Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          jcsDyDTyP/9+I2WtCHkRMkRtqk2da5CVcajVbYIA0yU=
Subject key identifier:   1E:1F:AF:E8:C9:66:10:C7:62:D6:B7:FD:F6:9F:90:CD:AE:49:50:E9
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       09BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          0999
Signing time:             Fri 12 Jun 2026 20:03:39 +0000
Manifest this update:     Fri 12 Jun 2026 20:03:38 +0000
Manifest next update:     Fri 19 Jun 2026 20:03:38 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: fjyecOKxkHr9RhqGYadQhwbu6cAMiBZwCBapVjePDtE=)
                          2: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=)
                          3: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=)
                          4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491 (0x9bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Jun 12 20:03:38 2026 GMT
            Not After : Jun 19 20:03:38 2026 GMT
        Subject: CN=6a2c661a-da6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:b2:f2:ef:9a:f2:e1:4c:23:30:b4:bb:e4:
                    8d:73:ac:b1:c6:85:e6:e0:ab:d3:6e:42:d4:69:f8:
                    f4:5b:14:13:ac:d0:4e:f4:7a:06:9e:a4:5b:21:9a:
                    a1:ba:bd:f8:d9:52:f3:6f:f3:34:34:ff:73:fb:ae:
                    d6:24:f6:9f:06:48:54:32:80:bb:39:3f:ca:4e:d3:
                    f9:e2:6c:e8:eb:21:fd:01:8b:e8:d5:b7:66:a4:10:
                    fc:e8:5d:44:89:b7:ee:2d:46:be:fd:29:45:65:cc:
                    4c:42:48:e0:f0:5f:22:3d:85:b2:93:10:2d:4a:b2:
                    cf:aa:8b:79:71:d0:5c:79:e6:ac:ae:c8:a5:2b:06:
                    5e:17:66:c0:46:76:9b:74:62:c4:d1:df:42:8a:82:
                    13:ad:1e:d3:7e:68:76:41:bf:c6:24:12:f5:b8:03:
                    a5:1b:24:d5:5f:23:c6:f7:4b:c2:d5:b3:f1:87:69:
                    90:70:d7:6b:b6:16:ec:be:26:c5:6a:49:0c:54:3e:
                    64:08:d9:de:10:d0:e9:f8:17:66:15:54:91:c4:6e:
                    85:40:90:55:17:f7:62:ee:1c:7b:1f:2f:34:43:91:
                    f9:db:39:96:c5:b1:fb:ce:4d:88:4a:ae:56:d1:8b:
                    30:ff:92:5c:b9:a2:f6:12:b4:d7:42:c0:3a:ba:69:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:AF:E8:C9:66:10:C7:62:D6:B7:FD:F6:9F:90:CD:AE:49:50:E9
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:88:b7:b1:55:c7:29:96:70:bb:7e:22:57:b4:4f:c0:2d:81:
         71:0f:46:4e:59:d0:54:39:69:6a:bc:c2:50:47:24:ee:42:d0:
         fd:96:20:f1:67:e3:39:d9:76:72:52:13:9a:fe:b3:ae:96:56:
         ab:dc:0a:b9:14:d9:3e:f4:6f:5a:95:5c:33:69:14:31:56:9e:
         a5:0c:07:be:f2:04:46:f6:d7:db:2b:c3:f5:15:cb:69:2e:a8:
         4c:c6:29:d1:8d:5e:94:9b:be:b7:b3:14:5a:be:cd:c6:3b:4a:
         1b:30:90:d5:fb:f4:be:9e:d4:fb:78:9a:c5:0d:94:7c:8b:6e:
         33:1e:e9:c2:08:28:5a:cf:d2:4e:b7:b0:f2:3b:28:09:fe:11:
         91:0e:2f:c5:e7:08:b5:de:9b:f6:a5:ca:47:d6:f2:88:04:05:
         57:23:ea:22:ba:fe:9b:5c:c5:9c:16:5d:65:0a:6d:81:2c:77:
         34:db:66:8a:51:83:03:84:bd:c9:bf:97:81:85:e1:51:2b:1f:
         5d:fc:ef:10:d9:05:d8:3f:c2:99:0f:6a:62:dd:97:93:a8:e2:
         cf:81:23:dc:ad:5e:a4:ed:c0:24:54:18:dc:29:68:df:45:a1:
         8e:25:88:94:49:66:73:52:36:6d:54:7b:c0:d4:60:53:e6:0c:
         31:48:11:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB
RDBBRkMzMDUwHhcNMjYwNjEyMjAwMzM4WhcNMjYwNjE5MjAwMzM4WjAYMRYwFAYD
VQQDEw02YTJjNjYxYS1kYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz3qy8u+a8uFMIzC0u+SNc6yxxoXm4KvTbkLUafj0WxQTrNBO9HoGnqRbIZqh
ur342VLzb/M0NP9z+67WJPafBkhUMoC7OT/KTtP54mzo6yH9AYvo1bdmpBD86F1E
ibfuLUa+/SlFZcxMQkjg8F8iPYWykxAtSrLPqot5cdBceeasrsilKwZeF2bARnab
dGLE0d9CioITrR7Tfmh2Qb/GJBL1uAOlGyTVXyPG90vC1bPxh2mQcNdrthbsvibF
akkMVD5kCNneENDp+BdmFVSRxG6FQJBVF/di7hx7Hy80Q5H52zmWxbH7zk2ISq5W
0Ysw/5JcuaL2ErTXQsA6umkOcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4fr+jJ
ZhDHYta3/fafkM2uSVDpMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0
NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi
a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANIi3sVXHKZZwu34iV7RPwC2BcQ9GTlnQVDlparzCUEck7kLQ/ZYg8WfjOdl2
clITmv6zrpZWq9wKuRTZPvRvWpVcM2kUMVaepQwHvvIERvbX2yvD9RXLaS6oTMYp
0Y1elJu+t7MUWr7NxjtKGzCQ1fv0vp7U+3iaxQ2UfItuMx7pwggoWs/STrew8jso
Cf4RkQ4vxecItd6b9qXKR9byiAQFVyPqIrr+m1zFnBZdZQptgSx3NNtmilGDA4S9
yb+XgYXhUSsfXfzvENkF2D/CmQ9qYt2Xk6jiz4Ej3K1epO3AJFQY3Clo30WhjiWI
lElmc1I2bVR7wNRgU+YMMUgRnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:27:56 2026 by rpki-client