Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File:                     z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier:          8UwpfF9x6L2xVBsL/P+IHZsU5tnNJfb2grZrFodivbg=
Subject key identifier:   F4:DE:A3:6D:CA:09:A4:DC:AA:15:B6:6E:50:0B:9A:F3:8C:44:5C:F5
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer:       /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number:          B5
Signing time:             Thu 11 Jun 2026 09:23:03 +0000
Manifest this update:     Thu 11 Jun 2026 09:23:03 +0000
Manifest next update:     Thu 18 Jun 2026 09:23:03 +0000
Files and hashes:         1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: rzC+95yhc3TtEGDEenZ/OBIRFwaPthunzsmiWDKe858=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
                          rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
        Validity
            Not Before: Jun 11 09:23:03 2026 GMT
            Not After : Jun 18 09:23:03 2026 GMT
        Subject: CN=6a2a7e77-9201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:d0:0b:47:fc:f9:16:3b:9c:43:20:a1:99:
                    46:c1:73:a5:c0:17:c3:ed:82:7a:d4:0b:d2:f2:63:
                    fb:60:0c:e0:ee:8b:18:78:e2:a2:8b:60:61:75:13:
                    52:c6:d9:2f:8a:6a:c0:48:39:69:28:9b:51:49:4d:
                    90:9d:0e:59:6e:9a:d1:f1:62:eb:04:40:1f:cd:01:
                    56:a3:0d:5a:5a:24:d2:04:82:43:5c:ba:cf:ad:fb:
                    1c:80:21:59:1e:80:f4:29:4e:e0:2a:58:a7:4f:72:
                    df:95:fd:25:9d:ac:bc:68:e2:30:b1:10:83:e3:86:
                    30:cb:ae:d5:12:09:a2:94:5b:d9:73:ee:1b:95:a3:
                    fe:9d:ab:fb:81:d1:4e:81:1b:93:ee:07:fe:59:16:
                    c3:cb:2f:1c:90:30:0c:08:33:52:fe:81:86:0a:29:
                    ba:2e:a2:1b:27:f4:73:0a:2e:0d:70:73:da:40:fd:
                    80:2b:56:9a:70:4a:88:e6:98:7a:54:96:e5:34:46:
                    50:3e:03:58:da:fc:b6:46:4c:f9:46:3c:57:1d:72:
                    81:6f:3c:92:ba:1d:c0:21:0a:9a:ef:5f:60:65:d5:
                    5b:55:c2:18:52:5b:4a:7b:20:61:58:73:d8:85:48:
                    c9:db:26:73:c3:8f:d6:91:93:18:dc:02:b3:c4:c8:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:A3:6D:CA:09:A4:DC:AA:15:B6:6E:50:0B:9A:F3:8C:44:5C:F5
            X509v3 Authority Key Identifier:
                keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:07:9c:9f:13:e1:71:df:5f:5a:ff:32:a5:f1:c3:b2:ba:
         88:2c:fe:fa:4e:f2:7d:05:a6:0a:2c:b3:f2:02:5e:4e:e4:62:
         0c:5e:d4:2b:93:52:46:0b:af:53:bf:d6:98:27:8d:ed:ab:ac:
         1e:1c:4c:16:28:c7:be:46:c3:ae:91:04:49:f7:eb:a3:81:55:
         e6:66:de:c6:9b:c8:32:2b:aa:c5:82:3d:6b:6b:a4:a3:1d:54:
         3c:4e:73:b7:60:1d:4a:57:c7:3a:39:a5:39:3c:48:e9:e3:e8:
         9e:48:bb:48:6f:cf:98:38:b0:a9:a5:d9:2d:56:e2:06:db:a1:
         08:89:5b:2c:61:97:89:1e:a6:33:33:5e:6d:27:84:69:71:f1:
         9e:33:1f:67:c3:2a:60:1f:4b:d6:d7:59:7c:10:c3:b3:10:9a:
         a6:f1:c7:7c:bf:07:10:5f:7b:3e:1c:2a:e8:58:54:4f:42:b1:
         61:90:45:76:99:b9:20:8b:48:c1:9d:09:35:24:fc:d6:6e:72:
         66:2a:b6:81:04:d6:ff:da:87:32:11:e6:e7:98:97:f6:fb:ad:
         d0:03:15:bb:19:b1:95:2d:a7:7f:be:24:b3:c7:a6:00:95:10:
         a3:0b:b3:75:b5:79:c2:90:5d:67:aa:47:7b:91:75:d8:04:72:
         5b:05:a2:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI1QzgxMTAvBgNVBAUTKENGNkYxMkRCREU0QkU5MTM0NTgxNThGNUM3Nzg1Qzcx
MjkwODU1NUMwHhcNMjYwNjExMDkyMzAzWhcNMjYwNjE4MDkyMzAzWjAYMRYwFAYD
VQQDEw02YTJhN2U3Ny05MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqebQC0f8+RY7nEMgoZlGwXOlwBfD7YJ61AvS8mP7YAzg7osYeOKii2BhdRNS
xtkvimrASDlpKJtRSU2QnQ5ZbprR8WLrBEAfzQFWow1aWiTSBIJDXLrPrfscgCFZ
HoD0KU7gKlinT3Lflf0lnay8aOIwsRCD44Ywy67VEgmilFvZc+4blaP+nav7gdFO
gRuT7gf+WRbDyy8ckDAMCDNS/oGGCim6LqIbJ/RzCi4NcHPaQP2AK1aacEqI5ph6
VJblNEZQPgNY2vy2Rkz5RjxXHXKBbzySuh3AIQqa719gZdVbVcIYUltKeyBhWHPY
hUjJ2yZzw4/WkZMY3AKzxMgGswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTeo23K
CaTcqhW2blALmvOMRFz1MB8GA1UdIwQYMBaAFM9vEtveS+kTRYFY9cd4XHEpCFVc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjVDOC8zQkNEMUJFQTU1
OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZSTkZnVmoxeDNoY2NTa0lW
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjVDOC8zQkNEMUJFQTU1OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZS
TkZnVmoxeDNoY2NTa0lWVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsv0HnJ8T4XHfX1r/MqXxw7K6iCz++k7yfQWmCiyz8gJeTuRiDF7UK5NSRguv
U7/WmCeN7ausHhxMFijHvkbDrpEESffro4FV5mbexpvIMiuqxYI9a2ukox1UPE5z
t2AdSlfHOjmlOTxI6ePonki7SG/PmDiwqaXZLVbiBtuhCIlbLGGXiR6mMzNebSeE
aXHxnjMfZ8MqYB9L1tdZfBDDsxCapvHHfL8HEF97Phwq6FhUT0KxYZBFdpm5IItI
wZ0JNST81m5yZiq2gQTW/9qHMhHm55iX9vut0AMVuxmxlS2nf74ks8emAJUQowuz
dbV5wpBdZ6pHe5F12ARyWwWi8w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:12 2026 by rpki-client