Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File:                     tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier:          EfbDyCL0YcV+MnjPrRG4rxmP/tUs7l+EMa+EjpIr+PY=
Subject key identifier:   FC:8D:A0:52:68:19:4F:B2:93:CD:16:BA:70:23:A9:ED:52:C3:4D:D4
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer:       /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number:          050F
Signing time:             Fri 12 Jun 2026 23:40:37 +0000
Manifest this update:     Fri 12 Jun 2026 23:40:36 +0000
Manifest next update:     Fri 19 Jun 2026 23:40:36 +0000
Files and hashes:         1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: NmLUM+W9Hp6Cx5u3pJU8AwMea6/RigzLkSJDX9qbv2Y=)
                          2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: lZ1bwrjyN0UbXwL+oCg+Wnabt6ugA+6V0SyJb/rt1uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
        Validity
            Not Before: Jun 12 23:40:36 2026 GMT
            Not After : Jun 19 23:40:36 2026 GMT
        Subject: CN=6a2c98f5-727c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:cb:f2:92:88:59:43:d5:3d:69:07:0c:39:
                    aa:72:1b:d3:f4:39:3f:97:4c:78:c7:92:33:42:27:
                    54:58:43:af:b9:1e:5b:ae:20:ff:35:c6:e6:cf:a2:
                    27:0c:a0:4c:ca:82:35:e2:fe:ce:8e:0e:b2:f5:70:
                    f0:cb:93:65:9f:4a:90:69:7f:4e:98:0a:2a:21:dd:
                    15:62:02:2a:3b:47:bb:6a:02:a2:69:73:42:02:23:
                    fd:ca:b3:b8:28:46:fb:10:c2:39:1b:52:e5:58:58:
                    c4:46:fb:51:55:73:d0:66:86:7d:87:9e:32:d8:98:
                    8c:af:09:51:06:73:68:94:0d:a0:66:c0:38:09:f9:
                    28:19:ff:ad:66:0d:d7:b1:11:6b:fd:5c:05:8f:fd:
                    ce:60:49:a8:ba:8e:53:72:98:49:33:61:58:61:af:
                    be:6d:ae:2b:44:14:40:1a:99:aa:47:6b:5f:6b:76:
                    75:e2:5d:32:b2:79:0a:cd:1a:54:e1:e6:f1:4f:19:
                    2a:11:f1:a1:2e:fb:7c:2c:79:8d:69:b7:47:14:48:
                    09:39:2e:3e:9c:0b:57:5e:9e:51:f5:f3:d2:17:af:
                    05:d3:9e:03:ab:9b:37:59:55:f6:41:00:1e:21:76:
                    09:49:c0:c1:d6:be:d4:1a:29:7e:ac:79:97:6c:69:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:A0:52:68:19:4F:B2:93:CD:16:BA:70:23:A9:ED:52:C3:4D:D4
            X509v3 Authority Key Identifier:
                keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:88:74:f3:5e:ab:fb:51:92:1e:93:e3:88:f7:24:f3:73:
         a2:58:8a:e9:79:27:4e:88:96:56:a8:67:70:cb:67:6b:9d:61:
         ac:d5:1c:ab:51:17:db:97:15:c0:5d:02:fc:93:77:6b:e4:f9:
         0e:fb:7f:55:c1:79:83:26:a5:b2:74:c0:72:ae:e3:25:3a:c9:
         f1:58:fd:3b:8d:e5:10:a9:da:ef:5f:c7:8a:25:59:c7:b9:2e:
         67:0a:d6:52:f1:ee:76:47:e3:ba:38:67:57:65:f4:58:fa:ee:
         26:7e:90:e1:ef:0f:66:77:0f:ac:38:a1:0a:11:2c:d3:7d:0f:
         8c:bd:91:f0:a6:a4:4d:9c:02:ee:e5:2c:0c:ca:a6:a9:81:e2:
         38:c0:86:b3:2b:ac:3b:b6:f9:61:34:19:12:9a:1f:5d:c5:f4:
         07:fe:95:0d:6b:1e:7b:c2:4b:a1:49:23:0e:87:b3:03:be:5c:
         03:db:47:d3:fc:90:74:ba:04:65:80:25:63:e1:e4:a4:e3:c2:
         e8:c3:bc:f9:b5:4b:99:e8:24:f8:ba:91:dd:5a:ab:32:af:e7:
         cc:76:45:ee:20:fd:79:01:80:9a:fb:a0:b0:54:d7:23:76:ef:
         e7:86:0c:49:b9:34:cd:be:d4:57:14:75:2b:a5:09:d8:1b:2e:
         06:03:3f:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF
NEJFMzE0MTQwHhcNMjYwNjEyMjM0MDM2WhcNMjYwNjE5MjM0MDM2WjAYMRYwFAYD
VQQDEw02YTJjOThmNS03MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3o3L8pKIWUPVPWkHDDmqchvT9Dk/l0x4x5IzQidUWEOvuR5briD/Ncbmz6In
DKBMyoI14v7Ojg6y9XDwy5Nln0qQaX9OmAoqId0VYgIqO0e7agKiaXNCAiP9yrO4
KEb7EMI5G1LlWFjERvtRVXPQZoZ9h54y2JiMrwlRBnNolA2gZsA4CfkoGf+tZg3X
sRFr/VwFj/3OYEmouo5TcphJM2FYYa++ba4rRBRAGpmqR2tfa3Z14l0ysnkKzRpU
4ebxTxkqEfGhLvt8LHmNabdHFEgJOS4+nAtXXp5R9fPSF68F054Dq5s3WVX2QQAe
IXYJScDB1r7UGil+rHmXbGk2MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyNoFJo
GU+yk80WunAjqe1Sw03UMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3
MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF
VFM5MkRxcXJEaXJrdmpGQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYfiIdPNeq/tRkh6T44j3JPNzoliK6XknToiWVqhncMtna51hrNUcq1EX25cV
wF0C/JN3a+T5Dvt/VcF5gyalsnTAcq7jJTrJ8Vj9O43lEKna71/HiiVZx7kuZwrW
UvHudkfjujhnV2X0WPruJn6Q4e8PZncPrDihChEs030PjL2R8KakTZwC7uUsDMqm
qYHiOMCGsyusO7b5YTQZEpofXcX0B/6VDWsee8JLoUkjDoezA75cA9tH0/yQdLoE
ZYAlY+HkpOPC6MO8+bVLmegk+LqR3VqrMq/nzHZF7iD9eQGAmvugsFTXI3bv54YM
Sbk0zb7UVxR1K6UJ2BsuBgM/vQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:48 2026 by rpki-client