Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File:                     lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier:          F3HbU6xofIfjv71QQJ/Ig0AyoCj/+C0tWfyML8xbzIc=
Subject key identifier:   75:30:0D:6D:C4:FA:FC:0D:75:F9:7B:2F:FC:09:4A:40:0C:86:02:B9
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer:       /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number:          012B
Signing time:             Sat 13 Jun 2026 05:44:29 +0000
Manifest this update:     Sat 13 Jun 2026 05:44:29 +0000
Manifest next update:     Sat 20 Jun 2026 05:44:29 +0000
Files and hashes:         1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: wvTOI2UhAruCYfg3owLM3RdzlIVs3J0VB315ZGQIZOQ=)
                          2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=)
                          3: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=)
                          4: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
                          rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
        Validity
            Not Before: Jun 13 05:44:29 2026 GMT
            Not After : Jun 20 05:44:29 2026 GMT
        Subject: CN=6a2cee3d-642b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:9e:af:f7:4d:46:a8:30:03:9c:54:c3:2d:
                    cf:03:23:cf:8e:d4:52:cd:0f:f6:7d:b5:20:f7:d7:
                    14:bd:5d:24:d9:e9:16:ee:dd:b0:1c:ee:82:7a:33:
                    3d:8d:70:44:68:a6:5d:48:b0:91:24:bc:80:97:e6:
                    13:f3:e8:6f:80:7d:da:3d:35:87:d7:b9:ac:43:93:
                    b0:dd:8d:61:6d:09:ed:d1:6d:61:bf:80:7d:55:a2:
                    24:b3:e2:df:da:82:c0:e0:1b:cf:2b:a7:d7:3f:d8:
                    a0:02:6c:81:b4:4d:8d:9f:65:43:db:6f:45:24:cf:
                    3b:52:27:25:2f:0b:13:a6:ed:30:fc:b2:f7:ea:fa:
                    c5:97:e3:2b:fd:e0:69:ce:0e:5c:03:f7:81:b7:45:
                    7a:86:05:93:91:95:87:24:1b:7b:cf:12:25:fa:9d:
                    48:02:a3:32:ca:02:a0:8c:f4:86:2c:cc:c5:c9:dd:
                    11:a1:51:2f:b4:c4:7a:91:02:40:e9:53:10:a3:17:
                    6c:1e:a1:48:7d:07:6d:91:35:5a:a4:41:8d:49:85:
                    aa:81:0f:b0:62:6e:06:9e:a7:42:e6:2c:a0:31:15:
                    dc:2f:08:e8:8b:07:f0:86:85:00:e8:de:cb:61:86:
                    19:7a:99:03:99:5a:3f:69:a6:8c:96:db:12:7c:8d:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:0D:6D:C4:FA:FC:0D:75:F9:7B:2F:FC:09:4A:40:0C:86:02:B9
            X509v3 Authority Key Identifier:
                keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:22:7e:02:bf:92:f6:4b:c3:e0:59:25:9a:b8:79:ba:7a:
         48:cb:45:e7:c5:6e:7d:03:4d:ce:1f:96:6c:47:1f:8f:e6:9a:
         a7:ab:e9:7c:54:e5:5e:15:5d:17:34:00:52:9d:38:9e:dc:db:
         6c:16:23:f0:01:8f:18:28:0e:07:65:33:a0:a4:a3:e9:34:ca:
         11:14:0c:b6:4d:39:26:ab:1a:94:7f:bf:4a:7a:fc:50:b6:21:
         de:29:17:37:87:3f:8d:e4:fb:4c:60:7f:08:60:d0:39:38:62:
         8b:08:a6:27:ab:9f:0f:d7:16:be:a7:5d:23:fa:be:c8:39:82:
         22:14:59:bd:c3:59:47:fa:42:71:53:6f:68:7a:04:38:be:f3:
         26:11:20:36:bf:99:5e:5c:07:f2:58:d2:0d:54:7e:5a:3a:45:
         5e:75:b2:f5:06:99:66:aa:36:e8:b2:11:e1:fd:e2:a1:2f:09:
         97:a0:f2:8f:a6:f5:83:0d:74:71:4a:00:53:2f:e9:85:f8:db:
         55:ac:34:dd:28:ee:cc:4d:51:10:8a:fc:c6:16:ff:a3:fd:4c:
         2b:c1:5b:70:a3:92:b8:86:eb:1e:ad:31:99:b9:18:72:d4:d9:
         4d:cf:81:93:8c:69:7f:f4:b8:b5:00:a2:af:6c:65:08:39:60:
         45:c3:32:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB
REJDRkRBRkQwHhcNMjYwNjEzMDU0NDI5WhcNMjYwNjIwMDU0NDI5WjAYMRYwFAYD
VQQDEw02YTJjZWUzZC02NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8+er/dNRqgwA5xUwy3PAyPPjtRSzQ/2fbUg99cUvV0k2ekW7t2wHO6CejM9
jXBEaKZdSLCRJLyAl+YT8+hvgH3aPTWH17msQ5Ow3Y1hbQnt0W1hv4B9VaIks+Lf
2oLA4BvPK6fXP9igAmyBtE2Nn2VD229FJM87UiclLwsTpu0w/LL36vrFl+Mr/eBp
zg5cA/eBt0V6hgWTkZWHJBt7zxIl+p1IAqMyygKgjPSGLMzFyd0RoVEvtMR6kQJA
6VMQoxdsHqFIfQdtkTVapEGNSYWqgQ+wYm4GnqdC5iygMRXcLwjoiwfwhoUA6N7L
YYYZepkDmVo/aaaMltsSfI20TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUwDW3E
+vwNdfl7L/wJSkAMhgK5MB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC
Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz
ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAorEifgK/kvZLw+BZJZq4ebp6SMtF58VufQNNzh+WbEcfj+aap6vpfFTlXhVd
FzQAUp04ntzbbBYj8AGPGCgOB2UzoKSj6TTKERQMtk05JqsalH+/Snr8ULYh3ikX
N4c/jeT7TGB/CGDQOThiiwimJ6ufD9cWvqddI/q+yDmCIhRZvcNZR/pCcVNvaHoE
OL7zJhEgNr+ZXlwH8ljSDVR+WjpFXnWy9QaZZqo26LIR4f3ioS8Jl6Dyj6b1gw10
cUoAUy/phfjbVaw03SjuzE1REIr8xhb/o/1MK8FbcKOSuIbrHq0xmbkYctTZTc+B
k4xpf/S4tQCir2xlCDlgRcMy9A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:12 2026 by rpki-client