Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
File:                     I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json)
Hash identifier:          l9OWuExDDGgJ+jVpNjjA3HLSXys3HUOpI0Zlm71byes=
Subject key identifier:   7E:C8:C5:1A:A3:47:14:41:62:B1:79:39:A6:D0:D3:C5:36:62:54:6D
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Certificate issuer:       /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial:       0746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
Manifest number:          06FE
Signing time:             Fri 12 Jun 2026 22:25:30 +0000
Manifest this update:     Fri 12 Jun 2026 22:25:29 +0000
Manifest next update:     Fri 19 Jun 2026 22:25:29 +0000
Files and hashes:         1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: 4E/lsaOXWafOunJIzpfVJv6RByhwwHRW8CdIlgYoFtE=)
                          2: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: sM6Ff5Btr2H1Za3+xr7nTyk868AOvBu9Fccxr6yah7k=)
                          3: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: AReViyH8qYJmKjUIQ8QrviAg/eKIeslm79IJrfhFTIA=)
                          4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: VfZcIRpYWsXv2sQHMltNI7KlcM5kOmrXtKUtk3vzF9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
                          rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
        Validity
            Not Before: Jun 12 22:25:29 2026 GMT
            Not After : Jun 19 22:25:29 2026 GMT
        Subject: CN=6a2c8759-db80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:7b:d8:92:e4:ec:6c:69:ff:a3:d9:49:bb:
                    2c:6e:8e:ee:6f:f7:cc:9c:a5:c2:b8:86:d7:f1:b0:
                    08:72:22:a8:25:92:9f:92:48:c7:ed:8f:69:b6:8c:
                    86:c5:86:eb:07:df:d8:26:ae:e6:f3:54:ca:ff:61:
                    d8:d2:a1:0c:ad:a4:3c:49:22:81:72:7c:bf:96:26:
                    9b:00:66:a1:e2:1b:21:d2:2d:fa:f1:28:4a:a9:a2:
                    ea:16:92:72:4a:c3:35:ce:e5:9d:8e:c1:2a:90:0f:
                    06:a2:dc:d2:8f:e3:30:a8:ba:b6:a7:15:cc:b6:1c:
                    27:a6:7b:b1:19:93:f8:cf:e3:eb:05:2f:d5:93:98:
                    bf:38:e7:1c:4f:65:52:a0:a0:8b:e2:58:b7:3b:d6:
                    a3:e5:11:ea:44:67:a9:4e:02:39:b4:88:20:99:18:
                    8d:eb:ed:ff:b5:fb:e7:20:9a:21:3f:a9:d8:fc:91:
                    1f:ec:02:f8:a2:8c:b4:ab:0f:ea:00:92:7f:79:f5:
                    5d:7f:77:3b:f1:bc:d4:be:14:f8:e6:9b:da:4d:2a:
                    95:3f:d3:e2:0f:26:b1:25:69:00:7d:3c:af:1d:33:
                    25:be:3f:48:39:a6:31:ba:63:89:12:30:38:42:ef:
                    2e:10:eb:1b:2a:90:90:12:bc:36:ae:4c:c6:e4:de:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C8:C5:1A:A3:47:14:41:62:B1:79:39:A6:D0:D3:C5:36:62:54:6D
            X509v3 Authority Key Identifier:
                keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:49:ff:11:08:97:b2:50:45:59:dc:11:ba:5b:3b:ff:b4:
         dd:39:72:9b:c9:c0:0d:b8:2c:52:ea:2a:4f:50:3f:e5:dc:43:
         2e:dd:f9:3b:d9:9d:23:f1:ab:05:e7:f0:44:9c:81:5f:b4:76:
         0f:0a:1e:f1:35:e1:35:63:74:de:3b:db:fc:f8:43:52:12:85:
         dd:eb:98:9f:1d:be:e1:f5:d8:cc:03:8f:fe:ad:8a:ce:69:06:
         c6:4c:3b:ca:71:95:cc:66:6c:97:60:63:63:ff:64:05:92:45:
         b7:3a:da:c3:02:ba:7f:b7:ac:07:a6:0a:07:cc:7a:f8:d3:69:
         7e:c8:0c:7c:47:19:f4:b8:8b:1f:b8:35:4a:ac:4b:f6:e9:f4:
         2b:0e:b8:8b:38:78:08:e6:44:fa:61:13:8b:32:7a:55:e0:b2:
         7b:d4:8b:1a:00:41:db:2a:a8:40:85:ea:3a:48:f5:0a:5e:e8:
         2d:1c:3c:4a:92:a5:cb:4d:84:23:ef:30:99:5a:38:46:c4:0a:
         b2:ec:ce:25:7c:77:53:b0:a9:8c:82:04:fa:3d:68:54:2d:91:
         56:e2:65:b7:3b:bf:9b:05:2f:c1:ef:1d:bd:dc:15:6a:ef:98:
         cc:28:a0:67:47:39:2b:1e:8a:d0:2f:f0:d4:16:df:24:9b:af:
         5f:5a:85:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3
Q0ZGRTc3RUYwHhcNMjYwNjEyMjIyNTI5WhcNMjYwNjE5MjIyNTI5WjAYMRYwFAYD
VQQDEw02YTJjODc1OS1kYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9dt72JLk7Gxp/6PZSbssbo7ub/fMnKXCuIbX8bAIciKoJZKfkkjH7Y9ptoyG
xYbrB9/YJq7m81TK/2HY0qEMraQ8SSKBcny/liabAGah4hsh0i368ShKqaLqFpJy
SsM1zuWdjsEqkA8GotzSj+MwqLq2pxXMthwnpnuxGZP4z+PrBS/Vk5i/OOccT2VS
oKCL4li3O9aj5RHqRGepTgI5tIggmRiN6+3/tfvnIJohP6nY/JEf7AL4ooy0qw/q
AJJ/efVdf3c78bzUvhT45pvaTSqVP9PiDyaxJWkAfTyvHTMlvj9IOaYxumOJEjA4
Qu8uEOsbKpCQErw2rkzG5N4H6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7IxRqj
RxRBYrF5OabQ08U2YlRtMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy
MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0
UUdlYkhHVGFOOE44Xy1kLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATRFJ/xEIl7JQRVncEbpbO/+03Tlym8nADbgsUuoqT1A/5dxDLt35O9mdI/Gr
BefwRJyBX7R2Dwoe8TXhNWN03jvb/PhDUhKF3euYnx2+4fXYzAOP/q2KzmkGxkw7
ynGVzGZsl2BjY/9kBZJFtzrawwK6f7esB6YKB8x6+NNpfsgMfEcZ9LiLH7g1SqxL
9un0Kw64izh4COZE+mETizJ6VeCye9SLGgBB2yqoQIXqOkj1Cl7oLRw8SpKly02E
I+8wmVo4RsQKsuzOJXx3U7CpjIIE+j1oVC2RVuJltzu/mwUvwe8dvdwVau+YzCig
Z0c5Kx6K0C/w1BbfJJuvX1qFsw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:45 2026 by rpki-client