Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
File:                     HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft (raw, json)
Hash identifier:          ngsNCErzltBTLXTkopkT4vWOMziDXnq1hf/zMZL2mwk=
Subject key identifier:   FF:E3:B0:9C:2A:A9:D9:5A:3A:19:10:A8:B9:B4:1A:BD:F1:2B:7C:10
Authority key identifier: 1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA
Certificate issuer:       /CN=A914B724/serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
Manifest number:          1C
Signing time:             Sat 13 Jun 2026 08:59:21 +0000
Manifest this update:     Sat 13 Jun 2026 08:59:20 +0000
Manifest next update:     Sat 20 Jun 2026 08:59:20 +0000
Files and hashes:         1: HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl (hash: d+mwAo5lXo8aLptTvZuee6PmChe1cfn3QV0wa3Xu8dA=)
                          2: C100F7163E2C11F1B54B2550B7833773.roa (hash: rUO3qsc/88dCf3N3rSuzcrdvkCR6cdFGRur986WAffw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl
                          rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B724, serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
        Validity
            Not Before: Jun 13 08:59:20 2026 GMT
            Not After : Jun 20 08:59:20 2026 GMT
        Subject: CN=6a2d1be8-bc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:d3:8e:a2:c5:30:da:8d:16:e2:bb:11:19:
                    71:70:f7:db:9f:db:99:f7:48:3c:f1:69:66:16:45:
                    76:db:ed:68:0c:38:80:22:31:ea:70:32:1f:29:d2:
                    b7:09:3a:9c:54:54:36:5f:b2:1b:ce:28:c2:7c:32:
                    ff:a9:16:50:66:d2:cc:6d:a1:b1:0a:55:c8:81:94:
                    eb:c0:a2:e5:bd:e0:7b:27:da:38:3f:c5:7f:f9:93:
                    25:de:dc:87:f6:a5:75:fb:0a:68:b1:27:2e:cb:22:
                    3c:e1:56:8c:d8:31:f2:df:e9:7b:94:23:f9:e4:f7:
                    f8:3c:8d:bf:8c:a1:6d:61:78:8c:4a:b1:71:26:68:
                    70:92:49:8f:53:ca:0f:00:a4:e4:bc:40:5f:6c:72:
                    ea:2d:5d:1d:fe:d1:eb:ec:93:35:02:ab:37:ea:af:
                    b6:fb:39:7a:64:4d:51:37:01:50:72:19:42:32:e0:
                    41:30:c0:09:ff:13:81:f1:d3:ea:a4:ef:a2:c5:75:
                    3a:a1:35:03:47:0f:de:68:72:b5:fe:4a:6f:9c:0a:
                    91:a2:b3:58:aa:63:0f:0c:9e:c6:18:72:b0:6b:39:
                    15:58:5b:2e:e0:47:e2:b1:18:d2:ff:0d:b8:d3:02:
                    73:e3:d3:47:d8:ea:65:f4:5f:1a:6b:67:32:72:e7:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:B0:9C:2A:A9:D9:5A:3A:19:10:A8:B9:B4:1A:BD:F1:2B:7C:10
            X509v3 Authority Key Identifier:
                keyid:1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:24:87:2b:4e:15:bc:d2:8e:22:2d:99:bf:a1:f1:4b:67:2e:
         2a:96:49:ee:bc:0f:be:5b:b5:da:15:32:25:f4:06:ea:29:63:
         b2:c8:34:d5:3c:e8:18:7d:fc:1d:e4:7c:51:0f:75:59:ce:87:
         02:f5:e5:fc:b8:c5:95:9a:fa:d8:ee:4b:b8:ff:0f:98:e5:2f:
         16:29:2d:59:dd:ce:e8:d1:31:59:eb:cb:b0:62:43:08:0c:59:
         22:93:3e:8a:8e:2d:ef:cd:b4:d0:ec:41:e7:cc:9f:46:72:74:
         17:ed:d7:12:73:90:8e:7e:6c:73:10:28:0e:d0:49:e4:9e:4a:
         08:14:67:07:6e:ba:00:86:e0:34:bb:04:03:39:d6:92:2a:f0:
         24:97:a7:77:13:8c:ff:df:51:9a:4a:0c:23:e9:0a:75:16:ac:
         b7:6d:66:83:29:6b:8a:a0:58:d7:9e:d8:2f:8d:98:dc:5a:b8:
         de:db:1c:0c:22:a4:f3:bf:eb:e0:67:d7:43:ea:72:9b:3a:a7:
         e8:06:a3:d2:91:b5:9d:42:91:46:f6:b0:d2:a4:c3:f7:d8:2a:
         83:ce:b9:a1:57:a4:57:0d:c0:8e:ba:98:25:30:9e:5f:c2:3c:
         90:ae:c1:bd:3d:be:4a:4a:1d:e8:db:bd:5a:73:03:11:29:63:
         49:c3:4d:0d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjcyNDExMC8GA1UEBRMoMURDNUI0QTU4NjAxMkY2Q0U1RTlFMDI3OEVERjYyODhC
RDNGNTZDQTAeFw0yNjA2MTMwODU5MjBaFw0yNjA2MjAwODU5MjBaMBgxFjAUBgNV
BAMTDTZhMmQxYmU4LWJjN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTRtOOosUw2o0W4rsRGXFw99uf25n3SDzxaWYWRXbb7WgMOIAiMepwMh8p0rcJ
OpxUVDZfshvOKMJ8Mv+pFlBm0sxtobEKVciBlOvAouW94Hsn2jg/xX/5kyXe3If2
pXX7CmixJy7LIjzhVozYMfLf6XuUI/nk9/g8jb+MoW1heIxKsXEmaHCSSY9Tyg8A
pOS8QF9scuotXR3+0evskzUCqzfqr7b7OXpkTVE3AVByGUIy4EEwwAn/E4Hx0+qk
76LFdTqhNQNHD95ocrX+Sm+cCpGis1iqYw8MnsYYcrBrORVYWy7gR+KxGNL/DbjT
AnPj00fY6mX0XxprZzJy50KhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/+OwnCqp
2Vo6GRCoubQavfErfBAwHwYDVR0jBBgwFoAUHcW0pYYBL2zl6eAnjt9iiL0/Vsow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNzI0LzkzNDdBQTQ0M0Uy
ODExRjE5RThFRDRBNkI1ODMzNzczL0hjVzBwWVlCTDJ6bDZlQW5qdDlpaUwwX1Zz
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGNXMHBZWUJMMnpsNmVBbmp0OWlpTDBfVnNvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
NzI0LzkzNDdBQTQ0M0UyODExRjE5RThFRDRBNkI1ODMzNzczL0hjVzBwWVlCTDJ6
bDZlQW5qdDlpaUwwX1Zzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCIJIcrThW80o4iLZm/ofFLZy4qlknuvA++W7XaFTIl9AbqKWOyyDTVPOgYffwd
5HxRD3VZzocC9eX8uMWVmvrY7ku4/w+Y5S8WKS1Z3c7o0TFZ68uwYkMIDFkikz6K
ji3vzbTQ7EHnzJ9GcnQX7dcSc5COfmxzECgO0EnknkoIFGcHbroAhuA0uwQDOdaS
KvAkl6d3E4z/31GaSgwj6Qp1Fqy3bWaDKWuKoFjXntgvjZjcWrje2xwMIqTzv+vg
Z9dD6nKbOqfoBqPSkbWdQpFG9rDSpMP32CqDzrmhV6RXDcCOupglMJ5fwjyQrsG9
Pb5KSh3o271acwMRKWNJw00N
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:31:22 2026 by rpki-client