Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File:                     mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier:          R3Ir/drGS+f/MRUa2mQt1Sj2zXtCgr6FR5NCVZoEy7w=
Subject key identifier:   04:86:8E:95:20:C6:7A:68:86:D8:BA:AE:F8:BB:74:B7:D0:C9:45:27
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer:       /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number:          010A
Signing time:             Sat 13 Jun 2026 06:12:41 +0000
Manifest this update:     Sat 13 Jun 2026 06:12:41 +0000
Manifest next update:     Sat 20 Jun 2026 06:12:41 +0000
Files and hashes:         1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: /POOiNiknYMRuJJPVtq6td0Yj4cU+bunjYzl7W/aeHM=)
                          2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: fhMnOOcqslyy9NxnX7zgTe3J3WzePSNlL2bH73cXkGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
        Validity
            Not Before: Jun 13 06:12:41 2026 GMT
            Not After : Jun 20 06:12:41 2026 GMT
        Subject: CN=6a2cf4d9-8c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:a4:d9:28:51:8f:c9:47:a3:e3:ee:ae:ba:
                    0a:df:fa:e1:18:75:92:d0:6d:01:c9:1c:48:71:4c:
                    24:11:b6:37:50:be:89:f4:c8:41:e2:8f:c0:3a:73:
                    06:e6:f8:4d:f9:95:20:d7:f1:f1:c7:41:37:3d:66:
                    e4:74:bb:11:80:03:6a:5b:d2:57:64:70:23:cd:95:
                    91:ce:64:49:74:eb:d8:d2:27:7f:95:aa:ee:a2:96:
                    05:a5:b2:cc:a7:9c:0f:e1:78:83:14:b0:67:89:44:
                    dd:0a:4d:44:ed:62:37:0d:c6:a7:2f:61:87:e5:79:
                    0f:60:db:dd:1a:6a:fd:5a:ca:5e:63:37:cd:45:4d:
                    8b:c0:cf:e8:d1:5c:ac:56:e8:c6:0b:41:0b:a8:79:
                    5c:90:b2:90:d3:51:06:6c:34:03:72:c5:12:98:ae:
                    da:1f:d5:00:ad:7c:8a:d8:9b:f8:79:e6:0c:fb:cc:
                    ea:94:83:7e:85:31:03:23:b7:a1:75:45:ae:af:1c:
                    97:ee:11:57:a9:49:33:9a:e5:e9:a7:71:45:66:63:
                    68:a3:4f:39:5d:fb:c2:8e:5e:ad:34:92:a7:49:bd:
                    7d:5d:7d:98:46:46:2c:1c:b9:a6:6d:60:bf:4a:e2:
                    2d:cd:b2:89:4e:e6:f5:0a:a1:f0:94:b5:ce:ba:bc:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:86:8E:95:20:C6:7A:68:86:D8:BA:AE:F8:BB:74:B7:D0:C9:45:27
            X509v3 Authority Key Identifier:
                keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:51:2a:5a:38:95:ce:09:9a:b9:f1:ab:36:75:94:fd:00:
         9f:bc:38:f3:0c:06:fb:22:8f:61:34:a8:19:ec:84:b2:3d:41:
         3a:5b:59:fc:44:37:70:cc:5d:bd:d8:67:68:0c:d2:21:54:36:
         b2:8d:43:94:c3:df:cd:42:01:40:9d:52:e7:b5:2e:42:d3:e1:
         b6:e0:f0:0a:2d:3a:d0:6e:62:89:7c:b6:b4:cb:e7:a9:0f:b9:
         d8:f7:10:6f:d6:67:03:d0:e8:c5:4d:72:d4:41:44:a7:1b:08:
         0a:c6:20:07:c1:cf:7a:7a:b7:18:0b:17:ac:4f:96:35:c1:b1:
         02:c0:b8:ac:8e:f6:f6:e2:76:70:ca:19:91:c5:03:25:5d:19:
         a2:af:e6:a3:df:6f:9b:07:5d:30:bf:ef:22:45:6b:b8:3b:a6:
         7b:98:ff:e6:42:a6:af:e9:24:b5:22:0d:dd:b7:db:c1:7e:7e:
         12:79:82:a8:e7:14:2c:65:a1:e0:97:55:22:6b:ed:d7:0c:c9:
         06:0d:69:66:be:fd:b0:66:c4:93:13:52:a9:37:e8:ad:cd:7b:
         b0:79:8a:d8:16:4f:ea:41:50:2d:fd:b0:2a:c7:e6:c9:1b:dc:
         70:68:37:ed:5a:19:98:49:94:40:83:d1:9d:56:04:4d:7e:82:
         1e:e5:e8:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDQkUxMTAvBgNVBAUTKDlBMTYyNEY0NjA4MkY1NEFDNTc3ODg1OUUyMjZCRDNC
QTY5MDIzRjQwHhcNMjYwNjEzMDYxMjQxWhcNMjYwNjIwMDYxMjQxWjAYMRYwFAYD
VQQDEw02YTJjZjRkOS04YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNik2ShRj8lHo+PurroK3/rhGHWS0G0ByRxIcUwkEbY3UL6J9MhB4o/AOnMG
5vhN+ZUg1/Hxx0E3PWbkdLsRgANqW9JXZHAjzZWRzmRJdOvY0id/laruopYFpbLM
p5wP4XiDFLBniUTdCk1E7WI3DcanL2GH5XkPYNvdGmr9WspeYzfNRU2LwM/o0Vys
VujGC0ELqHlckLKQ01EGbDQDcsUSmK7aH9UArXyK2Jv4eeYM+8zqlIN+hTEDI7eh
dUWurxyX7hFXqUkzmuXpp3FFZmNoo085XfvCjl6tNJKnSb19XX2YRkYsHLmmbWC/
SuItzbKJTub1CqHwlLXOurxJWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASGjpUg
xnpohti6rvi7dLfQyUUnMB8GA1UdIwQYMBaAFJoWJPRggvVKxXeIWeImvTumkCP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NCRS84M0JBODdBRUQ3
QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlVckZkNGhaNGlhOU82YVFJ
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NCRS84M0JBODdBRUQ3QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlV
ckZkNGhaNGlhOU82YVFJX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAig1RKlo4lc4JmrnxqzZ1lP0An7w48wwG+yKPYTSoGeyEsj1BOltZ/EQ3cMxd
vdhnaAzSIVQ2so1DlMPfzUIBQJ1S57UuQtPhtuDwCi060G5iiXy2tMvnqQ+52PcQ
b9ZnA9DoxU1y1EFEpxsICsYgB8HPenq3GAsXrE+WNcGxAsC4rI729uJ2cMoZkcUD
JV0Zoq/mo99vmwddML/vIkVruDume5j/5kKmr+kktSIN3bfbwX5+EnmCqOcULGWh
4JdVImvt1wzJBg1pZr79sGbEkxNSqTforc17sHmK2BZP6kFQLf2wKsfmyRvccGg3
7VoZmEmUQIPRnVYETX6CHuXoWw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:55:40 2026 by rpki-client