8f:4b:72:0c:55:f0:d6:f0:75:
                    eb:17:5f:c6:76:3d:2e:7c:b9:19:07:fc:29:a8:4a:
                    b9:6e:6b:a8:9f:61:8e:53:85:15:b7:e5:56:5b:f8:
                    ed:0d:72:78:4c:4b:d5:57:e4:93:37:90:d1:cb:8c:
                    56:7a:ef:56:ec:92:2c:73:c0:64:f7:ff:a8:dd:9a:
                    7b:6c:ee:66:d3:24:a4:23:2a:3d:da:55:88:0d:02:
                    90:4a:18:7c:94:16:63:73:3a:f5:61:3f:66:ca:08:
                    26:c5:bd:f0:51:74:bd:ef:68:03:9a:70:55:18:fa:
                    cf:70:24:39:be:91:26:89:27:e6:b9:56:5b:83:ab:
                    07:a0:75:fc:3a:27:91:64:a0:93:36:2b:7b:ff:1d:
                    f9:15:0a:94:03:1a:d6:04:90:c1:31:ba:44:d1:d6:
                    68:3d:44:e7:56:27:04:65:37:89:e0:70:e5:bf:20:
                    76:ec:c1:95:ec:08:f1:ed:6d:10:52:2c:fb:3f:1a:
                    4b:ce:4d:67:48:ba:e8:05:df:b0:8b:22:bd:c7:e4:
                    b6:92:cc:3a:6e:93:db:01:d3:74:53:7a:b9:76:a8:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:31:CD:AE:85:F7:94:DC:DE:4D:CE:96:2D:D8:E8:C1:A6:FC:5B:D3
            X509v3 Authority Key Identifier:
                keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:31:8b:c2:c1:98:8e:d7:c2:71:9d:36:37:18:ff:87:80:14:
         5c:23:50:f3:74:9e:b6:69:d4:0d:b7:3f:26:97:fe:ff:de:16:
         64:d1:bb:da:dc:e3:b5:f1:0a:1c:4d:94:23:8d:20:7e:ff:41:
         64:d4:92:0f:ed:65:95:17:8c:1b:ab:f0:3b:52:c9:af:94:52:
         58:e8:aa:35:af:ab:59:eb:c9:37:f9:e3:48:8e:bc:35:cf:af:
         41:c6:cf:61:4d:47:3c:01:71:8c:3b:20:61:ce:d7:92:8e:a1:
         81:20:bd:5c:f1:0a:00:08:1e:f7:c0:0f:68:af:34:9c:05:ae:
         74:d2:21:24:6e:5c:a4:a0:66:54:fc:f3:b5:9b:f4:9d:86:cb:
         be:5a:74:8e:3d:a6:09:fd:dd:31:2e:eb:3c:e3:f3:0d:8b:fd:
         e1:36:c0:85:5e:be:01:bd:19:7d:c2:09:51:38:3b:92:7c:e9:
         f8:37:80:a2:58:1a:16:34:0c:a7:fb:0c:12:27:5a:10:41:08:
         91:a0:7b:d6:07:d1:21:73:f4:71:05:0a:83:9b:20:69:07:20:
         5a:9a:c6:fd:1f:ed:1c:7e:f7:8a:9b:29:a8:cc:b2:04:ec:1a:
         8a:2f:22:6b:fc:fb:6e:9c:7c:82:96:15:1d:fe:ca:5e:58:2e:
         f9:c6:be:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3
RERDMkIyMjgwHhcNMjYwNjEyMjM1NDE1WhcNMjYwNjE5MjM1NDE1WjAYMRYwFAYD
VQQDEw02YTJjOWMyNy1jZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyd20DB9B1fJ3/dBVVmO/rx9Vj6f7SZDhlMsNngeqQqgFrdOPS3IMVfDW8HXr
F1/Gdj0ufLkZB/wpqEq5bmuon2GOU4UVt+VWW/jtDXJ4TEvVV+STN5DRy4xWeu9W
7JIsc8Bk9/+o3Zp7bO5m0ySkIyo92lWIDQKQShh8lBZjczr1YT9myggmxb3wUXS9
72gDmnBVGPrPcCQ5vpEmiSfmuVZbg6sHoHX8OieRZKCTNit7/x35FQqUAxrWBJDB
MbpE0dZoPUTnVicEZTeJ4HDlvyB27MGV7Ajx7W0QUiz7PxpLzk1nSLroBd+wiyK9
x+S2ksw6bpPbAdN0U3q5dqgIvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYxza6F
95Tc3k3Oli3Y6MGm/FvTMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4
NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0
M0dVelNFemVqSUY5M0NzaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACzGLwsGYjtfCcZ02Nxj/h4AUXCNQ83SetmnUDbc/Jpf+/94WZNG72tzjtfEK
HE2UI40gfv9BZNSSD+1llReMG6vwO1LJr5RSWOiqNa+rWevJN/njSI68Nc+vQcbP
YU1HPAFxjDsgYc7Xko6hgSC9XPEKAAge98APaK80nAWudNIhJG5cpKBmVPzztZv0
nYbLvlp0jj2mCf3dMS7rPOPzDYv94TbAhV6+Ab0ZfcIJUTg7knzp+DeAolgaFjQM
p/sMEidaEEEIkaB71gfRIXP0cQUKg5sgaQcgWprG/R/tHH73ipspqMyyBOwaii8i
a/z7bpx8gpYVHf7KXlgu+ca+ow==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:59 2026 by rpki-client