Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File:                     rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier:          B0OBIz0F5swyMIOewToqoZFVYQwtfKRog2k7Hp3pxVE=
Subject key identifier:   8B:7B:A8:F9:C9:6F:76:5C:99:76:B2:E7:75:98:56:58:D6:C7:FD:0A
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer:       /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial:       054D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number:          053F
Signing time:             Fri 12 Jun 2026 23:31:43 +0000
Manifest this update:     Fri 12 Jun 2026 23:31:43 +0000
Manifest next update:     Fri 19 Jun 2026 23:31:43 +0000
Files and hashes:         1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: 5uwPunvgKTkGSInWfWZXZVaPOeSLOP9S1pi+nXQOMM0=)
                          2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=)
                          3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
                          rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
        Validity
            Not Before: Jun 12 23:31:43 2026 GMT
            Not After : Jun 19 23:31:43 2026 GMT
        Subject: CN=6a2c96df-c83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:5a:53:e2:1e:30:25:97:f1:df:e3:44:f8:
                    06:33:17:e7:b9:19:8e:eb:c1:33:4c:a9:db:0c:a1:
                    9a:ae:25:69:a8:77:2d:d8:89:30:1d:2a:ad:e2:a3:
                    55:1e:db:52:9b:e7:15:ca:3e:4a:aa:f9:58:d1:1a:
                    9e:b0:7a:77:31:19:85:03:58:b1:5d:0d:a1:c2:0b:
                    87:59:21:1d:de:78:3b:f5:b1:1f:83:af:b0:c5:af:
                    5f:6d:fa:9c:9a:dc:1a:76:66:7a:c3:f3:85:3a:71:
                    70:74:ce:1b:b5:34:bb:e0:b3:41:43:04:ee:c2:e7:
                    a5:fb:29:ae:96:f5:7a:ad:98:2f:26:e6:f6:20:f1:
                    ee:3a:7a:91:6e:e6:a7:c0:38:72:a2:b3:c8:a9:cb:
                    f5:ac:6b:f7:a1:54:b8:85:e2:90:bc:5e:e9:61:d6:
                    d5:14:7e:4e:64:d4:4e:26:04:6d:c8:48:bc:47:61:
                    2a:8b:f5:27:8f:f3:a6:44:19:3b:b3:a4:0e:41:af:
                    bf:49:de:e1:1a:ba:23:ef:5c:18:cf:5e:37:7f:62:
                    2b:2f:32:15:e9:c8:54:64:7e:d8:54:27:b6:c6:0d:
                    c0:b6:2b:a1:df:21:20:ea:b8:81:ba:b3:f1:f3:fa:
                    14:7f:9f:f0:73:30:df:02:a6:22:65:59:46:78:66:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7B:A8:F9:C9:6F:76:5C:99:76:B2:E7:75:98:56:58:D6:C7:FD:0A
            X509v3 Authority Key Identifier:
                keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c9:35:f1:bf:ca:39:cc:71:88:cb:1f:d0:2d:ac:4f:2d:02:
         cc:3a:0c:60:8b:bd:d7:bb:eb:10:38:07:24:2c:99:0d:9a:42:
         df:b7:a5:ab:20:fd:9b:82:e6:f9:19:44:c1:12:a5:59:d1:72:
         c1:52:be:28:93:53:ea:41:96:cd:c0:6a:d0:1c:43:31:e8:ca:
         ee:9a:fb:06:b7:8b:3e:59:b3:02:f3:a4:59:5f:bb:92:77:93:
         ff:30:63:54:83:1f:36:05:2b:80:d9:62:04:ec:78:28:8c:6f:
         7b:0c:0a:98:94:61:44:90:c0:f2:97:3e:26:f2:5a:51:56:d1:
         3b:35:84:14:11:a1:a3:3d:f0:d3:01:b9:47:9f:15:cc:b1:5e:
         6b:63:1c:59:4b:01:77:55:e8:ba:1a:17:ee:a7:7d:14:ef:ce:
         ed:55:0e:5d:c2:9c:b0:2e:a7:0c:97:47:8d:c6:44:c2:cc:41:
         a9:28:87:67:33:c1:40:c5:cb:0f:f6:4b:8d:61:27:25:e6:6d:
         15:aa:06:15:88:33:47:17:62:07:0f:9a:5c:bb:4c:84:1f:78:
         99:83:c2:89:ef:c1:fe:99:07:72:61:19:d1:26:c8:77:2c:e2:
         90:cc:19:ed:1d:ea:13:98:67:40:aa:9d:bd:e0:8a:fa:2b:16:
         a2:24:8f:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4
RjNCN0E5MjUwHhcNMjYwNjEyMjMzMTQzWhcNMjYwNjE5MjMzMTQzWjAYMRYwFAYD
VQQDEw02YTJjOTZkZi1jODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnJaU+IeMCWX8d/jRPgGMxfnuRmO68EzTKnbDKGariVpqHct2IkwHSqt4qNV
HttSm+cVyj5KqvlY0RqesHp3MRmFA1ixXQ2hwguHWSEd3ng79bEfg6+wxa9fbfqc
mtwadmZ6w/OFOnFwdM4btTS74LNBQwTuwuel+ymulvV6rZgvJub2IPHuOnqRbuan
wDhyorPIqcv1rGv3oVS4heKQvF7pYdbVFH5OZNROJgRtyEi8R2Eqi/Unj/OmRBk7
s6QOQa+/Sd7hGroj71wYz143f2IrLzIV6chUZH7YVCe2xg3Atiuh3yEg6riBurPx
8/oUf5/wczDfAqYiZVlGeGYLfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIt7qPnJ
b3ZcmXay53WYVljWx/0KMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1
MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y
aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsk18b/KOcxxiMsf0C2sTy0CzDoMYIu917vrEDgHJCyZDZpC37elqyD9m4Lm
+RlEwRKlWdFywVK+KJNT6kGWzcBq0BxDMejK7pr7BreLPlmzAvOkWV+7kneT/zBj
VIMfNgUrgNliBOx4KIxvewwKmJRhRJDA8pc+JvJaUVbROzWEFBGhoz3w0wG5R58V
zLFea2McWUsBd1XouhoX7qd9FO/O7VUOXcKcsC6nDJdHjcZEwsxBqSiHZzPBQMXL
D/ZLjWEnJeZtFaoGFYgzRxdiBw+aXLtMhB94mYPCie/B/pkHcmEZ0SbIdyzikMwZ
7R3qE5hnQKqdveCK+isWoiSPCw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:23 2026 by rpki-client