Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
File:                     0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json)
Hash identifier:          FmTXqq5O+9SWSZyaujzuQtrj4CVJrYNLqyIKJMN0qxI=
Subject key identifier:   5A:C4:A5:66:3B:9C:E5:D1:F4:AA:52:98:2B:EE:18:4F:6F:35:9A:83
Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11
Certificate issuer:       /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
Certificate serial:       072D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
Manifest number:          0725
Signing time:             Fri 12 Jun 2026 21:56:40 +0000
Manifest this update:     Fri 12 Jun 2026 21:56:39 +0000
Manifest next update:     Fri 19 Jun 2026 21:56:39 +0000
Files and hashes:         1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: giA229FDgv/WPxaw8Dmdc3OMwOE+GEdAxUEti3OOjos=)
                          2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: oeB8/47xsF+hpt5i8iGPJ2EnXsL0GaoatzlImZS5Dnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl
                          rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
        Validity
            Not Before: Jun 12 21:56:39 2026 GMT
            Not After : Jun 19 21:56:39 2026 GMT
        Subject: CN=6a2c8098-ab93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:70:f3:38:b0:a1:52:81:51:97:cf:71:91:
                    22:57:a6:a9:ae:93:cc:b1:bb:db:55:6e:63:6f:fe:
                    59:9b:39:ff:38:e5:05:8d:f9:15:52:19:de:5d:f7:
                    44:18:f9:be:6a:d7:f8:d0:44:b9:07:de:36:61:c2:
                    6f:fd:f1:fd:c3:33:41:f7:0d:2a:af:f8:52:63:2e:
                    74:6e:67:9f:b7:e3:ff:6b:da:83:69:b0:86:7d:2e:
                    02:84:15:4f:1b:38:e3:53:91:27:3d:d5:59:e0:13:
                    c8:50:f7:65:0c:68:3b:8e:26:80:31:c6:dc:3a:85:
                    b3:e2:d4:38:62:e5:14:c3:cb:a9:ad:30:4d:19:fd:
                    e3:fd:7d:4e:46:ce:8c:df:ca:1f:ae:f7:e3:57:4b:
                    49:a7:20:31:94:54:0c:58:c6:24:3b:1b:44:47:28:
                    0f:0e:3b:bd:84:7b:37:c9:df:30:9b:de:f1:9a:81:
                    11:23:b7:d8:48:8e:af:9c:b8:96:9f:c0:90:43:7d:
                    a0:70:5c:2c:74:7e:8e:59:ce:cd:0d:56:2b:8f:cc:
                    ba:20:6c:4b:86:1a:6a:7c:53:f3:5c:2e:2a:05:ce:
                    be:7b:37:8c:5b:eb:48:67:16:48:9b:00:70:28:59:
                    a3:a3:9c:3e:6c:c6:39:a0:a1:1e:fa:da:7a:05:59:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C4:A5:66:3B:9C:E5:D1:F4:AA:52:98:2B:EE:18:4F:6F:35:9A:83
            X509v3 Authority Key Identifier:
                keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:27:62:9c:87:a8:ef:49:90:94:88:7a:c5:a5:ab:83:11:
         06:85:e8:b1:f2:b1:9d:c2:4b:29:f8:54:0f:8f:a8:ab:7d:f5:
         6f:d9:12:fd:90:bf:b6:48:a9:d9:2d:22:a9:fe:a1:ac:d4:d3:
         bb:3d:5b:45:27:20:c2:b6:b1:93:36:89:60:d7:7f:8c:de:51:
         a8:9e:4f:bc:ba:d9:cd:76:cb:a0:eb:04:22:54:9d:38:3d:85:
         b7:64:b2:0e:65:ad:53:b4:10:c0:39:09:79:49:7c:13:02:a2:
         b3:2c:ab:d7:c0:03:9b:10:64:1a:15:aa:17:94:83:4a:42:b9:
         eb:7b:3e:1d:4a:d2:f5:5e:c5:38:0e:a9:d9:9f:e4:60:16:fa:
         31:0a:62:17:c6:f1:ed:7e:ad:aa:29:0e:d0:59:00:be:99:15:
         6c:0a:27:eb:bb:77:2d:f9:af:be:46:3d:4e:4f:87:73:aa:ed:
         22:37:2d:05:e8:5b:78:73:e6:ec:70:3c:4b:cf:89:ce:c4:79:
         b5:e4:1d:67:cd:ef:f2:dd:5a:23:f3:46:d8:77:82:27:25:2e:
         58:3f:25:41:c8:af:a7:7b:f7:63:11:3f:76:06:4a:ac:97:e7:
         4e:0e:c3:f0:07:7a:bf:45:d3:85:fe:eb:3c:48:e9:db:b0:53:
         03:10:bb:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5
Mzk3NzI5MTEwHhcNMjYwNjEyMjE1NjM5WhcNMjYwNjE5MjE1NjM5WjAYMRYwFAYD
VQQDEw02YTJjODA5OC1hYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/Rw8ziwoVKBUZfPcZEiV6aprpPMsbvbVW5jb/5Zmzn/OOUFjfkVUhneXfdE
GPm+atf40ES5B942YcJv/fH9wzNB9w0qr/hSYy50bmeft+P/a9qDabCGfS4ChBVP
GzjjU5EnPdVZ4BPIUPdlDGg7jiaAMcbcOoWz4tQ4YuUUw8uprTBNGf3j/X1ORs6M
38ofrvfjV0tJpyAxlFQMWMYkOxtERygPDju9hHs3yd8wm97xmoERI7fYSI6vnLiW
n8CQQ32gcFwsdH6OWc7NDVYrj8y6IGxLhhpqfFPzXC4qBc6+ezeMW+tIZxZImwBw
KFmjo5w+bMY5oKEe+tp6BVm5uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrEpWY7
nOXR9KpSmCvuGE9vNZqDMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy
MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL
UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy
VndVRFdNb3BNTmlUbDNLUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhh8nYpyHqO9JkJSIesWlq4MRBoXosfKxncJLKfhUD4+oq331b9kS/ZC/tkip
2S0iqf6hrNTTuz1bRScgwraxkzaJYNd/jN5RqJ5PvLrZzXbLoOsEIlSdOD2Ft2Sy
DmWtU7QQwDkJeUl8EwKisyyr18ADmxBkGhWqF5SDSkK563s+HUrS9V7FOA6p2Z/k
YBb6MQpiF8bx7X6tqikO0FkAvpkVbAon67t3LfmvvkY9Tk+Hc6rtIjctBehbeHPm
7HA8S8+JzsR5teQdZ83v8t1aI/NG2HeCJyUuWD8lQcivp3v3YxE/dgZKrJfnTg7D
8Ad6v0XThf7rPEjp27BTAxC75w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:09 2026 by rpki-client