Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
File:                     c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json)
Hash identifier:          bDpfRAv6l4hiUL66QNQ5O3A9bi8/5e7gz4CH1J0Yn3c=
Subject key identifier:   36:8A:06:9E:B5:C5:D8:A2:C7:07:86:9A:6D:32:BF:0C:CF:DA:1B:3A
Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
Certificate issuer:       /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Certificate serial:       041A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
Manifest number:          0411
Signing time:             Wed 17 Jun 2026 00:29:44 +0000
Manifest this update:     Wed 17 Jun 2026 00:29:44 +0000
Manifest next update:     Wed 24 Jun 2026 00:29:44 +0000
Files and hashes:         1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: LebwtbQzQIKsnV/HNzJhdI61RApu4C/OOMjE6SVso8M=)
                          2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: EiXaWk8MN8PRU4m8/hbOE0IqPBgeOCBNgzztG3jvQeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
                          rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
        Validity
            Not Before: Jun 17 00:29:44 2026 GMT
            Not After : Jun 24 00:29:44 2026 GMT
        Subject: CN=6a31ea78-442c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:ce:7a:43:67:81:68:39:4b:bb:5c:84:00:
                    0e:f8:da:ac:6a:7b:56:aa:ec:cb:50:eb:c5:a9:7a:
                    bd:a5:ae:6e:1b:64:1e:56:70:1d:c2:b3:b3:ae:eb:
                    43:75:3c:ac:c8:ff:4f:da:67:8b:c6:ea:00:6d:da:
                    40:dd:06:94:06:3c:5a:d2:2d:83:e2:11:cc:b1:22:
                    5f:c6:0e:3b:5b:6a:ed:d8:f0:d7:64:d7:8e:ef:4d:
                    5c:ca:52:6d:a8:7b:80:46:01:b3:90:65:25:db:cb:
                    50:f7:79:7a:07:2e:82:89:99:79:9e:ef:15:2a:72:
                    bd:52:c8:46:d1:ca:60:0b:2c:ce:41:ea:e9:e8:ac:
                    a1:de:6b:0f:d3:19:01:85:c9:d2:19:9c:f2:3d:78:
                    fe:c9:84:b8:8a:7d:77:40:b3:0e:37:1b:9e:12:50:
                    2d:a9:d8:d7:f4:72:7f:f6:6c:4f:80:d5:0e:9d:18:
                    90:88:e9:47:db:da:ad:9d:92:41:b2:91:4e:6a:1c:
                    48:8e:52:d9:9f:84:7a:2b:c4:d5:ac:71:88:dc:dc:
                    82:d7:c5:a0:48:60:b1:7e:d3:2a:23:0b:12:b0:73:
                    ae:d4:79:ce:f2:aa:66:72:62:fc:22:fb:0d:28:39:
                    11:37:4d:a3:91:6e:69:0c:c6:71:7e:df:22:88:c6:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8A:06:9E:B5:C5:D8:A2:C7:07:86:9A:6D:32:BF:0C:CF:DA:1B:3A
            X509v3 Authority Key Identifier:
                keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:d6:f5:e6:9e:7d:99:7b:55:d1:0d:ce:4a:86:4d:66:36:
         24:34:26:8d:55:fa:ac:ba:70:40:99:23:a1:12:c0:a6:1d:7d:
         ef:bf:40:9e:55:94:d3:4b:c9:4d:22:47:66:cb:43:42:24:13:
         b2:3a:80:73:1d:50:0f:71:cb:cd:ba:3f:06:79:4e:73:8f:43:
         2a:06:6a:2f:8d:95:82:79:c6:75:46:a5:d5:83:48:a9:28:88:
         0a:b0:38:37:ae:d8:31:ef:92:12:d9:a2:30:35:c0:1c:3c:b0:
         81:67:3b:c7:b8:8a:23:e2:bd:a1:c0:94:56:99:c1:b4:79:dc:
         76:d8:98:61:ae:ac:3f:2c:77:ae:9f:ef:9e:b0:87:c7:95:0f:
         10:fa:a9:c9:17:84:5e:ce:34:8d:50:4c:5a:86:2b:d3:1d:0e:
         17:96:5d:ae:52:98:5e:92:d7:bc:b8:21:04:f3:50:7c:2b:d8:
         98:a3:0b:8a:c4:d3:55:fb:71:06:38:35:f1:ac:3f:2d:86:a9:
         4f:5f:78:2e:42:26:cf:28:d8:82:ed:da:20:31:4c:e6:9a:7a:
         d9:42:53:2c:c4:b8:7b:dd:c1:e4:f0:86:d3:5a:42:b5:79:c0:
         56:16:56:6d:43:e2:f8:d6:b4:55:64:af:85:6f:ad:c6:13:d2:
         45:85:60:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG
OEJENjBDMTAwHhcNMjYwNjE3MDAyOTQ0WhcNMjYwNjI0MDAyOTQ0WjAYMRYwFAYD
VQQDEw02YTMxZWE3OC00NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGHOekNngWg5S7tchAAO+NqsantWquzLUOvFqXq9pa5uG2QeVnAdwrOzrutD
dTysyP9P2meLxuoAbdpA3QaUBjxa0i2D4hHMsSJfxg47W2rt2PDXZNeO701cylJt
qHuARgGzkGUl28tQ93l6By6CiZl5nu8VKnK9UshG0cpgCyzOQerp6Kyh3msP0xkB
hcnSGZzyPXj+yYS4in13QLMONxueElAtqdjX9HJ/9mxPgNUOnRiQiOlH29qtnZJB
spFOahxIjlLZn4R6K8TVrHGI3NyC18WgSGCxftMqIwsSsHOu1HnO8qpmcmL8IvsN
KDkRN02jkW5pDMZxft8iiMbXCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaKBp61
xdiixweGmm0yvwzP2hs6MB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF
NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU
LUZyUjRiQ2xEX1A0dldEQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO6HW9eaefZl7VdENzkqGTWY2JDQmjVX6rLpwQJkjoRLAph19779AnlWU00vJ
TSJHZstDQiQTsjqAcx1QD3HLzbo/BnlOc49DKgZqL42VgnnGdUal1YNIqSiICrA4
N67YMe+SEtmiMDXAHDywgWc7x7iKI+K9ocCUVpnBtHncdtiYYa6sPyx3rp/vnrCH
x5UPEPqpyReEXs40jVBMWoYr0x0OF5ZdrlKYXpLXvLghBPNQfCvYmKMLisTTVftx
Bjg18aw/LYapT194LkImzyjYgu3aIDFM5pp62UJTLMS4e93B5PCG01pCtXnAVhZW
bUPi+Na0VWSvhW+txhPSRYVgig==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:46:17 2026 by rpki-client