Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File:                     IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier:          pRDfGL4UlqqELaWEIb8NblsuymN8K8/hbxf8fQcjDOI=
Subject key identifier:   6A:72:BE:CB:D9:8E:D1:8E:CF:A8:68:20:8D:2D:8E:4A:25:36:FC:6D
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer:       /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number:          0797
Signing time:             Fri 12 Jun 2026 21:35:03 +0000
Manifest this update:     Fri 12 Jun 2026 21:35:02 +0000
Manifest next update:     Fri 19 Jun 2026 21:35:02 +0000
Files and hashes:         1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: aITOPF2ervbDN6b5M8PBhLttxYxAKck8ZL7jMHEhlZQ=)
                          2: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=)
                          3: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=)
                          4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
        Validity
            Not Before: Jun 12 21:35:02 2026 GMT
            Not After : Jun 19 21:35:02 2026 GMT
        Subject: CN=6a2c7b87-af41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:5c:93:1e:e0:f5:9a:9e:54:1c:67:f9:de:
                    ae:48:b2:18:4f:a1:d5:50:ec:b4:b0:ba:5a:ee:d7:
                    53:f9:06:74:65:26:42:a9:c9:fe:09:d4:cd:ee:ee:
                    6a:d5:ab:6b:98:ac:46:68:49:b1:57:f4:ff:19:0a:
                    dc:05:24:42:f3:c6:31:4c:eb:bf:4c:d8:f4:91:d0:
                    a4:28:7b:d8:a0:05:00:01:90:6b:8b:62:f0:0f:c9:
                    b2:37:c6:17:1a:2d:fc:2b:03:98:19:63:37:31:6e:
                    12:7d:30:25:0d:00:02:49:03:9e:21:04:75:5e:d2:
                    54:ac:c4:f5:1e:cb:85:a3:cc:4c:70:02:04:51:27:
                    c2:fb:f9:a7:3b:9e:08:d3:04:4c:bc:5f:7e:51:06:
                    18:49:51:38:72:34:b8:7c:49:9a:df:95:ce:98:a6:
                    e1:2d:61:79:51:db:28:97:2c:9e:04:aa:58:13:da:
                    e3:06:18:05:ae:1a:d2:17:d2:c4:31:8d:69:e8:7a:
                    b3:c4:24:47:51:62:00:23:e3:ee:b9:56:6b:53:f9:
                    2d:d2:57:ad:8f:26:68:78:62:17:a2:85:51:2a:83:
                    ae:2f:8d:37:fb:ce:ac:c2:dd:f0:78:f6:af:05:0f:
                    ad:bd:8e:9f:33:f9:07:c1:1d:b4:35:2f:da:33:ff:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:72:BE:CB:D9:8E:D1:8E:CF:A8:68:20:8D:2D:8E:4A:25:36:FC:6D
            X509v3 Authority Key Identifier:
                keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:f5:6b:b5:56:d5:32:4c:14:44:a1:f6:39:b0:e2:b5:f3:
         bb:c0:39:75:5f:d2:79:c9:d1:08:da:b5:65:35:ba:f8:1c:4a:
         d2:f8:2a:16:3e:f5:9a:8c:69:1e:3e:fc:d2:cc:72:32:65:46:
         2b:48:5f:38:a7:0a:a5:95:40:a7:f0:e9:e1:bc:ab:13:5f:c9:
         81:76:05:10:22:9a:42:bc:76:4c:b0:f8:7c:71:76:4e:e6:e2:
         41:b7:5d:e2:8b:af:6b:2b:9e:26:35:e8:59:bd:df:01:5e:ac:
         b5:f1:1f:f2:8b:41:0c:67:59:1f:b1:03:db:e1:12:26:9c:a2:
         08:91:e6:16:19:25:6c:64:99:1a:09:19:a9:6f:0c:06:6c:f1:
         29:10:b4:39:18:6d:b0:8b:66:bd:cd:bd:96:26:5e:a8:01:ba:
         d1:0f:67:ff:9f:69:38:1b:ce:ea:fa:a8:8f:67:d1:9c:02:42:
         95:1d:f5:33:b3:e8:25:b9:a7:62:d9:87:be:dc:bb:42:6f:0b:
         91:e1:d6:5d:d7:a4:f1:f6:9e:fc:e2:cd:c0:a4:7e:a1:82:30:
         4f:c1:03:39:1d:fe:96:e3:64:60:fd:0a:1c:47:5c:c2:1f:97:
         f6:69:0e:44:c7:98:cd:d9:94:98:16:7d:af:b7:30:fb:50:a8:
         3b:97:1a:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx
QzhFNDNGMjQwHhcNMjYwNjEyMjEzNTAyWhcNMjYwNjE5MjEzNTAyWjAYMRYwFAYD
VQQDEw02YTJjN2I4Ny1hZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsapckx7g9ZqeVBxn+d6uSLIYT6HVUOy0sLpa7tdT+QZ0ZSZCqcn+CdTN7u5q
1atrmKxGaEmxV/T/GQrcBSRC88YxTOu/TNj0kdCkKHvYoAUAAZBri2LwD8myN8YX
Gi38KwOYGWM3MW4SfTAlDQACSQOeIQR1XtJUrMT1HsuFo8xMcAIEUSfC+/mnO54I
0wRMvF9+UQYYSVE4cjS4fEma35XOmKbhLWF5UdsolyyeBKpYE9rjBhgFrhrSF9LE
MY1p6HqzxCRHUWIAI+PuuVZrU/kt0letjyZoeGIXooVRKoOuL403+86swt3wePav
BQ+tvY6fM/kHwR20NS/aM/8YoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpyvsvZ
jtGOz6hoII0tjkolNvxtMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5
NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5
R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhaL1a7VW1TJMFESh9jmw4rXzu8A5dV/SecnRCNq1ZTW6+BxK0vgqFj71moxp
Hj780sxyMmVGK0hfOKcKpZVAp/Dp4byrE1/JgXYFECKaQrx2TLD4fHF2TubiQbdd
4ouvayueJjXoWb3fAV6stfEf8otBDGdZH7ED2+ESJpyiCJHmFhklbGSZGgkZqW8M
BmzxKRC0ORhtsItmvc29liZeqAG60Q9n/59pOBvO6vqoj2fRnAJClR31M7PoJbmn
YtmHvty7Qm8LkeHWXdek8fae/OLNwKR+oYIwT8EDOR3+luNkYP0KHEdcwh+X9mkO
RMeYzdmUmBZ9r7cw+1CoO5caDg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:46 2026 by rpki-client