Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
File:                     mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json)
Hash identifier:          MSuaQQng0334weOcw+qplIS6m/Y45lEuVcAYfCLIVhw=
Subject key identifier:   43:D6:94:C2:28:FB:42:BF:34:4C:61:29:29:E7:DB:73:0B:DF:AB:3C
Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72
Certificate issuer:       /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
Manifest number:          0318
Signing time:             Sat 13 Jun 2026 01:12:04 +0000
Manifest this update:     Sat 13 Jun 2026 01:12:03 +0000
Manifest next update:     Sat 20 Jun 2026 01:12:03 +0000
Files and hashes:         1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: lvlZxm+RmLNbTZICPiIuXTxDQ+0Nu0RNMGzM4831HtA=)
                          2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: HIwqlmntoeFwo+S7UDebJJRPpqNaEv4Pryk7jDC+0qM=)
                          3: E79D93681C1F11F1B2DF50D0313D8C67.roa (hash: W4I4DorhQtZcnS22ft48DnGQCDVeftj54k6lXf7w3f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
        Validity
            Not Before: Jun 13 01:12:03 2026 GMT
            Not After : Jun 20 01:12:03 2026 GMT
        Subject: CN=6a2cae63-8c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:66:4a:8e:9c:fe:1b:43:0a:24:56:3a:12:
                    d2:e8:c9:d2:9c:76:af:7c:dd:b8:a4:74:7d:82:76:
                    3a:bf:c2:69:2b:5d:85:6c:9b:2b:72:42:1b:47:53:
                    aa:bb:00:70:25:f3:a5:12:29:96:07:4c:f6:bd:78:
                    93:ed:bc:0b:14:9c:9e:a9:6e:cb:2f:71:5d:f3:95:
                    88:70:19:5d:1e:c0:e0:48:4a:ca:0f:8a:d9:81:26:
                    8e:b1:33:57:5a:4a:2f:de:56:e8:f9:f4:a9:14:3c:
                    7d:6b:e3:c7:a5:eb:cb:e9:4d:c5:2b:82:e8:11:1e:
                    60:34:10:56:20:5a:87:74:05:fe:2b:f8:e7:ad:23:
                    09:a4:c8:ce:0f:05:ee:f9:fe:dc:29:22:52:16:5f:
                    6d:e1:ab:e1:ec:19:a9:98:9e:8f:7c:c2:f2:cf:3f:
                    f3:81:cb:9b:b5:7b:a1:2d:01:f1:59:f1:fe:fc:fd:
                    68:d4:b3:89:51:39:37:7b:08:ad:2b:bc:ec:3e:47:
                    c3:b8:7a:4b:b5:98:30:8d:a8:80:37:3a:67:92:0d:
                    e5:cf:e5:c7:01:8f:44:cc:cd:12:90:90:66:8c:36:
                    5f:b0:0b:76:f1:8a:74:32:6d:05:c6:9b:76:05:5e:
                    c3:c1:f2:c8:db:70:c8:82:fc:ee:89:cb:15:46:44:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:94:C2:28:FB:42:BF:34:4C:61:29:29:E7:DB:73:0B:DF:AB:3C
            X509v3 Authority Key Identifier:
                keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:55:c9:3a:50:5e:30:3e:c7:95:ef:1f:63:dc:20:54:e3:f1:
         01:83:b5:64:bb:9e:62:57:0d:f7:b4:7a:95:ba:b7:d5:d2:58:
         a9:34:d9:00:d8:a6:95:0c:89:db:c6:f3:83:26:40:bf:a7:5c:
         6b:d1:b5:63:7c:fc:fe:80:79:fa:0b:32:3d:22:0b:06:3d:34:
         4b:0b:98:8e:c6:7c:4c:32:f5:50:73:91:25:cf:ac:a5:9e:14:
         60:50:1c:93:b0:43:f5:ae:2d:dc:d9:be:7e:31:06:e9:53:6e:
         a3:62:55:ee:1c:9b:15:5c:16:79:53:6c:92:98:0e:1b:d6:a3:
         ee:fa:94:1f:2b:d3:27:66:5c:79:b1:63:99:eb:f7:d9:8f:81:
         16:94:19:a7:17:14:ce:53:06:d6:21:e8:cc:ab:89:3f:47:03:
         64:d6:9a:c1:d1:71:03:bf:4f:b9:fd:a5:30:89:2d:c2:eb:85:
         da:48:6d:6c:d3:2b:35:3b:9e:c4:35:66:87:db:47:4c:c7:c9:
         45:cc:98:4b:27:21:28:0f:fa:29:fc:04:4a:32:94:bf:f7:bd:
         3a:cf:65:2e:bf:5f:72:35:ba:28:55:db:54:cd:e5:a4:cd:51:
         dd:61:7f:71:3a:d3:de:48:02:65:ff:d9:ca:9e:43:23:df:a6:
         53:7b:40:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3
MDZDODA2NzIwHhcNMjYwNjEzMDExMjAzWhcNMjYwNjIwMDExMjAzWjAYMRYwFAYD
VQQDEw02YTJjYWU2My04YzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCJmSo6c/htDCiRWOhLS6MnSnHavfN24pHR9gnY6v8JpK12FbJsrckIbR1Oq
uwBwJfOlEimWB0z2vXiT7bwLFJyeqW7LL3Fd85WIcBldHsDgSErKD4rZgSaOsTNX
Wkov3lbo+fSpFDx9a+PHpevL6U3FK4LoER5gNBBWIFqHdAX+K/jnrSMJpMjODwXu
+f7cKSJSFl9t4avh7BmpmJ6PfMLyzz/zgcubtXuhLQHxWfH+/P1o1LOJUTk3ewit
K7zsPkfDuHpLtZgwjaiANzpnkg3lz+XHAY9EzM0SkJBmjDZfsAt28Yp0Mm0Fxpt2
BV7DwfLI23DIgvzuicsVRkQMIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPWlMIo
+0K/NExhKSnn23ML36s8MB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD
RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO
NGd5VHpBUWJoYUZ3YklCbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxFXJOlBeMD7Hle8fY9wgVOPxAYO1ZLueYlcN97R6lbq31dJYqTTZANimlQyJ
28bzgyZAv6dca9G1Y3z8/oB5+gsyPSILBj00SwuYjsZ8TDL1UHORJc+spZ4UYFAc
k7BD9a4t3Nm+fjEG6VNuo2JV7hybFVwWeVNskpgOG9aj7vqUHyvTJ2ZcebFjmev3
2Y+BFpQZpxcUzlMG1iHozKuJP0cDZNaawdFxA79Puf2lMIktwuuF2khtbNMrNTue
xDVmh9tHTMfJRcyYSychKA/6KfwESjKUv/e9Os9lLr9fcjW6KFXbVM3lpM1R3WF/
cTrT3kgCZf/Zyp5DI9+mU3tA4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:30:06 2026 by rpki-client