Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
File:                     JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json)
Hash identifier:          Qk8GhS+LU7phI/o/VnL0gpE/v95+qhButlBGQCay80U=
Subject key identifier:   DA:9F:36:5B:51:A2:DB:E3:AE:04:E9:00:79:81:D9:95:01:A3:B0:4F
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       25BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
Manifest number:          25A3
Signing time:             Fri 12 Jun 2026 15:42:48 +0000
Manifest this update:     Fri 12 Jun 2026 15:42:47 +0000
Manifest next update:     Fri 19 Jun 2026 15:42:47 +0000
Files and hashes:         1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: g3z8s42BDT7/oFJjRVnIoB9s75UPqI7JR085clvvAs4=)
                          2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: hS+s1nIXItEij56ye/fB0UYF3lqIxxiOI5UAFSDn8N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9659 (0x25bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: Jun 12 15:42:47 2026 GMT
            Not After : Jun 19 15:42:47 2026 GMT
        Subject: CN=6a2c28f8-fbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f9:94:9e:b6:70:7c:49:6b:04:bb:c8:de:2f:
                    ce:cf:72:61:91:31:62:e1:c0:d9:93:56:4f:eb:4f:
                    d5:51:28:f8:85:df:59:ae:3d:af:dd:73:ed:f2:74:
                    7c:db:53:e9:b5:4c:a3:a7:68:c7:a4:68:b9:93:f0:
                    25:19:2a:41:b7:6c:4f:1e:d1:3c:9c:88:ac:7e:74:
                    5c:7e:e4:48:ae:96:85:59:91:42:28:1a:56:c7:85:
                    a4:1e:8b:63:92:76:a9:dd:2e:ae:58:6b:11:d0:83:
                    38:15:e7:31:6b:04:23:bc:fe:3b:34:43:f5:ff:18:
                    32:e4:7d:e1:7d:28:9d:a8:d3:98:36:a8:72:47:53:
                    5e:c6:88:6c:8e:77:91:3c:0d:2f:28:b8:02:3f:38:
                    73:5a:8f:21:8c:b0:04:e3:ce:d3:6c:72:0e:ac:ca:
                    8b:aa:f4:6c:13:29:13:b7:ba:8f:65:1e:47:f9:07:
                    a0:58:14:c9:c9:b2:57:a4:2a:d2:b2:e4:db:7a:ec:
                    e3:76:b3:7b:3d:38:10:61:d2:87:3c:28:e0:63:c9:
                    d2:1d:73:fa:39:7c:57:87:40:2a:98:8d:9e:1c:01:
                    b1:3a:de:50:17:05:01:56:67:92:fa:ca:66:a9:30:
                    90:f9:6e:f0:6d:a9:f6:01:aa:75:62:7a:e2:02:d3:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:36:5B:51:A2:DB:E3:AE:04:E9:00:79:81:D9:95:01:A3:B0:4F
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6c:6e:34:36:07:aa:f2:02:be:b5:d5:ed:5c:9f:1d:4c:4e:
         03:0e:c2:3b:f6:b8:e1:01:da:b0:26:f4:db:78:db:23:47:2d:
         ba:75:a7:76:da:10:ce:f5:48:cf:8f:29:d5:2a:fa:5a:63:a1:
         93:7d:03:94:c3:13:b3:82:2e:b0:5d:a8:d6:b9:1e:fe:ef:d7:
         a1:9b:6b:e9:b9:1a:72:a1:ef:4b:ee:34:d0:33:bc:6c:1c:47:
         a4:f5:4f:89:5a:07:4a:e5:72:84:b7:9f:45:1a:ee:c2:ea:ec:
         3f:73:df:45:b2:2a:ec:c4:af:09:c5:fd:b1:0d:4c:94:6f:5f:
         8e:a1:f6:e5:87:a1:7b:d5:57:da:87:3e:19:cf:90:cf:2f:85:
         0c:cf:4b:b0:22:bc:b7:8d:31:30:9d:85:b0:ea:e2:1c:d7:6f:
         51:ae:93:28:96:e4:c8:48:17:18:fd:c2:88:c2:ba:19:76:8b:
         21:4f:4c:92:33:34:42:54:68:a8:68:3c:34:1e:76:ac:28:6b:
         df:e8:8f:08:b4:04:2a:4f:88:b1:d7:33:fd:d7:46:30:d1:cc:
         ff:3c:d6:3e:dd:b5:cd:2a:7a:88:87:2c:c2:b9:d4:96:89:4c:
         28:20:6d:b0:7c:6e:6b:ba:be:6b:6c:49:33:02:87:bd:e1:c1:
         bc:90:f3:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2
NDlENTY0QzQwHhcNMjYwNjEyMTU0MjQ3WhcNMjYwNjE5MTU0MjQ3WjAYMRYwFAYD
VQQDEw02YTJjMjhmOC1mYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+vmUnrZwfElrBLvI3i/Oz3JhkTFi4cDZk1ZP60/VUSj4hd9Zrj2v3XPt8nR8
21PptUyjp2jHpGi5k/AlGSpBt2xPHtE8nIisfnRcfuRIrpaFWZFCKBpWx4WkHotj
knap3S6uWGsR0IM4FecxawQjvP47NEP1/xgy5H3hfSidqNOYNqhyR1NexohsjneR
PA0vKLgCPzhzWo8hjLAE487TbHIOrMqLqvRsEykTt7qPZR5H+QegWBTJybJXpCrS
suTbeuzjdrN7PTgQYdKHPCjgY8nSHXP6OXxXh0AqmI2eHAGxOt5QFwUBVmeS+spm
qTCQ+W7wban2Aap1YnriAtPcfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqfNltR
otvjrgTpAHmB2ZUBo7BPMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1
QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V
VkhJRHZRVVdqTU5rblZaTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo2xuNDYHqvICvrXV7VyfHUxOAw7CO/a44QHasCb023jbI0ctunWndtoQzvVI
z48p1Sr6WmOhk30DlMMTs4IusF2o1rke/u/XoZtr6bkacqHvS+400DO8bBxHpPVP
iVoHSuVyhLefRRruwursP3PfRbIq7MSvCcX9sQ1MlG9fjqH25Yehe9VX2oc+Gc+Q
zy+FDM9LsCK8t40xMJ2FsOriHNdvUa6TKJbkyEgXGP3CiMK6GXaLIU9MkjM0QlRo
qGg8NB52rChr3+iPCLQEKk+Isdcz/ddGMNHM/zzWPt21zSp6iIcswrnUlolMKCBt
sHxua7q+a2xJMwKHveHBvJDzcA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:39 2026 by rpki-client