Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File:                     spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier:          a7ktNA5Nol+bFGEbecVrSYoehsh8TU4g3rU7eQKYLAc=
Subject key identifier:   A9:D5:AE:81:78:A4:9B:DA:A5:3F:37:BE:E8:E9:1E:49:14:71:91:D7
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer:       /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number:          023C
Signing time:             Sat 13 Jun 2026 02:33:45 +0000
Manifest this update:     Sat 13 Jun 2026 02:33:45 +0000
Manifest next update:     Sat 20 Jun 2026 02:33:45 +0000
Files and hashes:         1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: +Is+n5F9dF0cCtSsHvOV6bKJcJ9+YMHoAyAUd1LQMd0=)
                          2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: 9E0ybMJC/4hTirDP7PsTEfHbwzsW24pJ3Ey1HCuEb6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
                          rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
        Validity
            Not Before: Jun 13 02:33:45 2026 GMT
            Not After : Jun 20 02:33:45 2026 GMT
        Subject: CN=6a2cc189-989c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:35:f7:18:fc:c4:2e:b2:ed:95:13:1a:0a:
                    ec:4f:48:47:69:0a:9a:8c:89:bf:b6:77:43:78:00:
                    8e:c6:a4:94:da:23:d2:13:14:99:10:69:d4:6d:04:
                    bc:36:b8:54:53:7d:4e:01:9b:ef:e2:cd:0d:bb:95:
                    1d:37:c6:ac:91:7d:7c:2e:fe:a3:26:f4:04:63:ca:
                    bd:84:af:bb:2d:5a:ac:64:51:99:b4:d6:9a:6d:7a:
                    6a:d8:09:f8:3c:18:56:e5:a9:78:9b:c5:f0:67:98:
                    96:ce:3c:26:f7:e4:6b:04:db:da:f7:ca:3a:4a:69:
                    7a:4a:ae:af:fa:5a:9e:76:da:4a:0d:df:b4:1d:2c:
                    5d:6a:c2:b4:52:39:33:4b:c6:99:0f:e9:15:aa:7b:
                    3d:13:b4:06:5d:30:5b:f7:1f:8b:f5:b1:cd:2f:a9:
                    4b:ab:01:64:60:cd:2d:55:7b:b8:04:45:00:39:d6:
                    bd:26:96:98:60:08:af:89:86:9d:39:10:cd:cb:63:
                    f3:6b:a4:51:b0:a7:79:94:dc:64:68:73:5b:cc:b4:
                    31:ee:d5:57:be:c0:68:da:1f:54:53:c2:d3:80:e9:
                    5e:28:df:fe:b6:98:2b:2b:ca:cc:cc:27:aa:e8:c5:
                    38:7a:c6:8a:91:b0:29:db:75:2e:cd:01:e2:2b:5a:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D5:AE:81:78:A4:9B:DA:A5:3F:37:BE:E8:E9:1E:49:14:71:91:D7
            X509v3 Authority Key Identifier:
                keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:db:5c:4c:c8:30:8a:4f:8a:96:66:e3:2c:3b:4c:31:d0:b1:
         3e:b4:1b:aa:36:ab:bd:df:81:d4:18:d9:61:c4:c2:8d:86:39:
         2e:6a:bd:22:4b:6f:fe:aa:7f:ec:02:88:58:3a:ac:6e:27:0e:
         3f:d4:fe:30:83:a0:cf:80:17:42:27:b7:26:14:dd:b6:13:22:
         be:bd:99:8f:a6:68:01:7c:6c:29:d4:bf:dc:d9:ae:28:e5:e2:
         cf:1e:76:43:9a:64:72:00:ed:f5:df:b7:d9:1f:c2:35:8b:19:
         6f:c2:62:b0:06:2d:16:85:19:4a:dd:56:99:a1:f0:6f:21:fa:
         52:c7:3a:ad:75:f8:94:48:4c:8b:42:f3:f1:e9:cb:2b:c9:4b:
         8b:20:21:3e:5c:52:e6:33:d0:53:2c:36:a8:0a:7a:39:75:3c:
         53:2d:73:77:bb:7b:b1:ad:36:9b:d5:34:3b:fc:a8:0f:89:23:
         62:91:6c:8f:52:bd:a7:19:1f:f9:d4:5b:9d:97:e8:50:c3:55:
         ca:93:95:3c:5b:3c:1a:5c:15:14:0b:61:ed:f7:40:29:27:3c:
         04:49:52:f7:43:61:ca:c9:3e:0b:06:a8:0e:de:78:64:9a:be:
         35:87:1e:2f:49:78:94:7d:0a:ee:29:0a:f8:92:17:00:b5:d4:
         e1:7c:fa:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My
Q0E1NDU0NUEwHhcNMjYwNjEzMDIzMzQ1WhcNMjYwNjIwMDIzMzQ1WjAYMRYwFAYD
VQQDEw02YTJjYzE4OS05ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4jg19xj8xC6y7ZUTGgrsT0hHaQqajIm/tndDeACOxqSU2iPSExSZEGnUbQS8
NrhUU31OAZvv4s0Nu5UdN8askX18Lv6jJvQEY8q9hK+7LVqsZFGZtNaabXpq2An4
PBhW5al4m8XwZ5iWzjwm9+RrBNva98o6Sml6Sq6v+lqedtpKDd+0HSxdasK0Ujkz
S8aZD+kVqns9E7QGXTBb9x+L9bHNL6lLqwFkYM0tVXu4BEUAOda9JpaYYAiviYad
ORDNy2Pza6RRsKd5lNxkaHNbzLQx7tVXvsBo2h9UU8LTgOleKN/+tpgrK8rMzCeq
6MU4esaKkbAp23UuzQHiK1p/MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnVroF4
pJvapT83vujpHkkUcZHXMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx
MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ
RFJWeFEzemZDOHdzcFVWRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg9tcTMgwik+KlmbjLDtMMdCxPrQbqjarvd+B1BjZYcTCjYY5Lmq9Iktv/qp/
7AKIWDqsbicOP9T+MIOgz4AXQie3JhTdthMivr2Zj6ZoAXxsKdS/3NmuKOXizx52
Q5pkcgDt9d+32R/CNYsZb8JisAYtFoUZSt1WmaHwbyH6Usc6rXX4lEhMi0Lz8enL
K8lLiyAhPlxS5jPQUyw2qAp6OXU8Uy1zd7t7sa02m9U0O/yoD4kjYpFsj1K9pxkf
+dRbnZfoUMNVypOVPFs8GlwVFAth7fdAKSc8BElS90Nhysk+CwaoDt54ZJq+NYce
L0l4lH0K7ikK+JIXALXU4Xz6/A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:27 2026 by rpki-client