Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File:                     0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier:          w73PJxVg/szCRHT0u+vcatTPxjKJQVm4GR+1guk9z9w=
Subject key identifier:   D2:CC:B9:74:B4:F9:20:72:60:19:A7:8A:B7:68:48:F3:0E:10:AF:82
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer:       /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial:       0BFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number:          0BEF
Signing time:             Fri 12 Jun 2026 18:54:09 +0000
Manifest this update:     Fri 12 Jun 2026 18:54:09 +0000
Manifest next update:     Fri 19 Jun 2026 18:54:09 +0000
Files and hashes:         1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: XRrC8qwUcO3DhkEwJ8Ba9DQrAlJuKK1od1HALf9AC44=)
                          2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: XKDSZPzMqa5QorcvgY8yeybuV/ov43f+onvjmQy64ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
                          rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
        Validity
            Not Before: Jun 12 18:54:09 2026 GMT
            Not After : Jun 19 18:54:09 2026 GMT
        Subject: CN=6a2c55d1-cbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:fc:3a:f1:30:e0:b2:61:d2:71:4c:dd:fd:
                    22:4f:af:3e:2e:db:1e:21:9d:1a:90:f4:be:6a:c2:
                    46:79:b3:6b:ce:29:ff:d0:f7:0d:11:fc:2c:b7:cf:
                    ea:ce:a4:f7:3e:ce:2a:43:61:f7:d4:64:d2:25:ef:
                    7b:e0:11:f9:5e:59:d0:cb:02:c5:c5:61:82:db:a2:
                    0c:73:cc:3c:cb:d7:07:f0:da:7b:e3:2f:97:5e:98:
                    be:1b:ee:d7:43:c7:6f:4b:17:da:04:68:fc:8d:a1:
                    f8:6c:13:2a:94:b2:a6:7c:89:df:b7:32:80:48:32:
                    6a:8f:f3:79:28:ef:f2:80:ae:55:56:c1:51:24:b3:
                    c3:5d:9d:ed:9f:59:71:b1:e0:db:4a:21:22:d8:2d:
                    b4:09:3c:dd:13:c2:32:37:92:e4:9c:e3:66:ad:97:
                    51:25:c3:62:0f:49:70:36:4b:41:bb:ca:03:17:cc:
                    38:5c:01:6a:46:e7:8c:d1:df:c6:9b:eb:55:45:41:
                    72:86:0b:30:1f:af:7f:cd:ab:29:c9:23:ea:6e:70:
                    46:6e:e2:36:d0:ae:01:e7:c4:ca:17:57:ad:02:60:
                    99:4a:b8:57:6c:16:1c:ed:7b:3f:a9:5c:74:08:f8:
                    7a:78:19:74:0c:e9:b4:c0:5f:2c:de:2c:b2:32:b0:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:B9:74:B4:F9:20:72:60:19:A7:8A:B7:68:48:F3:0E:10:AF:82
            X509v3 Authority Key Identifier:
                keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:52:c5:69:d7:91:d1:62:24:b7:8a:42:53:cb:ec:39:36:49:
         82:65:41:c6:b8:c8:7e:8a:4b:9f:88:da:41:81:ae:69:dc:c0:
         07:e0:ba:9b:ef:12:f2:48:43:8f:29:63:11:c8:b9:b2:60:a0:
         30:13:5d:d8:4e:eb:5b:71:ca:43:c9:75:9c:08:60:d1:4a:fa:
         58:c9:11:3e:64:52:51:58:07:d8:9a:28:d6:aa:ed:56:c3:fb:
         7d:0d:6c:02:56:a3:9d:fb:a0:b0:89:63:f6:fc:a3:d3:4c:d7:
         a1:bc:eb:97:6d:3b:05:b3:7b:26:71:ad:87:54:8b:47:98:45:
         24:f8:20:4b:e4:bc:2a:16:81:b0:e7:97:fa:27:82:67:9b:64:
         d0:22:f0:4b:63:9e:29:51:c9:9a:b2:d5:22:f7:c2:46:95:3e:
         8d:4a:2d:f6:db:1c:65:0f:38:98:56:39:f2:11:01:45:d6:8d:
         06:47:40:20:53:cc:83:61:96:64:09:ae:2e:15:ec:bc:bd:f1:
         34:34:27:d7:a9:5a:c6:80:5a:2d:89:6f:27:52:55:3c:1b:7f:
         ad:77:35:ec:87:e3:39:4b:f2:8b:6e:ae:60:00:30:cf:38:88:
         f6:4c:15:06:bf:2a:e8:b9:dc:a1:1b:ea:7a:78:10:74:d3:cd:
         ec:c8:a2:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz
MzQ4NzNEQUQwHhcNMjYwNjEyMTg1NDA5WhcNMjYwNjE5MTg1NDA5WjAYMRYwFAYD
VQQDEw02YTJjNTVkMS1jYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Mr8OvEw4LJh0nFM3f0iT68+LtseIZ0akPS+asJGebNrzin/0PcNEfwst8/q
zqT3Ps4qQ2H31GTSJe974BH5XlnQywLFxWGC26IMc8w8y9cH8Np74y+XXpi+G+7X
Q8dvSxfaBGj8jaH4bBMqlLKmfInftzKASDJqj/N5KO/ygK5VVsFRJLPDXZ3tn1lx
seDbSiEi2C20CTzdE8IyN5LknONmrZdRJcNiD0lwNktBu8oDF8w4XAFqRueM0d/G
m+tVRUFyhgswH69/zaspySPqbnBGbuI20K4B58TKF1etAmCZSrhXbBYc7Xs/qVx0
CPh6eBl0DOm0wF8s3iyyMrDnowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLMuXS0
+SByYBmnirdoSPMOEK+CMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND
MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy
WUJTM2hnR2FDYWd6U0hQYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEFLFadeR0WIkt4pCU8vsOTZJgmVBxrjIfopLn4jaQYGuadzAB+C6m+8S8khD
jyljEci5smCgMBNd2E7rW3HKQ8l1nAhg0Ur6WMkRPmRSUVgH2Joo1qrtVsP7fQ1s
AlajnfugsIlj9vyj00zXobzrl207BbN7JnGth1SLR5hFJPggS+S8KhaBsOeX+ieC
Z5tk0CLwS2OeKVHJmrLVIvfCRpU+jUot9tscZQ84mFY58hEBRdaNBkdAIFPMg2GW
ZAmuLhXsvL3xNDQn16laxoBaLYlvJ1JVPBt/rXc17IfjOUvyi26uYAAwzziI9kwV
Br8q6LncoRvqengQdNPN7Miifg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:59 2026 by rpki-client