Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
File:                     8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json)
Hash identifier:          1Bs811FKWYKOlsdHv8qNpxeZNHLqJFJTS4IOQ0mO8B4=
Subject key identifier:   78:92:53:F1:9B:C5:BE:22:86:A4:84:E5:46:6B:BD:3C:9F:85:33:8C
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Certificate issuer:       /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
Manifest number:          0209
Signing time:             Sat 13 Jun 2026 03:05:58 +0000
Manifest this update:     Sat 13 Jun 2026 03:05:57 +0000
Manifest next update:     Sat 20 Jun 2026 03:05:57 +0000
Files and hashes:         1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: rT0mgyviyon68rf0hm+d5O0m4zUwrVzdusAoNch+/LU=)
                          2: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=)
                          3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
                          rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
        Validity
            Not Before: Jun 13 03:05:57 2026 GMT
            Not After : Jun 20 03:05:57 2026 GMT
        Subject: CN=6a2cc916-f7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1d:cf:ae:a0:d1:64:d4:f4:aa:10:70:7f:1c:
                    39:ce:11:d7:75:63:ed:74:e4:e6:81:ef:f3:a6:8d:
                    02:7a:10:6b:5e:f2:77:f9:ca:8b:5a:43:de:d1:b1:
                    85:6f:37:e8:7c:a8:50:7c:dc:9d:03:1e:48:80:fb:
                    3d:2f:51:8d:60:c2:9a:09:b1:7f:07:01:f5:3e:c2:
                    2f:d0:fd:68:e1:ab:fe:7a:c4:88:14:21:2e:a0:68:
                    af:ec:e1:0f:30:30:68:55:95:8c:9a:e0:61:a0:12:
                    cd:fb:32:7e:b1:d3:0e:43:03:7c:19:2f:eb:b1:3f:
                    5b:48:c8:1c:89:1c:7c:0c:b5:f2:8b:bc:fe:b1:02:
                    7a:a5:0c:1e:bb:ae:31:0a:8b:73:46:22:04:1f:2d:
                    9e:f1:65:7b:64:13:ed:51:03:5c:a9:f0:6f:68:24:
                    69:26:9a:60:66:01:9e:64:f8:f6:e2:e3:f6:81:fe:
                    4e:cc:82:6b:f0:05:2b:8d:ec:4b:db:e9:bc:d3:02:
                    0b:a5:a1:a2:bf:1a:36:db:7d:90:63:ba:9c:a5:d9:
                    77:ae:08:9d:ce:76:6d:24:03:0d:5f:08:c6:ed:cd:
                    76:33:80:60:bb:8e:35:00:b6:5f:57:b1:ef:31:31:
                    18:02:7c:20:15:d2:9d:ab:bd:cb:eb:87:19:64:ca:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:53:F1:9B:C5:BE:22:86:A4:84:E5:46:6B:BD:3C:9F:85:33:8C
            X509v3 Authority Key Identifier:
                keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:f1:bd:26:96:78:09:55:46:e6:67:17:af:d0:fc:f6:b1:
         b0:e7:4f:a9:6f:31:28:94:7e:11:bb:f4:3b:3a:5b:91:7d:6e:
         b1:e0:4f:11:e7:f9:28:01:29:96:8e:54:80:b4:6c:a2:2b:03:
         6f:a4:86:68:3b:42:3f:d4:cd:6c:cb:db:9d:aa:69:ce:36:c8:
         87:88:9e:e5:f4:c8:e2:b4:2e:b6:68:37:25:c8:e6:b4:d4:4c:
         aa:55:8c:de:91:79:1f:16:d6:bf:fd:13:05:c6:ff:e3:ea:f2:
         f0:64:bc:38:1d:f1:80:a2:38:91:c0:df:18:7f:af:d7:56:5d:
         b4:49:12:14:ab:f3:d3:f2:6d:35:28:af:5c:36:e1:28:fd:07:
         bc:9a:b4:a6:64:0f:d3:01:9e:8b:72:51:31:f5:30:a5:cd:ef:
         d5:a3:ca:90:70:99:a8:74:1d:66:04:af:73:39:c7:52:41:b4:
         93:3c:6b:ca:6e:e1:a8:73:b3:5b:77:19:e4:25:2f:5c:d0:fe:
         d6:1c:37:68:59:b5:33:95:22:69:5e:62:36:18:b9:c2:45:ec:
         e4:12:cb:12:77:68:e8:92:cf:bb:6e:9d:83:f6:e3:88:52:9e:
         01:af:5b:87:ad:b3:ae:f1:15:74:d0:72:73:d8:3f:7b:68:8d:
         e9:b3:c9:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE
OTMzQTEyN0QwHhcNMjYwNjEzMDMwNTU3WhcNMjYwNjIwMDMwNTU3WjAYMRYwFAYD
VQQDEw02YTJjYzkxNi1mN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4R3PrqDRZNT0qhBwfxw5zhHXdWPtdOTmge/zpo0CehBrXvJ3+cqLWkPe0bGF
bzfofKhQfNydAx5IgPs9L1GNYMKaCbF/BwH1PsIv0P1o4av+esSIFCEuoGiv7OEP
MDBoVZWMmuBhoBLN+zJ+sdMOQwN8GS/rsT9bSMgciRx8DLXyi7z+sQJ6pQweu64x
CotzRiIEHy2e8WV7ZBPtUQNcqfBvaCRpJppgZgGeZPj24uP2gf5OzIJr8AUrjexL
2+m80wILpaGivxo2232QY7qcpdl3rgidznZtJAMNXwjG7c12M4Bgu441ALZfV7Hv
MTEYAnwgFdKdq73L64cZZMqSUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiSU/Gb
xb4ihqSE5UZrvTyfhTOMMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy
RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF
bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N
S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHz7xvSaWeAlVRuZnF6/Q/PaxsOdPqW8xKJR+Ebv0OzpbkX1useBPEef5KAEp
lo5UgLRsoisDb6SGaDtCP9TNbMvbnappzjbIh4ie5fTI4rQutmg3JcjmtNRMqlWM
3pF5HxbWv/0TBcb/4+ry8GS8OB3xgKI4kcDfGH+v11ZdtEkSFKvz0/JtNSivXDbh
KP0HvJq0pmQP0wGei3JRMfUwpc3v1aPKkHCZqHQdZgSvcznHUkG0kzxrym7hqHOz
W3cZ5CUvXND+1hw3aFm1M5UiaV5iNhi5wkXs5BLLEndo6JLPu26dg/bjiFKeAa9b
h62zrvEVdNByc9g/e2iN6bPJ/g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:24 2026 by rpki-client