Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
File:                     RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json)
Hash identifier:          CZuliPo6sCNlyyh0nnO4YdHC9f8E8dBxnYoM33SqGYw=
Subject key identifier:   FF:DD:AD:39:E7:08:BE:65:3B:B2:86:DC:BE:2E:F6:81:90:68:8F:14
Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7
Certificate issuer:       /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
Certificate serial:       0B07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
Manifest number:          0AE2
Signing time:             Fri 12 Jun 2026 19:26:17 +0000
Manifest this update:     Fri 12 Jun 2026 19:26:17 +0000
Manifest next update:     Fri 19 Jun 2026 19:26:17 +0000
Files and hashes:         1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: 4n2NHnk6zFLQk5YctKPhvPIku1C+L58AINNKiqKCuXs=)
                          2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: uc2qcNB8l7xT1ZuFXX3eceO3rKMlz70tmK0IYsPapEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl
                          rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2823 (0xb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
        Validity
            Not Before: Jun 12 19:26:17 2026 GMT
            Not After : Jun 19 19:26:17 2026 GMT
        Subject: CN=6a2c5d59-76eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:78:a9:27:14:f1:54:e2:75:a9:40:77:84:
                    38:0b:95:24:bf:09:71:5c:b0:eb:ec:4a:92:8c:54:
                    04:56:e9:0c:27:22:7c:01:a0:7c:37:01:81:65:15:
                    65:41:f5:6f:2c:3a:25:d0:00:d1:61:b5:a6:da:fe:
                    63:01:fc:50:d7:c9:f2:4f:de:40:a9:25:64:b4:f8:
                    6d:6f:0a:d1:49:62:90:a4:88:43:1a:3a:e0:4f:af:
                    dc:bc:9d:16:f2:ed:41:da:86:af:fe:8b:c3:c2:1e:
                    db:15:d9:c8:05:05:a9:7b:e0:a1:a1:0a:af:42:fd:
                    6a:7e:ea:9c:7c:35:2a:2b:d8:4d:cd:ec:ce:35:0d:
                    5a:60:f3:44:b4:6b:a9:12:87:d5:43:f4:62:15:66:
                    13:1b:cc:c8:97:50:ce:4f:78:e9:1d:9a:60:52:29:
                    18:7a:1f:e1:40:77:36:87:be:fb:60:4f:24:f4:ac:
                    e6:48:a7:ab:44:f7:c1:5b:41:a1:e1:14:a6:b8:4e:
                    bb:4e:21:a6:39:33:b6:3c:79:65:49:ba:e7:82:5e:
                    3e:cc:d6:5f:37:18:ef:ea:f8:de:8e:df:bd:ec:cb:
                    18:27:57:81:eb:18:ce:6a:23:e8:f3:8d:70:0b:63:
                    69:03:5f:d6:77:2d:96:b2:02:fb:81:87:a6:64:b5:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:AD:39:E7:08:BE:65:3B:B2:86:DC:BE:2E:F6:81:90:68:8F:14
            X509v3 Authority Key Identifier:
                keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fd:96:f6:cc:9a:68:da:e1:47:40:76:85:7c:d8:29:02:b8:
         f0:09:55:2d:84:9c:43:dc:33:31:fc:43:07:64:20:da:16:5e:
         76:2b:9a:a2:d7:1d:5c:df:a0:68:57:ee:21:aa:8e:0f:eb:39:
         c0:c3:da:1b:88:15:8a:f0:a0:16:84:5b:83:3d:43:34:52:07:
         74:5d:4f:18:8a:da:c2:08:64:00:58:8b:43:ea:76:65:64:85:
         5a:c8:9a:e8:b1:a4:eb:70:67:79:ab:c9:d5:bf:0c:70:fb:90:
         41:1f:a2:9b:90:ea:bd:ed:3d:b9:17:55:da:ca:9d:2c:19:b5:
         20:57:8a:64:36:01:c5:9a:31:4b:6a:0e:92:7f:be:5e:50:d7:
         3a:84:23:8b:36:75:28:25:4e:6c:cc:1c:26:45:12:ae:8d:4e:
         a9:ce:5f:4b:2b:27:0e:d7:18:f7:db:6b:1c:c8:a7:fc:8e:7b:
         26:d8:65:d4:5c:6a:2d:31:72:e6:e5:c3:eb:22:c7:2b:da:3a:
         0f:d1:8c:43:97:77:0c:71:b6:82:72:7f:ae:93:22:33:17:71:
         50:ec:96:c8:91:f7:e1:7a:33:17:f4:e3:b3:29:22:74:6c:52:
         41:93:60:a7:fd:4e:16:e3:02:2f:74:41:c3:76:7e:f4:58:6d:
         65:30:11:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2
QzczMUZCQTcwHhcNMjYwNjEyMTkyNjE3WhcNMjYwNjE5MTkyNjE3WjAYMRYwFAYD
VQQDEw02YTJjNWQ1OS03NmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0kJ4qScU8VTidalAd4Q4C5UkvwlxXLDr7EqSjFQEVukMJyJ8AaB8NwGBZRVl
QfVvLDol0ADRYbWm2v5jAfxQ18nyT95AqSVktPhtbwrRSWKQpIhDGjrgT6/cvJ0W
8u1B2oav/ovDwh7bFdnIBQWpe+ChoQqvQv1qfuqcfDUqK9hNzezONQ1aYPNEtGup
EofVQ/RiFWYTG8zIl1DOT3jpHZpgUikYeh/hQHc2h777YE8k9KzmSKerRPfBW0Gh
4RSmuE67TiGmOTO2PHllSbrngl4+zNZfNxjv6vjejt+97MsYJ1eB6xjOaiPo841w
C2NpA1/Wdy2WsgL7gYemZLWMQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/drTnn
CL5lO7KG3L4u9oGQaI8UMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx
OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H
YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWv2W9syaaNrhR0B2hXzYKQK48AlVLYScQ9wzMfxDB2Qg2hZediuaotcdXN+g
aFfuIaqOD+s5wMPaG4gVivCgFoRbgz1DNFIHdF1PGIrawghkAFiLQ+p2ZWSFWsia
6LGk63BneavJ1b8McPuQQR+im5Dqve09uRdV2sqdLBm1IFeKZDYBxZoxS2oOkn++
XlDXOoQjizZ1KCVObMwcJkUSro1Oqc5fSysnDtcY99trHMin/I57Jthl1FxqLTFy
5uXD6yLHK9o6D9GMQ5d3DHG2gnJ/rpMiMxdxUOyWyJH34XozF/TjsykidGxSQZNg
p/1OFuMCL3RBw3Z+9FhtZTAR4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:48 2026 by rpki-client