Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File:                     tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier:          aU/rbPFPHS4mwc7LscFjE69asp6Xg/OZBeS6LmiHrQE=
Subject key identifier:   DC:F0:A7:97:B7:11:95:0E:F7:BA:67:FE:E2:48:72:2D:3E:6B:27:7B
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer:       /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number:          0120
Signing time:             Sat 13 Jun 2026 05:47:48 +0000
Manifest this update:     Sat 13 Jun 2026 05:47:48 +0000
Manifest next update:     Sat 20 Jun 2026 05:47:48 +0000
Files and hashes:         1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: oATHm0ZeoKCbR7qwt6QfsIbdPqBlMoJ7U/+NNMXPpjM=)
                          2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
                          rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
        Validity
            Not Before: Jun 13 05:47:48 2026 GMT
            Not After : Jun 20 05:47:48 2026 GMT
        Subject: CN=6a2cef04-c8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:7e:d8:88:19:aa:d9:21:9d:a0:34:9b:55:
                    1e:a8:b3:34:0d:da:58:2e:1f:08:fd:44:9c:29:9c:
                    47:f2:dc:bc:f7:6c:32:17:c3:6b:c4:ca:ef:bd:c1:
                    87:44:e7:0d:92:cb:d1:be:c0:e1:49:a2:e7:25:3a:
                    fa:ac:a4:c6:e3:04:e2:fd:ee:2e:b3:7a:3c:e3:43:
                    79:1b:67:18:c0:6f:f9:13:3c:f9:72:d8:d2:2d:64:
                    c7:f7:ba:75:5b:70:69:b6:fb:8f:19:c2:e3:a7:65:
                    cc:50:e1:a2:c0:fe:08:5d:26:19:f6:9b:8b:0f:8f:
                    92:fd:31:0e:4c:35:ad:08:26:7f:3f:52:e1:78:81:
                    c9:09:db:2c:57:61:3e:b3:65:08:25:53:0c:2a:24:
                    17:a0:39:06:91:f0:ed:00:a0:4c:68:4d:bf:a1:88:
                    0f:80:7d:ab:0e:32:22:c9:15:0a:a7:2d:ed:82:5d:
                    c9:92:1f:e5:10:82:21:84:9d:cd:50:03:a7:34:1a:
                    ef:75:48:dc:48:13:88:b3:b3:5e:b4:55:87:22:b9:
                    43:0c:76:d7:23:93:3e:4f:cd:2d:73:bd:b1:90:bd:
                    6c:9c:03:8f:61:7d:37:ea:59:e2:70:8b:87:37:09:
                    35:c6:9b:49:ad:af:c7:eb:f4:44:17:3a:23:4c:fd:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:A7:97:B7:11:95:0E:F7:BA:67:FE:E2:48:72:2D:3E:6B:27:7B
            X509v3 Authority Key Identifier:
                keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:03:d3:c0:1d:98:ec:dc:e4:12:ed:aa:5f:1f:63:07:4c:db:
         30:ee:bc:d0:39:c8:f5:24:aa:cb:d5:d1:1a:f8:cf:d9:e4:a6:
         8b:ae:d5:24:ad:9a:73:72:5d:7f:92:41:a0:fc:42:12:80:fa:
         8b:67:e9:d9:3d:9c:b0:1b:34:4c:90:1a:43:a0:49:74:1b:b3:
         03:30:f9:72:d3:ab:1c:94:cb:96:6a:91:64:eb:62:d7:4d:11:
         8e:fd:00:a4:77:73:ba:1d:5e:24:00:6f:65:77:0d:a9:ad:30:
         78:28:c4:09:d4:63:7c:b6:50:22:ce:d1:e7:c0:fb:6d:71:d9:
         2b:3a:a0:c5:b2:df:bc:2e:d6:9c:38:02:2b:58:4c:a9:fd:c5:
         9c:87:7d:e3:1e:d2:09:c0:b8:5f:cb:c2:d9:e4:1f:54:d0:11:
         70:0f:83:4f:f2:b4:9c:81:06:f4:02:ae:4c:f3:78:2d:28:ae:
         08:5e:84:d5:32:14:68:e3:ad:18:d1:03:eb:db:fe:bb:2a:55:
         7b:2f:da:d5:44:a4:64:ad:ff:b1:93:07:83:da:fd:4a:64:89:
         19:8c:2a:29:b1:e1:e4:8a:ae:ae:0f:5e:8d:4c:d2:dd:bf:23:
         32:d9:5a:90:c7:59:7f:09:b2:83:8c:2e:8b:32:62:f3:dc:c5:
         9d:7b:49:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5
Qzg4NDE5MTkwHhcNMjYwNjEzMDU0NzQ4WhcNMjYwNjIwMDU0NzQ4WjAYMRYwFAYD
VQQDEw02YTJjZWYwNC1jOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/5+2IgZqtkhnaA0m1UeqLM0DdpYLh8I/UScKZxH8ty892wyF8NrxMrvvcGH
ROcNksvRvsDhSaLnJTr6rKTG4wTi/e4us3o840N5G2cYwG/5Ezz5ctjSLWTH97p1
W3BptvuPGcLjp2XMUOGiwP4IXSYZ9puLD4+S/TEOTDWtCCZ/P1LheIHJCdssV2E+
s2UIJVMMKiQXoDkGkfDtAKBMaE2/oYgPgH2rDjIiyRUKpy3tgl3Jkh/lEIIhhJ3N
UAOnNBrvdUjcSBOIs7NetFWHIrlDDHbXI5M+T80tc72xkL1snAOPYX036lnicIuH
Nwk1xptJra/H6/REFzojTP3chwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzwp5e3
EZUO97pn/uJIci0+ayd7MB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx
MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa
T09CMldhZVVpRnFjaUVHUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANgPTwB2Y7NzkEu2qXx9jB0zbMO680DnI9SSqy9XRGvjP2eSmi67VJK2ac3Jd
f5JBoPxCEoD6i2fp2T2csBs0TJAaQ6BJdBuzAzD5ctOrHJTLlmqRZOti100Rjv0A
pHdzuh1eJABvZXcNqa0weCjECdRjfLZQIs7R58D7bXHZKzqgxbLfvC7WnDgCK1hM
qf3FnId94x7SCcC4X8vC2eQfVNARcA+DT/K0nIEG9AKuTPN4LSiuCF6E1TIUaOOt
GNED69v+uypVey/a1USkZK3/sZMHg9r9SmSJGYwqKbHh5Iqurg9ejUzS3b8jMtla
kMdZfwmyg4wuizJi89zFnXtJZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:00 2026 by rpki-client