Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
File:                     R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json)
Hash identifier:          cI5oGjfemMffsZ3RwuErrdLiFCZryijhCzqGZoaLYJg=
Subject key identifier:   A7:5F:B0:20:66:27:E3:E3:B6:AA:ED:63:1A:DA:03:B7:F7:55:43:83
Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
Certificate issuer:       /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Certificate serial:       1242
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
Manifest number:          1235
Signing time:             Fri 12 Jun 2026 14:46:00 +0000
Manifest this update:     Fri 12 Jun 2026 14:46:00 +0000
Manifest next update:     Fri 19 Jun 2026 14:46:00 +0000
Files and hashes:         1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: 9tnYulvOH9WGXBC/9X0ZRv7hKtpCpTJzwsHDlnY94hI=)
                          2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: FFjxfnMou/98tB5BNVIfzefmsUkfNyGwBbqp5Be3Rjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4674 (0x1242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
        Validity
            Not Before: Jun 12 14:46:00 2026 GMT
            Not After : Jun 19 14:46:00 2026 GMT
        Subject: CN=6a2c1ba8-1031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:c0:07:8e:52:da:54:9c:8c:dd:21:34:be:
                    d7:29:0c:c2:ce:0a:09:57:05:6d:1f:7d:7d:81:77:
                    25:b2:9a:6d:99:56:b0:a9:55:6e:7c:0d:ec:33:e4:
                    54:7f:67:1d:25:e2:c4:ba:00:96:38:6f:6f:1f:57:
                    e9:0d:00:e4:c7:72:be:4d:bc:74:4c:15:01:6a:af:
                    2a:5e:d5:6a:9e:b4:23:7b:8f:0e:27:65:c8:4c:f4:
                    d8:04:17:3e:d5:84:7b:98:e3:c3:b8:e6:c8:3d:49:
                    1b:be:1a:5a:c0:8c:06:b4:33:a0:cd:d3:dd:98:db:
                    2d:aa:2f:37:1e:7d:79:dc:00:fb:38:38:6b:50:93:
                    51:09:e2:98:69:6c:27:cf:0c:7e:d3:59:7b:d5:9a:
                    e6:19:df:49:9d:a9:c1:a9:c0:6f:bb:98:5f:96:a8:
                    6c:58:58:dd:92:25:3b:5b:71:e1:cb:b3:bc:18:bc:
                    a0:72:8e:58:bc:3f:a4:22:47:d4:cd:c8:77:87:bf:
                    55:b5:a4:dd:12:4c:6d:79:0d:9b:54:13:ff:c9:87:
                    80:04:42:b8:c6:3a:9a:3a:ac:b1:84:76:5f:30:19:
                    b8:49:2f:88:2e:99:d5:f8:33:4e:66:95:6e:47:69:
                    fe:1d:a6:8d:4d:89:fa:80:29:13:ac:a2:a1:9c:78:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:B0:20:66:27:E3:E3:B6:AA:ED:63:1A:DA:03:B7:F7:55:43:83
            X509v3 Authority Key Identifier:
                keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:44:0e:c9:80:fd:1f:99:cf:ee:bf:ac:48:76:da:db:9d:2b:
         e8:20:78:62:4e:af:01:aa:74:b3:21:e1:e0:df:eb:1e:d4:8c:
         54:1e:84:6c:04:e5:ca:7b:f6:3f:98:22:31:ba:f2:d9:f2:8b:
         ff:eb:26:af:ba:30:ff:d5:29:83:47:9b:b5:38:65:03:58:89:
         56:a0:3b:1c:fb:df:90:3f:a6:c7:bf:e1:9a:5b:5e:ea:ba:87:
         8b:3b:32:85:b3:df:33:6c:be:0f:d8:be:f7:19:95:15:46:73:
         41:71:74:d1:61:3a:a6:52:ef:c7:84:01:da:6c:2e:ef:f3:37:
         00:8e:6d:eb:6c:76:b6:e1:df:a1:84:ac:b4:92:1e:f1:64:ac:
         9e:31:99:ad:57:3d:73:49:71:77:36:24:e9:df:46:65:96:4f:
         dc:b9:1e:52:dd:af:ac:8c:67:18:ad:35:c6:61:ea:c9:fc:29:
         6d:b0:51:34:09:22:43:88:dd:44:3e:74:5f:0d:23:08:c8:7e:
         15:cc:53:ea:35:cc:c0:12:08:59:16:a5:67:7f:10:7f:4f:d1:
         7e:8f:ce:a6:d0:25:9a:4c:48:7f:37:46:5d:e1:af:1b:8a:1c:
         bf:22:cf:95:59:fe:a8:74:40:1e:75:f0:69:ba:1f:16:4e:aa:
         74:fa:5d:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx
OTRBQ0ZBNTgwHhcNMjYwNjEyMTQ0NjAwWhcNMjYwNjE5MTQ0NjAwWjAYMRYwFAYD
VQQDEw02YTJjMWJhOC0xMDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Z/AB45S2lScjN0hNL7XKQzCzgoJVwVtH319gXclspptmVawqVVufA3sM+RU
f2cdJeLEugCWOG9vH1fpDQDkx3K+Tbx0TBUBaq8qXtVqnrQje48OJ2XITPTYBBc+
1YR7mOPDuObIPUkbvhpawIwGtDOgzdPdmNstqi83Hn153AD7ODhrUJNRCeKYaWwn
zwx+01l71ZrmGd9JnanBqcBvu5hflqhsWFjdkiU7W3Hhy7O8GLygco5YvD+kIkfU
zch3h79VtaTdEkxteQ2bVBP/yYeABEK4xjqaOqyxhHZfMBm4SS+ILpnV+DNOZpVu
R2n+HaaNTYn6gCkTrKKhnHh0BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdfsCBm
J+PjtqrtYxraA7f3VUODMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0
MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT
Qk9PdHd0N05iU29aU3MtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASUQOyYD9H5nP7r+sSHba250r6CB4Yk6vAap0syHh4N/rHtSMVB6EbATlynv2
P5giMbry2fKL/+smr7ow/9Upg0ebtThlA1iJVqA7HPvfkD+mx7/hmlte6rqHizsy
hbPfM2y+D9i+9xmVFUZzQXF00WE6plLvx4QB2mwu7/M3AI5t62x2tuHfoYSstJIe
8WSsnjGZrVc9c0lxdzYk6d9GZZZP3LkeUt2vrIxnGK01xmHqyfwpbbBRNAkiQ4jd
RD50Xw0jCMh+FcxT6jXMwBIIWRalZ38Qf0/Rfo/OptAlmkxIfzdGXeGvG4ocvyLP
lVn+qHRAHnXwabofFk6qdPpd7g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:24 2026 by rpki-client