Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
File:                     hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json)
Hash identifier:          owbMeExZwNOhzcBW3Qqm1yes6CC0iwrmFcBPF906RRc=
Subject key identifier:   B7:DE:5E:A8:9F:53:FC:19:9A:C1:04:C7:68:7B:5D:FF:77:56:13:07
Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
Certificate issuer:       /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
Manifest number:          0168
Signing time:             Sat 13 Jun 2026 04:52:55 +0000
Manifest this update:     Sat 13 Jun 2026 04:52:54 +0000
Manifest next update:     Sat 20 Jun 2026 04:52:54 +0000
Files and hashes:         1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: FIYbarAPQV3s4e0qQ14sk3GyzGVdydjDpReWETMJ/nI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
        Validity
            Not Before: Jun 13 04:52:54 2026 GMT
            Not After : Jun 20 04:52:54 2026 GMT
        Subject: CN=6a2ce226-d383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:57:12:27:b6:e8:25:8d:b1:4d:d8:c0:c4:
                    0c:3c:fb:f9:6b:64:4c:25:b8:18:ba:f6:24:95:1c:
                    51:d5:ff:8c:ef:3b:77:9e:d3:c7:04:05:e1:2d:fb:
                    62:00:b8:5c:21:d7:32:47:a2:2d:fc:d3:d6:cd:a4:
                    a1:5d:3c:a4:c3:9b:40:b9:be:3e:24:21:53:09:aa:
                    30:e4:aa:e8:b2:60:51:b0:08:8c:74:bb:68:20:43:
                    34:33:31:94:01:6f:5e:ec:a5:5f:30:d7:4f:21:ed:
                    2e:1a:4a:d2:ef:3d:82:07:96:c6:69:f0:80:e6:79:
                    f1:9d:61:fc:25:ad:69:d1:9b:96:64:94:0d:15:e4:
                    59:f3:3b:90:7f:09:14:5c:84:cc:e8:79:fb:d9:cb:
                    95:b0:34:fc:78:d9:52:53:c2:ad:7b:88:c0:c2:38:
                    1c:ec:5e:24:b8:39:f8:ca:4f:f3:63:6d:f6:82:a0:
                    1b:39:98:31:3c:71:d7:f4:cb:da:33:85:5f:2c:c4:
                    ed:09:27:90:81:86:b2:69:79:49:2a:61:42:2c:52:
                    66:5c:1f:94:eb:97:77:86:7b:17:c1:fb:29:d3:c1:
                    09:d9:22:6e:40:d2:80:e8:dd:cf:60:92:74:93:87:
                    10:5c:b2:f0:af:2b:cb:38:bd:04:94:1c:17:d3:0c:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:5E:A8:9F:53:FC:19:9A:C1:04:C7:68:7B:5D:FF:77:56:13:07
            X509v3 Authority Key Identifier:
                keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f1:ca:56:d0:00:0e:3b:79:56:e4:ab:ea:f4:93:c8:98:f1:
         2e:8b:5e:86:a2:6f:8d:37:53:ec:c7:a4:eb:d2:0e:0b:a3:fa:
         4c:17:09:cf:5d:34:e2:e6:f2:dd:b1:06:58:e1:f6:bd:0c:c6:
         33:f3:d0:e8:11:22:9e:7d:cd:cd:03:03:05:19:27:64:24:41:
         27:95:9d:c8:e4:7c:1f:59:6c:21:be:3f:65:65:5b:91:4e:4d:
         3f:44:a3:a7:3d:a0:4a:e7:58:9e:27:af:f7:0e:c4:1f:82:63:
         4f:5a:f7:fe:a4:a2:fa:d5:c8:f9:5a:f7:ca:cd:4b:38:df:fe:
         3d:36:c6:16:e6:d2:52:2e:9e:20:74:b5:fd:fd:b6:c5:7e:4e:
         40:59:34:92:b3:63:a4:c6:ba:79:d7:0a:21:bf:ab:93:01:dc:
         0f:c7:a5:39:94:2b:cb:72:a1:bf:8d:ec:15:e8:2e:81:2d:8e:
         30:77:32:f2:fa:db:70:79:cb:9d:58:24:6b:6f:36:82:5b:d3:
         7b:60:b0:5b:8b:65:33:54:a7:34:21:37:f8:d3:aa:db:f5:1c:
         6b:e6:43:9c:6d:03:e4:51:21:3f:d2:28:c6:65:d6:3f:e2:7e:
         d9:11:f5:84:9c:d0:12:24:c1:67:81:1e:0e:c5:c5:b3:4e:fa:
         0f:a6:0a:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVCNUUxMTAvBgNVBAUTKDg1ODA0NTk1MTdGRTFENzdENEQzOEE0MjlGMUQyMUM2
QzkyREU5MzQwHhcNMjYwNjEzMDQ1MjU0WhcNMjYwNjIwMDQ1MjU0WjAYMRYwFAYD
VQQDEw02YTJjZTIyNi1kMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgRXEie26CWNsU3YwMQMPPv5a2RMJbgYuvYklRxR1f+M7zt3ntPHBAXhLfti
ALhcIdcyR6It/NPWzaShXTykw5tAub4+JCFTCaow5KrosmBRsAiMdLtoIEM0MzGU
AW9e7KVfMNdPIe0uGkrS7z2CB5bGafCA5nnxnWH8Ja1p0ZuWZJQNFeRZ8zuQfwkU
XITM6Hn72cuVsDT8eNlSU8Kte4jAwjgc7F4kuDn4yk/zY232gqAbOZgxPHHX9Mva
M4VfLMTtCSeQgYayaXlJKmFCLFJmXB+U65d3hnsXwfsp08EJ2SJuQNKA6N3PYJJ0
k4cQXLLwryvLOL0ElBwX0wzQDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfeXqif
U/wZmsEEx2h7Xf93VhMHMB8GA1UdIwQYMBaAFIWARZUX/h131NOKQp8dIcbJLek0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS84NUJDRUU0QzQ1
QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhYZlUwNHBDbngwaHhza3Q2
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUI1RS84NUJDRUU0QzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhY
ZlUwNHBDbngwaHhza3Q2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACvHKVtAADjt5VuSr6vSTyJjxLotehqJvjTdT7Mek69IOC6P6TBcJz1004uby
3bEGWOH2vQzGM/PQ6BEinn3NzQMDBRknZCRBJ5WdyOR8H1lsIb4/ZWVbkU5NP0Sj
pz2gSudYniev9w7EH4JjT1r3/qSi+tXI+Vr3ys1LON/+PTbGFubSUi6eIHS1/f22
xX5OQFk0krNjpMa6edcKIb+rkwHcD8elOZQry3Khv43sFegugS2OMHcy8vrbcHnL
nVgka282glvTe2CwW4tlM1SnNCE3+NOq2/Uca+ZDnG0D5FEhP9IoxmXWP+J+2RH1
hJzQEiTBZ4EeDsXFs076D6YKZA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:41 2026 by rpki-client