Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
File:                     DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json)
Hash identifier:          c5hpfwgxwLNhg45DtNs2KQ+35gmYKYrO3GlGVDmbj+4=
Subject key identifier:   0D:02:7F:A1:40:44:E9:12:34:6E:F5:07:49:F7:68:E5:18:E9:96:FA
Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02
Certificate issuer:       /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
Certificate serial:       03C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
Manifest number:          03C0
Signing time:             Sat 13 Jun 2026 00:39:47 +0000
Manifest this update:     Sat 13 Jun 2026 00:39:46 +0000
Manifest next update:     Sat 20 Jun 2026 00:39:46 +0000
Files and hashes:         1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: 54897ECDZ1aUx1MaO/2vS5W1DRSI0JlzbcPfz+2WtVM=)
                          2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: DNHpbbH0OLt61W1/5I9yLZt1WIT0NpFfbOWathJ7PW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl
                          rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
        Validity
            Not Before: Jun 13 00:39:46 2026 GMT
            Not After : Jun 20 00:39:46 2026 GMT
        Subject: CN=6a2ca6d3-8be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:55:aa:20:6b:17:60:f8:44:a5:aa:d9:01:
                    61:11:fe:d3:81:28:51:ef:75:44:92:2c:a2:31:ec:
                    30:f1:74:52:d0:a9:95:00:8b:cb:20:c1:4d:b3:03:
                    cf:e8:19:5b:68:85:88:1b:9d:90:6f:9d:4b:8d:eb:
                    a3:e0:59:4f:60:66:c4:be:b1:64:a5:1f:09:ac:36:
                    59:1c:08:f3:b6:e3:03:3a:d6:27:79:cb:a8:1a:d6:
                    b4:3f:4f:09:e6:ff:f5:cc:04:cb:87:ca:eb:c0:1b:
                    e0:a8:5a:e2:4c:0e:de:3b:54:aa:ec:1f:d3:6e:14:
                    ba:17:33:d5:b9:50:6e:3b:aa:4e:5e:00:54:7c:65:
                    6b:f5:f9:fb:78:79:01:06:6d:10:2f:30:eb:1f:2e:
                    9c:8f:d6:72:56:1a:a8:e9:f5:8c:7a:52:4f:17:11:
                    63:78:fa:f6:73:0a:36:7f:db:83:c5:a2:7c:7b:fa:
                    f0:b6:c6:fa:8a:9b:51:e8:eb:fe:47:47:ef:92:a6:
                    de:40:62:0d:9f:a1:e3:48:66:03:95:d9:d5:16:71:
                    f0:8d:d0:32:2b:1a:1a:66:44:6e:ff:bd:33:12:54:
                    ed:78:fe:5c:4f:0a:55:d0:09:19:17:59:8d:54:2d:
                    20:7b:4b:20:e6:9f:77:97:b2:e7:49:31:73:7b:e8:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:7F:A1:40:44:E9:12:34:6E:F5:07:49:F7:68:E5:18:E9:96:FA
            X509v3 Authority Key Identifier:
                keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:1d:d8:b6:60:b1:a0:05:0d:e2:a6:f0:07:f0:f8:fa:08:
         5a:8e:d3:0b:d5:e0:f5:55:4e:35:9b:b1:f6:0b:af:1a:e8:5b:
         38:84:85:83:b6:a7:05:e7:66:23:e8:b5:14:d9:42:96:25:a4:
         62:f3:db:e9:83:4d:cd:99:3d:2d:4e:0e:86:2c:57:5c:a8:d4:
         c2:c8:0f:e6:f9:cc:44:6a:5b:ae:50:d9:f3:d8:59:90:7c:f4:
         9f:bb:a8:a5:6a:de:9e:0a:07:a0:21:3d:a3:b8:d3:94:b8:2f:
         1b:88:1a:b3:f9:24:68:a1:8d:09:75:f6:dd:f0:f5:7d:6e:fe:
         2d:0f:4e:c5:66:09:eb:b5:d4:93:dd:29:06:47:8b:99:9f:6e:
         a5:a1:a7:b6:cd:cb:1e:73:13:a1:93:79:58:dc:1e:58:89:dc:
         c1:55:5b:41:1f:54:f2:2a:80:5d:67:fc:0a:9d:da:52:dd:9b:
         66:53:6d:c5:69:51:73:9a:e5:39:e6:e8:59:9b:09:21:e6:48:
         3e:da:4f:69:67:e6:3e:32:cc:9f:7f:b6:89:55:97:55:bf:ee:
         f7:1a:a2:bf:11:95:67:e5:7c:0e:d6:33:2f:b6:28:b4:8e:95:
         ca:de:e8:54:70:aa:04:d6:93:f7:5e:f5:21:5b:2c:8c:f1:51:
         c9:6b:ec:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0
MUY1NTlCMDIwHhcNMjYwNjEzMDAzOTQ2WhcNMjYwNjIwMDAzOTQ2WjAYMRYwFAYD
VQQDEw02YTJjYTZkMy04YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArL5VqiBrF2D4RKWq2QFhEf7TgShR73VEkiyiMeww8XRS0KmVAIvLIMFNswPP
6BlbaIWIG52Qb51Ljeuj4FlPYGbEvrFkpR8JrDZZHAjztuMDOtYnecuoGta0P08J
5v/1zATLh8rrwBvgqFriTA7eO1Sq7B/TbhS6FzPVuVBuO6pOXgBUfGVr9fn7eHkB
Bm0QLzDrHy6cj9ZyVhqo6fWMelJPFxFjePr2cwo2f9uDxaJ8e/rwtsb6iptR6Ov+
R0fvkqbeQGINn6HjSGYDldnVFnHwjdAyKxoaZkRu/70zElTteP5cTwpV0AkZF1mN
VC0ge0sg5p93l7LnSTFze+iz5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0Cf6FA
ROkSNG71B0n3aOUY6Zb6MB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB
NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh
TGZWSkxITWJaTlZCOVZtd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjV0d2LZgsaAFDeKm8Afw+PoIWo7TC9Xg9VVONZux9guvGuhbOISFg7anBedm
I+i1FNlCliWkYvPb6YNNzZk9LU4OhixXXKjUwsgP5vnMRGpbrlDZ89hZkHz0n7uo
pWrengoHoCE9o7jTlLgvG4gas/kkaKGNCXX23fD1fW7+LQ9OxWYJ67XUk90pBkeL
mZ9upaGnts3LHnMToZN5WNweWIncwVVbQR9U8iqAXWf8Cp3aUt2bZlNtxWlRc5rl
OeboWZsJIeZIPtpPaWfmPjLMn3+2iVWXVb/u9xqivxGVZ+V8DtYzL7YotI6Vyt7o
VHCqBNaT9171IVssjPFRyWvsfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:36 2026 by rpki-client