Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
File:                     drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json)
Hash identifier:          nD6ZPvG7Js/3zJnDxU95roWRqEviY06WwvJ4acon5Zk=
Subject key identifier:   C1:07:69:39:C0:EF:E7:26:01:5E:7B:78:E1:CB:8A:17:B4:A4:B6:55
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Certificate issuer:       /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial:       0BB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
Manifest number:          0B98
Signing time:             Fri 12 Jun 2026 19:08:44 +0000
Manifest this update:     Fri 12 Jun 2026 19:08:43 +0000
Manifest next update:     Fri 19 Jun 2026 19:08:43 +0000
Files and hashes:         1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: zoxwgqdfYOj894gfI3DctYgMOP7L54WdDR2K/fXZFsw=)
                          2: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: nvrbL4K8UTuSHUzb0sameKGMaeUHHtqeYardPlMzhKY=)
                          3: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: bw6V3e8uxgz/w4mVGTTnR4lCFXMSeabuBZrROz8xFwc=)
                          4: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: NYJZvZPzyDgeHzpdsKVjfnf0vb6jVGfn+iXWogNI5w0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
                          rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
        Validity
            Not Before: Jun 12 19:08:43 2026 GMT
            Not After : Jun 19 19:08:43 2026 GMT
        Subject: CN=6a2c593c-1b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:a6:01:0f:70:08:8a:fd:c7:c5:4c:f4:57:
                    3e:ea:5b:c9:5d:56:c1:6b:8a:27:85:e9:ff:b5:8d:
                    87:f1:c2:e3:8b:57:7f:7a:35:b0:2f:0d:2a:b0:ce:
                    0c:d8:5d:9f:a4:cc:5a:50:75:87:41:94:a0:fc:ad:
                    14:1d:74:56:64:49:25:8b:95:12:29:4e:1e:75:1a:
                    f3:5c:32:6e:bb:c0:92:87:15:e0:4a:5a:b4:ff:43:
                    fc:05:69:38:a5:4b:07:ae:11:7c:25:91:59:09:0f:
                    c8:cc:9b:a4:87:cb:c6:61:45:c5:90:32:11:3f:d9:
                    9e:54:66:fe:b9:ab:7b:7c:0b:13:d1:d1:f4:e5:bd:
                    dc:f7:fc:b3:7d:ff:a9:22:e9:29:be:a0:b9:60:c7:
                    9f:92:c1:55:0f:e2:8a:fb:ea:c9:67:23:95:ef:f3:
                    e4:49:5a:36:ff:99:80:1b:14:35:a3:49:bd:b5:1d:
                    e0:a1:41:4a:a9:8a:dc:d6:32:c1:94:af:2c:cb:cd:
                    41:7c:ae:0a:fd:fb:f1:b9:98:47:b0:f2:9d:af:b2:
                    88:0b:63:b1:5f:9f:99:f8:8e:ec:6f:4f:0b:23:bd:
                    15:0c:99:7a:e9:97:ae:36:46:dc:d6:b8:62:b6:3a:
                    5a:b5:d0:cf:fc:a3:11:4f:87:62:57:38:0f:2d:2b:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:69:39:C0:EF:E7:26:01:5E:7B:78:E1:CB:8A:17:B4:A4:B6:55
            X509v3 Authority Key Identifier:
                keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f7:3a:89:dc:dd:36:f7:0e:f0:9e:8a:cd:37:e5:14:ba:d0:
         a4:a7:9a:92:ef:47:d1:5a:63:b7:a8:1e:de:5a:23:c0:dc:6e:
         fc:1f:bb:40:8d:3b:aa:a5:0a:38:1a:79:13:5b:33:2e:1e:6a:
         e0:de:26:61:a1:86:6b:28:23:5d:7d:f2:dd:6a:bb:a6:b9:2a:
         b4:b6:0f:df:4b:b3:8c:ad:23:1d:f5:84:0e:97:8e:9c:9f:ce:
         a3:ea:07:67:08:f5:7f:00:62:91:92:3f:65:c4:13:ea:25:a9:
         5f:59:5a:0a:d4:94:3e:ca:8d:c9:03:6f:3f:b6:dd:58:dc:a1:
         d6:13:51:e0:92:ee:4d:4a:c6:79:fb:61:e5:f5:05:a3:d7:fb:
         c0:82:b4:6f:35:20:25:ba:94:05:98:0e:af:ec:56:ba:51:cf:
         1d:64:b7:c1:49:b4:bb:0d:b5:79:e3:34:d2:8e:fe:af:f4:16:
         d7:46:ce:2c:0b:a4:4e:f1:3f:24:a5:c2:48:ce:e2:a8:48:f3:
         12:cf:51:5f:14:a6:57:e3:13:b3:b0:a4:89:53:de:00:74:dc:
         a6:70:cc:ee:90:8c:70:f2:86:0c:62:d8:7e:40:8f:2f:5a:66:
         be:b8:2a:46:58:4f:4a:25:dd:d7:2b:3b:05:b0:99:f8:90:0e:
         fc:03:0c:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5
NkRCQ0VGQjQwHhcNMjYwNjEyMTkwODQzWhcNMjYwNjE5MTkwODQzWjAYMRYwFAYD
VQQDEw02YTJjNTkzYy0xYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPymAQ9wCIr9x8VM9Fc+6lvJXVbBa4onhen/tY2H8cLji1d/ejWwLw0qsM4M
2F2fpMxaUHWHQZSg/K0UHXRWZEkli5USKU4edRrzXDJuu8CShxXgSlq0/0P8BWk4
pUsHrhF8JZFZCQ/IzJukh8vGYUXFkDIRP9meVGb+uat7fAsT0dH05b3c9/yzff+p
IukpvqC5YMefksFVD+KK++rJZyOV7/PkSVo2/5mAGxQ1o0m9tR3goUFKqYrc1jLB
lK8sy81BfK4K/fvxuZhHsPKdr7KIC2OxX5+Z+I7sb08LI70VDJl66ZeuNkbc1rhi
tjpatdDP/KMRT4diVzgPLStSSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEHaTnA
7+cmAV57eOHLihe0pLZVMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG
QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTZDQS83NDA5QjQ3QTRGQzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTlly
Ui1rLWlJVGVoUU9XMjg3N1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgvc6idzdNvcO8J6KzTflFLrQpKeaku9H0Vpjt6ge3lojwNxu/B+7QI07qqUK
OBp5E1szLh5q4N4mYaGGaygjXX3y3Wq7prkqtLYP30uzjK0jHfWEDpeOnJ/Oo+oH
Zwj1fwBikZI/ZcQT6iWpX1laCtSUPsqNyQNvP7bdWNyh1hNR4JLuTUrGefth5fUF
o9f7wIK0bzUgJbqUBZgOr+xWulHPHWS3wUm0uw21eeM00o7+r/QW10bOLAukTvE/
JKXCSM7iqEjzEs9RXxSmV+MTs7CkiVPeAHTcpnDM7pCMcPKGDGLYfkCPL1pmvrgq
RlhPSiXd1ys7BbCZ+JAO/AMMZA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:28 2026 by rpki-client