Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
File:                     4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json)
Hash identifier:          eLe8UQ7ifiltl9CIFlT4xL4JfDad1Ui2xL3CQK/LuLI=
Subject key identifier:   85:80:FC:C1:D2:D2:20:EF:90:87:BE:92:64:51:72:EE:E5:A2:A4:C8
Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89
Certificate issuer:       /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
Certificate serial:       16E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
Manifest number:          16D2
Signing time:             Fri 12 Jun 2026 16:37:00 +0000
Manifest this update:     Fri 12 Jun 2026 16:36:59 +0000
Manifest next update:     Fri 19 Jun 2026 16:36:59 +0000
Files and hashes:         1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: Qz78wfkxDRYo5sRqlA2bXZYmXsFYQLYA9TDbKG9jXyA=)
                          2: F6EC99AE26A111F1A6B92646BF833773.roa (hash: F3guSpGm8GcV6RFX5BxyucYNTiqMtw8fTbZ/W0lp6OM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl
                          rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5859 (0x16e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689
        Validity
            Not Before: Jun 12 16:36:59 2026 GMT
            Not After : Jun 19 16:36:59 2026 GMT
        Subject: CN=6a2c35ac-f603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:da:a6:7c:4f:f5:74:9c:9c:e4:5d:48:7f:
                    d8:0f:32:8a:2b:59:cd:07:24:0f:23:25:6a:49:84:
                    55:3a:09:a3:54:ae:02:51:ec:a3:a8:ae:c7:f5:69:
                    82:85:3e:21:2e:ca:f8:0c:3b:60:a1:02:34:71:45:
                    ba:de:72:87:84:b9:cc:93:4f:21:5e:85:31:cb:66:
                    da:46:4e:91:76:d8:20:b4:f7:91:b7:68:48:c3:c0:
                    12:9b:52:c6:7a:b7:22:02:87:51:cd:db:76:b8:0e:
                    71:2d:5d:d7:fa:32:b7:aa:0a:72:c3:ed:e2:c0:e1:
                    01:f6:82:6b:15:24:b9:17:59:dc:33:a8:27:c1:b2:
                    13:3f:8b:88:38:4f:27:90:d7:5f:8c:09:9b:a6:da:
                    44:08:ab:59:2d:4e:a5:4c:37:04:3c:a5:2d:a3:36:
                    68:d1:3c:1e:e3:3d:6f:1b:32:4a:77:11:1a:b5:d0:
                    b6:96:a8:62:e1:f6:28:68:04:a2:db:26:27:e0:7a:
                    9f:88:7f:0e:18:9a:1b:88:c3:b6:d0:87:31:4f:fd:
                    10:aa:f2:90:c9:f9:74:9e:c8:2c:85:c0:15:f7:7b:
                    d0:ea:29:9f:a2:59:61:c6:8b:e6:1d:3f:7d:ae:24:
                    0a:f3:14:6c:6f:9f:63:cb:37:91:64:ee:c7:32:61:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:80:FC:C1:D2:D2:20:EF:90:87:BE:92:64:51:72:EE:E5:A2:A4:C8
            X509v3 Authority Key Identifier:
                keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:38:ae:54:93:c8:c0:78:0f:8c:a2:29:66:21:77:b4:5d:c5:
         5b:60:99:5c:ad:46:95:ed:0d:34:5c:0f:b1:bb:14:3e:bd:d8:
         06:77:04:21:db:cd:0c:23:79:09:1c:f7:37:e9:24:fd:06:21:
         ba:39:40:4e:5d:57:c1:7f:62:8e:46:d1:98:ac:73:26:d6:f3:
         a5:7f:dc:12:72:85:11:a6:a8:55:dd:45:35:b8:96:15:02:61:
         3c:46:31:ed:75:20:c3:4d:f8:9b:7f:3d:d8:a1:eb:36:8d:30:
         db:93:fd:24:dc:a5:3a:ad:11:ad:b9:d6:0d:42:ba:1e:9a:a2:
         8a:04:7d:d5:74:c6:32:39:ce:6c:28:08:10:00:fc:40:ed:42:
         96:f2:50:52:8e:dd:00:0c:26:ee:f4:80:61:94:50:cc:b9:55:
         02:4d:23:a6:04:d0:8f:e0:c1:55:46:39:14:30:37:55:30:8c:
         b9:f1:99:c3:9a:97:89:4f:06:f0:a1:fb:d0:77:3f:94:33:d7:
         fa:fe:f5:1c:1c:5f:c3:55:c6:da:e9:8b:b0:88:51:3d:20:eb:
         95:41:b6:c0:52:05:f0:ec:72:7a:a2:09:d0:ee:a8:a1:c2:a3:
         73:ee:80:c7:d5:7a:14:65:72:6b:b7:17:82:54:04:2c:c4:de:
         e7:4a:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:03 2026 by rpki-client