Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File:                     J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier:          te+qVP3FYekjxDWGMyFjjMFhxw+iG7owXRe0TwtCThQ=
Subject key identifier:   A3:5E:BA:1F:D3:39:64:1D:FD:14:D5:BD:F2:4E:EB:2D:85:F0:BC:6F
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer:       /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number:          3559
Signing time:             Fri 12 Jun 2026 14:22:28 +0000
Manifest this update:     Fri 12 Jun 2026 14:22:27 +0000
Manifest next update:     Fri 19 Jun 2026 14:22:27 +0000
Files and hashes:         1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: rAHefO4WGo6b/vYrgraxDyvkTxj4M3xxEzuLaP5sveQ=)
                          2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 2zWATfmM8von1Mw8uXlPyMdmDI3bUKTZAgUpWfoAgyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
        Validity
            Not Before: Jun 12 14:22:27 2026 GMT
            Not After : Jun 19 14:22:27 2026 GMT
        Subject: CN=6a2c1624-a06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:78:6e:f4:ca:69:15:a5:e5:45:8e:60:a8:
                    95:55:2b:1c:7d:25:8a:c6:8e:6d:0f:e6:6c:fc:6a:
                    f4:27:6a:e6:39:0b:e2:95:20:c0:ae:48:88:a7:a1:
                    91:a3:33:19:c0:ed:d0:de:51:33:cd:25:52:8d:2b:
                    e6:a0:40:f2:7c:d8:21:e5:5c:cb:93:d5:17:b4:73:
                    46:49:bc:1f:f7:82:9f:c0:aa:bf:77:b3:ec:86:7c:
                    b9:4d:92:57:aa:26:ec:e0:cf:63:f8:0a:cf:a7:90:
                    86:0d:9f:64:af:2c:fd:42:00:0a:02:ee:9b:5b:7e:
                    e0:00:d5:1e:12:c0:43:e3:37:0b:b5:d7:45:2b:55:
                    4a:d3:77:26:ad:75:0b:d9:f3:91:96:46:69:27:62:
                    26:12:a5:55:7a:8d:8b:6d:e5:e6:0c:79:60:1e:72:
                    1c:71:a1:25:92:50:0f:ef:d1:a2:13:ca:0b:7e:fe:
                    b2:41:af:4a:25:8f:a1:93:67:df:c5:0b:e6:e7:79:
                    72:72:5e:1f:4b:b2:35:53:97:94:f2:ec:88:2f:ff:
                    51:38:40:66:36:5f:8d:6e:8a:ec:07:f7:c7:5e:b1:
                    27:60:bf:b4:60:07:30:d5:67:2b:20:05:e3:52:48:
                    0f:e2:c0:38:d8:5c:60:1a:04:dd:c6:b4:e0:d7:9c:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5E:BA:1F:D3:39:64:1D:FD:14:D5:BD:F2:4E:EB:2D:85:F0:BC:6F
            X509v3 Authority Key Identifier:
                keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:69:0e:de:2e:24:70:ae:fb:8c:e7:e2:78:ea:04:26:21:
         8a:db:e6:9b:9d:1b:c1:18:28:c1:d8:3b:69:dc:99:a7:57:40:
         f3:c0:10:f5:cb:02:d9:4e:1c:46:3b:11:b2:e5:7a:39:3a:56:
         68:38:5a:09:29:59:1b:9b:a2:73:cc:d1:98:28:16:42:52:53:
         87:61:83:48:3e:e0:81:01:64:5e:ac:5a:e7:c4:57:79:a7:0a:
         64:20:69:7e:fa:f2:18:ae:5a:60:f1:5f:54:6b:b3:6f:76:f6:
         e5:7d:2c:74:ca:b1:fe:15:52:6b:51:3a:41:d2:5a:5d:22:08:
         4c:b3:76:4e:c9:b4:c6:a8:f8:d4:70:7d:4b:36:5f:03:87:bc:
         4f:42:0b:82:c1:9d:c5:f8:d7:7e:37:3b:41:43:03:d5:85:bb:
         26:d7:e6:e7:d7:ca:89:62:87:24:e5:51:be:4a:84:a4:63:8d:
         9b:05:3a:a2:31:f0:ee:f8:50:a2:c8:b7:c9:84:dc:6f:65:dc:
         ab:8f:82:3c:0b:8e:f4:2b:16:74:f2:65:7a:81:4e:94:b6:bc:
         a3:e0:6e:7e:7d:bc:d9:be:e3:ea:b4:56:94:72:71:35:a4:72:
         4c:05:ad:c1:12:f8:06:58:99:af:5d:43:e4:52:23:ab:76:89:
         a3:4c:92:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2
QTE4NjJENjcwHhcNMjYwNjEyMTQyMjI3WhcNMjYwNjE5MTQyMjI3WjAYMRYwFAYD
VQQDEw02YTJjMTYyNC1hMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvl4bvTKaRWl5UWOYKiVVSscfSWKxo5tD+Zs/Gr0J2rmOQvilSDArkiIp6GR
ozMZwO3Q3lEzzSVSjSvmoEDyfNgh5VzLk9UXtHNGSbwf94KfwKq/d7Pshny5TZJX
qibs4M9j+ArPp5CGDZ9kryz9QgAKAu6bW37gANUeEsBD4zcLtddFK1VK03cmrXUL
2fORlkZpJ2ImEqVVeo2LbeXmDHlgHnIccaElklAP79GiE8oLfv6yQa9KJY+hk2ff
xQvm53lycl4fS7I1U5eU8uyIL/9ROEBmNl+NborsB/fHXrEnYL+0YAcw1WcrIAXj
UkgP4sA42FxgGgTdxrTg15zwTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNeuh/T
OWQd/RTVvfJO6y2F8LxvMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT
eGppMmxqTENMSmRxR0dMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ79pDt4uJHCu+4zn4njqBCYhitvmm50bwRgowdg7adyZp1dA88AQ9csC2U4c
RjsRsuV6OTpWaDhaCSlZG5uic8zRmCgWQlJTh2GDSD7ggQFkXqxa58RXeacKZCBp
fvryGK5aYPFfVGuzb3b25X0sdMqx/hVSa1E6QdJaXSIITLN2Tsm0xqj41HB9SzZf
A4e8T0ILgsGdxfjXfjc7QUMD1YW7Jtfm59fKiWKHJOVRvkqEpGONmwU6ojHw7vhQ
osi3yYTcb2Xcq4+CPAuO9CsWdPJleoFOlLa8o+Bufn282b7j6rRWlHJxNaRyTAWt
wRL4BliZr11D5FIjq3aJo0ySQg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:15 2026 by rpki-client