Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File:                     pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier:          JK9fPFSY/Se5VYcLTxl+RmFTcQl0JOtA1TaFYvXupaM=
Subject key identifier:   EA:1B:4E:50:13:51:17:05:6D:63:6A:2A:BD:F0:83:40:FE:A2:6A:C5
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer:       /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number:          0126
Signing time:             Fri 12 Jun 2026 18:59:47 +0000
Manifest this update:     Fri 12 Jun 2026 18:59:46 +0000
Manifest next update:     Fri 19 Jun 2026 18:59:46 +0000
Files and hashes:         1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: krQVcXZomGRVDXTWWsaQ2zqvfIrTTgux6FZ8x+fE5YU=)
                          2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: XIBVLN0QTNRfgKTP2te+4QcwWNVAHO7ezlqwT3o7bi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
                          rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
        Validity
            Not Before: Jun 12 18:59:46 2026 GMT
            Not After : Jun 19 18:59:46 2026 GMT
        Subject: CN=6a2c5723-cb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:a9:d5:ce:f0:27:15:e5:b0:6e:5b:15:8e:
                    8f:b5:c7:63:9d:55:52:a2:5d:b4:6f:fa:dc:41:f0:
                    99:d6:49:49:6a:19:c1:a4:40:a3:96:a2:e4:22:74:
                    9c:11:db:1a:c6:97:67:31:35:fb:5e:e3:55:f1:40:
                    a8:6d:c6:ca:31:ac:8c:c2:0d:36:16:fc:c2:ad:2e:
                    e7:f1:57:89:39:3a:9d:29:94:f9:b2:3f:55:6a:98:
                    2b:ed:10:14:41:b0:02:8a:d5:df:6d:75:11:01:b8:
                    d2:25:44:24:a1:c8:30:78:3e:36:a5:89:20:34:62:
                    84:a9:a3:09:71:39:5d:f6:ab:ba:fc:81:a6:48:d4:
                    10:53:6d:ca:45:06:b9:bb:f5:47:eb:bb:56:a6:18:
                    ee:70:84:2d:5a:24:d4:bf:43:fe:9e:32:8b:e9:e9:
                    6a:95:17:b4:ce:e8:07:48:bd:51:de:dc:44:24:e2:
                    01:c8:6f:c0:db:3e:7d:bc:59:f4:44:bf:77:fb:0a:
                    90:a8:6b:95:68:69:5a:f4:7c:ec:c5:a6:20:dc:ec:
                    a3:b5:e7:66:71:21:8b:8a:3c:e6:bf:13:d2:38:7e:
                    ae:4a:d5:f0:ff:6e:cc:2d:bb:7b:31:fc:69:83:a7:
                    59:65:5b:3d:9b:5a:dd:03:03:e5:65:d4:0f:6d:4b:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:4E:50:13:51:17:05:6D:63:6A:2A:BD:F0:83:40:FE:A2:6A:C5
            X509v3 Authority Key Identifier:
                keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:ff:b1:a9:28:cd:4c:6f:d1:f3:37:1a:9b:e3:64:66:5d:
         36:ba:14:3b:19:e1:85:a0:e4:f6:8d:2d:fa:8b:34:0e:ef:d2:
         1b:26:d9:a3:9a:62:e2:e5:be:cb:d3:93:96:0f:0a:5b:b5:2e:
         cf:8e:d0:e1:a2:51:5d:53:ed:77:2d:ea:c7:60:ec:5d:4e:96:
         09:e2:af:20:76:36:05:13:4c:ca:ed:9e:d7:8c:22:ff:61:d3:
         b1:16:3b:07:8d:ac:98:89:99:c7:0c:a8:1b:26:4b:ff:f4:41:
         44:77:b5:c8:90:0d:66:2b:09:63:74:47:d9:df:36:23:d3:d4:
         8d:23:34:cb:7f:aa:3b:75:84:4d:de:0d:52:9f:9d:80:d7:8d:
         14:d3:73:80:7f:e4:92:78:50:cf:70:6f:bf:ed:57:b1:9c:ec:
         e1:34:72:70:f6:20:04:6d:af:c1:7b:58:27:93:06:29:0b:78:
         98:40:b0:89:cc:6e:98:3c:ea:bc:b2:65:cc:5f:24:6a:7b:7e:
         c2:a0:84:c3:fd:7c:2f:da:2d:38:a4:54:51:ca:92:97:11:00:
         e3:a5:85:f6:b6:e5:db:64:2b:20:85:74:dd:60:77:26:6c:be:
         ff:e5:4a:c9:e9:9d:df:6e:b7:bb:9c:1a:4c:d0:f0:d4:c7:22:
         b0:60:28:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5
OUQyQzcyN0MwHhcNMjYwNjEyMTg1OTQ2WhcNMjYwNjE5MTg1OTQ2WjAYMRYwFAYD
VQQDEw02YTJjNTcyMy1jYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8up1c7wJxXlsG5bFY6PtcdjnVVSol20b/rcQfCZ1klJahnBpECjlqLkInSc
EdsaxpdnMTX7XuNV8UCobcbKMayMwg02FvzCrS7n8VeJOTqdKZT5sj9Vapgr7RAU
QbACitXfbXURAbjSJUQkocgweD42pYkgNGKEqaMJcTld9qu6/IGmSNQQU23KRQa5
u/VH67tWphjucIQtWiTUv0P+njKL6elqlRe0zugHSL1R3txEJOIByG/A2z59vFn0
RL93+wqQqGuVaGla9HzsxaYg3OyjtedmcSGLijzmvxPSOH6uStXw/27MLbt7Mfxp
g6dZZVs9m1rdAwPlZdQPbUuo2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOobTlAT
URcFbWNqKr3wg0D+omrFMB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE
QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM
MnVSSkd3LWd6WENaMHNjbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbrf/sakozUxv0fM3GpvjZGZdNroUOxnhhaDk9o0t+os0Du/SGybZo5pi4uW+
y9OTlg8KW7Uuz47Q4aJRXVPtdy3qx2DsXU6WCeKvIHY2BRNMyu2e14wi/2HTsRY7
B42smImZxwyoGyZL//RBRHe1yJANZisJY3RH2d82I9PUjSM0y3+qO3WETd4NUp+d
gNeNFNNzgH/kknhQz3Bvv+1XsZzs4TRycPYgBG2vwXtYJ5MGKQt4mECwicxumDzq
vLJlzF8kant+wqCEw/18L9otOKRUUcqSlxEA46WF9rbl22QrIIV03WB3Jmy+/+VK
yemd3263u5waTNDw1McisGAo6A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:29 2026 by rpki-client