Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File:                     JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier:          Ekh070qE5lYkOpBe/ZE2fDKc1hzh2OKxZ1owAvFc0HU=
Subject key identifier:   E8:7D:E3:27:64:EA:FC:78:5F:7C:9E:6C:2E:CD:61:FA:0E:84:76:F0
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number:          026E
Signing time:             Sat 13 Jun 2026 02:02:59 +0000
Manifest this update:     Sat 13 Jun 2026 02:02:59 +0000
Manifest next update:     Sat 20 Jun 2026 02:02:59 +0000
Files and hashes:         1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: gfsQ91+5p2ZuZtD0BYCjlBvbWHybqG1Ty22f4cmwv5E=)
                          2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: ThH+uRO/NK0/JqzhTteBatdGoRYQgyv/pPCLt6AvEMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Jun 13 02:02:59 2026 GMT
            Not After : Jun 20 02:02:59 2026 GMT
        Subject: CN=6a2cba53-8fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:4e:a4:9e:e8:17:6b:5e:e4:c0:84:ec:08:
                    3a:4b:a6:81:77:79:87:19:5a:15:fb:ce:b5:7a:f7:
                    3b:c1:eb:0d:03:76:21:1c:e6:7f:62:f9:f5:f6:2b:
                    7f:ba:2b:f0:32:2d:30:5d:ae:eb:02:dd:96:99:ae:
                    e7:c3:2e:ec:b2:4b:07:c7:9e:c9:e6:a9:96:cf:c8:
                    08:c5:15:93:be:26:1a:ef:5d:63:16:1e:be:f0:7e:
                    3d:62:1e:8e:cd:c4:b4:41:0f:2d:30:ff:e9:9d:f6:
                    af:b8:98:6e:c2:e9:a6:aa:5d:fe:26:4b:2c:d7:ad:
                    4c:9e:71:32:05:fe:ea:ae:ad:68:4a:dd:7c:cd:13:
                    78:3f:7b:16:7c:7c:33:da:79:19:1c:c2:0f:cf:ae:
                    53:ba:48:f8:ba:c5:c6:89:a0:af:80:f6:c7:09:88:
                    22:94:4d:7e:82:3e:cd:4d:0c:67:03:9c:43:85:c7:
                    9b:0e:4e:39:11:b7:2d:63:a9:a0:0c:07:41:3f:76:
                    7a:65:16:fb:74:4a:02:3c:aa:be:f6:87:de:ca:df:
                    84:4f:be:07:fe:06:78:4c:be:e4:0c:30:2b:70:14:
                    ec:0c:6a:e5:d8:d4:20:25:13:31:39:92:a6:f4:71:
                    b9:d5:1a:ff:73:8d:2d:18:dc:e3:d6:57:02:69:8e:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7D:E3:27:64:EA:FC:78:5F:7C:9E:6C:2E:CD:61:FA:0E:84:76:F0
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ca:0f:df:a8:23:fe:19:de:e8:43:5c:45:91:a2:66:e4:21:
         75:99:c0:9c:44:18:8a:1f:69:0e:0b:da:91:97:7d:ea:d8:52:
         39:d9:c5:7c:15:29:d5:3d:81:d1:18:cf:f6:5c:e3:8e:f8:ed:
         e8:bd:11:a0:d8:df:ef:dc:59:78:69:43:aa:b1:92:26:ea:9b:
         03:d4:bd:e7:21:12:2a:9a:ce:70:22:9b:6c:f5:8c:2a:7c:47:
         25:b0:e1:52:6a:5e:93:9e:54:83:fe:d6:54:59:a3:47:a7:7e:
         d0:f0:14:41:fe:f7:96:39:37:54:28:70:bc:1c:25:bb:3b:30:
         35:bd:e2:7f:69:b0:52:64:bc:81:1f:5a:51:18:c4:12:fc:e4:
         8d:10:d0:1b:b0:26:28:87:be:bb:a5:40:47:b2:eb:73:6f:52:
         7e:b4:71:62:30:50:42:51:7c:46:06:d9:f6:36:e7:73:cb:e2:
         07:2c:3d:34:1f:aa:6a:8c:0b:aa:d2:e5:3e:83:be:4d:6a:f1:
         1d:e2:bc:1c:95:35:b0:84:0b:4c:d8:c3:e0:73:2c:d3:85:52:
         42:06:07:b7:88:68:c3:f1:66:d8:92:86:e2:f6:4f:cf:6c:2b:
         ea:aa:be:61:42:47:43:2e:0d:0c:1c:bb:02:28:6a:ba:b9:c0:
         e7:7e:8b:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4
REFBRkRDREUwHhcNMjYwNjEzMDIwMjU5WhcNMjYwNjIwMDIwMjU5WjAYMRYwFAYD
VQQDEw02YTJjYmE1My04ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2AhOpJ7oF2te5MCE7Ag6S6aBd3mHGVoV+861evc7wesNA3YhHOZ/Yvn19it/
uivwMi0wXa7rAt2Wma7nwy7ssksHx57J5qmWz8gIxRWTviYa711jFh6+8H49Yh6O
zcS0QQ8tMP/pnfavuJhuwummql3+Jkss161MnnEyBf7qrq1oSt18zRN4P3sWfHwz
2nkZHMIPz65Tukj4usXGiaCvgPbHCYgilE1+gj7NTQxnA5xDhcebDk45EbctY6mg
DAdBP3Z6ZRb7dEoCPKq+9ofeyt+ET74H/gZ4TL7kDDArcBTsDGrl2NQgJRMxOZKm
9HG51Rr/c40tGNzj1lcCaY6HiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOh94ydk
6vx4X3yebC7NYfoOhHbwMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE
RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS
eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOMoP36gj/hne6ENcRZGiZuQhdZnAnEQYih9pDgvakZd96thSOdnFfBUp1T2B
0RjP9lzjjvjt6L0RoNjf79xZeGlDqrGSJuqbA9S95yESKprOcCKbbPWMKnxHJbDh
Umpek55Ug/7WVFmjR6d+0PAUQf73ljk3VChwvBwluzswNb3if2mwUmS8gR9aURjE
EvzkjRDQG7AmKIe+u6VAR7Lrc29SfrRxYjBQQlF8RgbZ9jbnc8viByw9NB+qaowL
qtLlPoO+TWrxHeK8HJU1sIQLTNjD4HMs04VSQgYHt4how/Fm2JKG4vZPz2wr6qq+
YUJHQy4NDBy7AihqurnA536LHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:16 2026 by rpki-client