Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File:                     nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier:          s4bZZaGHEOMTGbhrXacISZuGPOobbNeskYw/HhGices=
Subject key identifier:   0B:0C:9C:8D:0A:A5:AA:FB:B0:E9:6D:3F:AF:DD:43:0F:85:BE:2D:52
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       0814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number:          080A
Signing time:             Fri 12 Jun 2026 21:14:15 +0000
Manifest this update:     Fri 12 Jun 2026 21:14:14 +0000
Manifest next update:     Fri 19 Jun 2026 21:14:14 +0000
Files and hashes:         1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: xtkdc4f9F8us+mKStclPltSlNkho6jKnPA6XqlQa2ms=)
                          2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: pv+Z3nYrrzxoESGY4e/aJmMCDLaqcQjYTIDQwPuKCpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
        Validity
            Not Before: Jun 12 21:14:14 2026 GMT
            Not After : Jun 19 21:14:14 2026 GMT
        Subject: CN=6a2c76a7-2597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:f7:70:77:70:e6:12:df:7b:62:18:a0:47:
                    00:a1:9d:fc:77:99:33:e9:5b:a2:04:60:7a:e4:d0:
                    cb:58:43:46:56:ca:b5:00:84:86:61:1d:68:ac:9e:
                    12:31:a6:34:53:45:dc:c3:b1:8b:ac:5f:0f:ae:f6:
                    5a:0c:65:95:e2:b0:98:65:3e:64:b0:f9:24:26:8b:
                    36:fc:ea:a3:c4:92:71:5a:61:65:a5:4a:a5:fe:8a:
                    81:d3:63:d7:70:24:40:28:eb:66:c9:65:b6:21:9c:
                    7a:27:6a:49:9b:b6:ea:5d:60:5b:11:8e:47:95:01:
                    52:01:a8:35:fd:0d:52:5c:37:5c:83:6d:f8:47:da:
                    5d:e2:3d:25:1c:62:94:15:4e:46:d1:90:01:f4:b7:
                    e1:eb:1d:63:d7:ca:e4:a3:68:ae:14:0e:d7:3b:1d:
                    83:73:1c:be:54:69:30:a0:8c:09:1d:13:30:b6:95:
                    4c:5e:57:37:df:ab:89:03:e2:85:3e:fe:2f:b5:91:
                    df:13:b4:34:57:b5:5f:f6:a4:ba:bd:c1:05:4e:c5:
                    7e:44:2d:5c:3b:9d:e6:f4:f0:ee:72:22:9b:05:2e:
                    08:0e:11:71:e1:69:cc:c3:0b:2b:1f:4d:2e:fb:3a:
                    ed:b6:ce:31:5d:ba:72:be:cd:eb:02:9e:c3:dc:b6:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:9C:8D:0A:A5:AA:FB:B0:E9:6D:3F:AF:DD:43:0F:85:BE:2D:52
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:82:9a:d5:53:a5:a7:8a:6f:3a:bc:4c:7f:65:6c:f6:5e:17:
         f1:a3:9e:5c:d7:cd:51:4f:db:d5:f7:6f:7d:e5:5d:4e:3a:15:
         49:f9:b3:0f:a2:76:57:f4:ea:2b:60:69:45:2f:05:ce:6c:0a:
         17:05:10:a6:4e:86:67:3b:30:b8:e9:37:d4:04:75:f1:e5:d2:
         45:a4:d9:b0:cd:9e:8c:5e:06:38:aa:d0:a5:e6:23:ea:88:49:
         a4:5c:8f:ba:c1:49:f5:9d:c7:2e:c7:7d:9c:f8:75:97:6a:dd:
         f3:d3:03:95:47:39:e1:40:85:ab:0d:31:17:c8:09:84:e6:d8:
         aa:80:44:c0:e6:f8:4d:e8:2e:97:fe:1b:9f:73:da:14:89:94:
         72:fe:27:5c:fe:91:07:57:b1:ae:ff:6b:60:fd:34:fc:8d:cc:
         67:a2:90:c4:15:a0:ca:08:81:37:4b:4a:fb:7d:fd:a3:0b:58:
         94:b0:76:ac:ec:54:e5:d2:c0:f5:e5:04:7d:1c:42:21:31:c1:
         7e:e9:5f:62:b3:4e:cc:c6:cf:43:e8:c8:04:f0:e8:3a:68:a4:
         e8:4d:19:ae:42:7a:9a:f1:cd:9f:6f:06:2d:a7:55:19:6c:49:
         e2:4a:2e:98:73:40:24:d1:42:32:9f:1f:4d:90:f8:5a:cb:c8:
         47:3b:29:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQxN0I4RDQ4RURG
NkI1NzAxQ0YwHhcNMjYwNjEyMjExNDE0WhcNMjYwNjE5MjExNDE0WjAYMRYwFAYD
VQQDEw02YTJjNzZhNy0yNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJD3cHdw5hLfe2IYoEcAoZ38d5kz6VuiBGB65NDLWENGVsq1AISGYR1orJ4S
MaY0U0Xcw7GLrF8PrvZaDGWV4rCYZT5ksPkkJos2/OqjxJJxWmFlpUql/oqB02PX
cCRAKOtmyWW2IZx6J2pJm7bqXWBbEY5HlQFSAag1/Q1SXDdcg234R9pd4j0lHGKU
FU5G0ZAB9Lfh6x1j18rko2iuFA7XOx2Dcxy+VGkwoIwJHRMwtpVMXlc336uJA+KF
Pv4vtZHfE7Q0V7Vf9qS6vcEFTsV+RC1cO53m9PDuciKbBS4IDhFx4WnMwwsrH00u
+zrtts4xXbpyvs3rAp7D3LanfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsMnI0K
par7sOltP6/dQw+Fvi1SMB8GA1UdIwQYMBaAFJxYdjorQ3yyksRkF7jUjt9rVwHP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDY4My81M0Q3NTRGRTJB
NDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZMS1N4R1FYdU5TTzMydFhB
YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25GaDJPaXREZkxLU3hHUVh1TlNPMzJ0WEFjOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDY4My81M0Q3NTRGRTJBNDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZM
S1N4R1FYdU5TTzMydFhBYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIoKa1VOlp4pvOrxMf2Vs9l4X8aOeXNfNUU/b1fdvfeVdTjoVSfmzD6J2V/Tq
K2BpRS8FzmwKFwUQpk6GZzswuOk31AR18eXSRaTZsM2ejF4GOKrQpeYj6ohJpFyP
usFJ9Z3HLsd9nPh1l2rd89MDlUc54UCFqw0xF8gJhObYqoBEwOb4Tegul/4bn3Pa
FImUcv4nXP6RB1exrv9rYP00/I3MZ6KQxBWgygiBN0tK+339owtYlLB2rOxU5dLA
9eUEfRxCITHBfulfYrNOzMbPQ+jIBPDoOmik6E0ZrkJ6mvHNn28GLadVGWxJ4kou
mHNAJNFCMp8fTZD4WsvIRzspCA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:28 2026 by rpki-client