Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          HpyRkUB3O/RQnhjHSUKl86sObje0RL/foAyJ1ZRvM5M=
Subject key identifier:   20:7F:75:CF:E8:3B:AF:FB:33:32:BD:A0:89:FF:64:92:AD:24:64:F9
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          0114
Signing time:             Thu 11 Jun 2026 08:52:24 +0000
Manifest this update:     Thu 11 Jun 2026 08:52:23 +0000
Manifest next update:     Thu 18 Jun 2026 08:52:23 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: lWnIempsMg0zojHZr8lAaYKNOmpdleZSF9fko3hqsIw=)
                          2: 32332AD83C8B11F1B51BFC899C833773.roa (hash: SqSvzXIRIVpELXR4zfaIkWV4fICk8+OR6AsXIXWCiYc=)
                          3: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
                          4: 51837F10DFBA11F0A83E81424B6F56BC.roa (hash: NWzzMsX3noY8q0+rvetdP4nmPnicp/iz7mPVV5dJxY0=)
                          5: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: Wc1DoOxBicG+sk0xmxn0G7rVUatGjhMhpQRJFhbrHSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Jun 11 08:52:23 2026 GMT
            Not After : Jun 18 08:52:23 2026 GMT
        Subject: CN=6a2a7747-ed65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:c3:30:ee:05:ab:fa:fa:8e:d3:50:a8:24:
                    28:ef:e9:6d:57:ac:d1:cf:9c:93:06:05:d1:99:35:
                    a4:7b:f9:48:2c:49:d3:3d:27:d9:6e:a6:3a:84:d6:
                    df:3d:27:8c:87:64:12:09:ae:e9:ab:be:e4:7b:c7:
                    5b:a3:d0:8d:d2:60:cd:0e:63:82:8a:bd:ea:12:e1:
                    49:70:87:3a:d8:0b:f2:5b:f0:30:a2:f3:64:ff:54:
                    81:b2:83:7c:ea:d8:24:23:bf:29:e7:36:da:0a:39:
                    89:80:49:e2:c1:cb:cf:4e:03:09:59:1f:c1:dc:4a:
                    00:08:fd:07:3c:e1:a1:11:00:55:7a:66:f5:b7:60:
                    4b:a0:be:a2:8e:6f:2f:3a:49:d4:09:53:33:be:68:
                    d2:be:ff:e2:fa:68:a9:58:1d:ff:19:38:02:9c:bd:
                    df:70:64:7f:5f:9b:a9:77:90:cf:28:13:99:73:7c:
                    ef:b1:1a:f3:de:d0:2a:36:34:1e:eb:bd:26:5b:16:
                    a1:2a:9d:e5:25:42:f1:81:7c:80:04:3d:11:1c:90:
                    4d:1b:14:4d:74:56:06:86:70:bf:5e:4c:be:13:d8:
                    19:89:1a:b9:c6:91:10:e8:b2:2e:6d:17:8a:94:02:
                    29:1a:e6:ca:ff:cb:60:fe:08:0b:63:90:a5:be:92:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7F:75:CF:E8:3B:AF:FB:33:32:BD:A0:89:FF:64:92:AD:24:64:F9
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:d4:f3:24:b1:92:8a:0e:ec:70:bd:a4:47:1b:76:bd:ba:
         62:98:59:78:d0:3f:b7:87:b7:79:06:c7:d8:71:4a:e6:78:13:
         bb:38:3d:b5:22:ac:c5:e7:78:0e:3c:95:47:ed:70:cd:bd:98:
         19:43:7f:0c:3d:7f:ea:00:dd:02:87:63:1e:2d:fa:60:b0:f7:
         9c:57:ba:aa:d1:55:c4:bb:50:63:56:91:d5:52:25:20:ab:10:
         c0:01:e6:81:f8:6b:1c:7e:76:3c:6a:c0:45:63:4f:f4:35:6a:
         dc:ab:66:7d:57:ba:45:ed:75:52:a1:51:ad:43:fa:f5:02:66:
         5a:a1:08:26:26:dc:58:71:4f:53:86:62:7c:33:10:b7:48:c4:
         54:02:d6:98:d6:d8:70:67:ee:1a:e5:4b:e2:95:56:b7:57:d4:
         37:78:86:f3:12:62:e5:2d:27:8a:60:0c:c3:c5:91:1a:78:91:
         76:7a:f4:2c:50:1a:b4:ca:fe:32:15:f1:7c:a8:93:c4:c5:b5:
         1b:e6:7e:63:78:2c:5d:60:e7:80:46:c1:af:01:18:62:17:2f:
         e2:fa:6d:7a:4d:bb:2f:bd:6d:1d:73:83:65:9a:a3:7e:48:70:
         c7:9d:6b:a9:ee:fe:da:34:f4:85:1f:35:b5:7e:23:d9:32:5f:
         b0:cc:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:50 2026 by rpki-client