Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
File:                     dzzFL61HXymuNv14yBJ3Et_SFUI.mft (raw, json)
Hash identifier:          uzNDQqHfID286w6oXxQfDS0qgNeEeKu4OCCUsPuBjo8=
Subject key identifier:   F2:84:9F:46:54:6C:26:21:62:C0:78:27:9E:E8:72:8E:E8:24:48:5E
Authority key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Certificate issuer:       /CN=A9125864/serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
Manifest number:          52
Signing time:             Sat 13 Jun 2026 08:18:15 +0000
Manifest this update:     Sat 13 Jun 2026 08:18:14 +0000
Manifest next update:     Sat 20 Jun 2026 08:18:14 +0000
Files and hashes:         1: dzzFL61HXymuNv14yBJ3Et_SFUI.crl (hash: g9g4GaIUeQQ+e/1SH9nlwGsY6723q6GPAEhcJZp3NPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
        Validity
            Not Before: Jun 13 08:18:14 2026 GMT
            Not After : Jun 20 08:18:14 2026 GMT
        Subject: CN=6a2d1247-08c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:f2:09:54:0b:f8:06:bd:88:5c:35:05:0e:
                    fe:97:fa:05:c2:b7:43:8a:ec:a4:79:4b:d1:19:15:
                    42:7c:ba:f9:9f:4f:f1:aa:f0:3a:33:dd:ab:d8:10:
                    b9:3c:88:78:64:7f:4a:05:d2:02:44:45:8b:15:c2:
                    2e:16:df:7e:f3:1c:96:62:28:ac:b7:3d:75:3a:f9:
                    49:a3:20:25:43:81:d6:ca:83:ba:d8:f3:bd:a2:f8:
                    08:8d:29:12:61:64:09:13:50:6b:9f:7f:39:c6:a6:
                    2b:e6:9a:3f:ea:c3:df:90:e1:18:d3:71:82:67:0c:
                    de:82:51:6c:58:3a:ee:76:17:78:14:ab:f8:54:59:
                    d2:b6:a0:e2:8d:1a:4f:4a:cf:6a:20:ad:e2:98:98:
                    47:45:ed:54:75:88:3f:71:74:4d:08:78:a3:83:7f:
                    8a:a8:df:64:0d:fd:75:fc:6d:e6:1f:26:53:e4:f6:
                    bf:df:ce:f7:ce:fd:ae:c1:65:da:69:b2:e5:50:78:
                    b0:9e:55:ee:00:0c:54:92:1a:c1:b6:56:6b:9b:9a:
                    85:e8:f2:96:5c:b0:0a:4e:c5:8d:27:1b:75:f3:dd:
                    a3:ce:2c:fa:ae:87:af:d9:df:ae:1f:54:d8:d0:ba:
                    4f:7d:9b:25:d0:06:92:99:29:4b:55:c2:c9:dd:80:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:9F:46:54:6C:26:21:62:C0:78:27:9E:E8:72:8E:E8:24:48:5E
            X509v3 Authority Key Identifier:
                keyid:77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:89:29:be:71:62:36:57:7c:6f:a4:1f:b6:4e:9f:7a:1f:
         03:8e:94:25:c6:e2:f1:d7:71:85:ba:81:80:de:2b:8a:8f:d9:
         18:f5:fb:ee:d7:f9:3b:2a:e0:fe:ac:8e:6a:70:0c:03:68:d5:
         14:8c:61:fe:10:25:f0:26:4e:66:30:2d:0b:6f:da:a8:9c:4e:
         53:de:46:cb:82:04:a1:83:9d:35:16:1c:e1:76:5f:fa:1f:10:
         03:62:fc:ca:0c:7e:e7:d8:f0:e0:0f:9d:c5:92:92:28:7c:c5:
         61:f9:5b:bb:7a:2d:b4:e3:bf:1c:7d:9d:43:df:4d:21:6f:c4:
         e6:84:48:ab:62:c5:0e:58:9f:2d:75:42:ae:7f:60:bf:63:9f:
         19:d7:1f:eb:cd:17:4f:46:47:05:96:5d:16:8b:85:2a:24:f2:
         c3:24:a2:43:53:1a:0f:a6:9f:e1:24:52:9c:c5:11:06:41:2f:
         7d:d5:71:ed:15:62:90:31:35:8f:f1:4c:51:aa:86:f0:cc:c4:
         0a:1a:b5:e8:44:1c:37:a0:4f:8f:bd:1b:ac:84:6b:b3:ee:34:
         8c:7f:fb:a5:b0:65:2f:c3:c6:50:87:39:e6:d2:9d:10:96:6f:
         54:b9:49:70:85:11:ba:20:97:b8:09:88:b1:e0:ad:b2:31:3c:
         3d:30:1f:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTg2NDExMC8GA1UEBRMoNzczQ0M1MkZBRDQ3NUYyOUFFMzZGRDc4QzgxMjc3MTJE
RkQyMTU0MjAeFw0yNjA2MTMwODE4MTRaFw0yNjA2MjAwODE4MTRaMBgxFjAUBgNV
BAMTDTZhMmQxMjQ3LTA4YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq8fIJVAv4Br2IXDUFDv6X+gXCt0OK7KR5S9EZFUJ8uvmfT/Gq8Doz3avYELk8
iHhkf0oF0gJERYsVwi4W337zHJZiKKy3PXU6+UmjICVDgdbKg7rY872i+AiNKRJh
ZAkTUGuffznGpivmmj/qw9+Q4RjTcYJnDN6CUWxYOu52F3gUq/hUWdK2oOKNGk9K
z2ogreKYmEdF7VR1iD9xdE0IeKODf4qo32QN/XX8beYfJlPk9r/fzvfO/a7BZdpp
suVQeLCeVe4ADFSSGsG2VmubmoXo8pZcsApOxY0nG3Xz3aPOLPquh6/Z364fVNjQ
uk99myXQBpKZKUtVwsndgLNbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8oSfRlRs
JiFiwHgnnuhyjugkSF4wHwYDVR0jBBgwFoAUdzzFL61HXymuNv14yBJ3Et/SFUIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1ODY0LzEwMDAxNkZBRUQx
ODExRjA4RTFDMDYwMjQwNkY1NkJDL2R6ekZMNjFIWHltdU52MTR5QkozRXRfU0ZV
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZHp6Rkw2MUhYeW11TnYxNHlCSjNFdF9TRlVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1
ODY0LzEwMDAxNkZBRUQxODExRjA4RTFDMDYwMjQwNkY1NkJDL2R6ekZMNjFIWHlt
dU52MTR5QkozRXRfU0ZVSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHXokpvnFiNld8b6Qftk6feh8DjpQlxuLx13GFuoGA3iuKj9kY9fvu1/k7KuD+
rI5qcAwDaNUUjGH+ECXwJk5mMC0Lb9qonE5T3kbLggShg501Fhzhdl/6HxADYvzK
DH7n2PDgD53FkpIofMVh+Vu7ei20478cfZ1D300hb8TmhEirYsUOWJ8tdUKuf2C/
Y58Z1x/rzRdPRkcFll0Wi4UqJPLDJKJDUxoPpp/hJFKcxREGQS991XHtFWKQMTWP
8UxRqobwzMQKGrXoRBw3oE+PvRushGuz7jSMf/ulsGUvw8ZQhznm0p0Qlm9UuUlw
hRG6IJe4CYix4K2yMTw9MB+W
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:05 2026 by rpki-client