Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
File:                     NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json)
Hash identifier:          VxH2F7XjvyHf7V6OeUREFv+0i9dZg2bfJCugQrur9q4=
Subject key identifier:   FC:EE:4E:14:E9:60:29:ED:F8:C6:4B:FE:6E:17:FA:7C:AF:6C:90:24
Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4
Certificate issuer:       /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
Manifest number:          FE
Signing time:             Sat 13 Jun 2026 06:17:42 +0000
Manifest this update:     Sat 13 Jun 2026 06:17:42 +0000
Manifest next update:     Sat 20 Jun 2026 06:17:42 +0000
Files and hashes:         1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: BBC1Lxkhf7eT+MIFju1LSeiRz6Shf4q/F/QcqGHifkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl
                          rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4
        Validity
            Not Before: Jun 13 06:17:42 2026 GMT
            Not After : Jun 20 06:17:42 2026 GMT
        Subject: CN=6a2cf606-52b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:84:5a:e0:c8:47:00:48:92:39:1d:58:03:
                    16:cb:8b:5c:a3:27:0f:19:d6:7b:c1:c7:6c:37:1a:
                    75:67:91:3e:5c:94:43:0f:d3:90:03:c6:ec:1d:ee:
                    6d:ee:8f:b4:b8:a7:c8:cf:d1:40:bf:ce:e3:c9:78:
                    be:8d:df:d4:7b:09:67:7b:4e:8e:c1:a4:e6:55:bb:
                    9f:00:9b:da:cd:d4:88:59:31:b7:e4:4a:a0:71:0b:
                    c7:14:fb:c0:39:2d:ea:2e:23:76:03:02:a8:ed:3d:
                    24:3b:8c:1b:58:f9:b1:7d:6b:79:10:a6:c8:af:1d:
                    33:3e:de:98:f7:cc:ef:23:3f:c4:0d:72:52:b0:ff:
                    a6:df:5c:ff:24:7b:19:08:87:fc:89:e2:8a:47:c4:
                    4a:f9:f6:ed:86:ed:69:97:f9:7f:7a:bd:2c:99:1f:
                    27:d4:6d:7d:3a:80:7c:73:25:74:33:4a:1c:ab:30:
                    ee:b3:2a:c9:63:51:34:19:ff:96:22:d9:f3:ad:87:
                    15:ac:23:f4:6e:3f:8b:a4:b4:e2:1f:1a:00:89:1f:
                    9d:a0:d4:0d:e8:ea:32:c4:6a:be:16:6b:7f:c0:24:
                    3e:68:2b:78:59:a3:58:f1:42:8e:3c:6c:56:2c:98:
                    d2:dc:a4:fe:ac:49:0d:2f:de:64:a3:ca:27:31:89:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:4E:14:E9:60:29:ED:F8:C6:4B:FE:6E:17:FA:7C:AF:6C:90:24
            X509v3 Authority Key Identifier:
                keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:71:9c:4e:3b:54:c5:76:16:d2:32:58:f0:76:40:d5:6a:0a:
         18:26:a2:99:a6:c6:6b:ff:aa:99:eb:7b:47:fc:a9:93:d5:c2:
         1c:ed:c9:f4:06:05:ff:68:a6:28:0a:3b:db:0b:2f:14:cd:d6:
         d4:71:ba:b3:5d:dd:6f:05:c3:8d:bb:a7:6b:e5:30:bd:dd:46:
         89:72:87:4e:00:db:41:be:d2:52:86:d1:cd:02:fa:44:1a:4e:
         97:ee:ea:c7:45:4c:46:6d:5a:52:9d:d6:6b:83:48:19:8f:1d:
         68:4c:6d:9a:40:e8:44:7e:d8:12:76:63:30:5c:64:1e:45:20:
         f2:3a:91:b8:43:b5:4a:b1:f9:cb:be:27:91:66:23:3b:4a:e9:
         b0:d4:36:62:86:43:dd:58:93:38:65:4a:54:ec:02:ad:4c:fe:
         9c:19:90:b3:cc:27:fe:fc:aa:9c:f5:f3:2e:39:a2:33:05:26:
         ef:5a:7d:17:8b:07:e1:07:0e:a2:15:72:ef:19:2d:3c:fc:ac:
         35:6d:8d:32:9f:18:aa:be:ff:94:66:7c:1c:0a:cf:85:92:6a:
         81:76:9a:0c:c2:7a:2d:a1:27:18:1b:ee:f2:3b:23:ff:ba:8b:
         95:98:92:1f:cc:ed:fc:01:ee:cf:20:5c:07:e6:f1:a0:1b:39:
         04:9b:e7:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM2REIxMTAvBgNVBAUTKDM0MTdFQkJENzgyRDY1RjI5QzQ0RkMwQkRFNTgxQTRE
MUIyREVCQTQwHhcNMjYwNjEzMDYxNzQyWhcNMjYwNjIwMDYxNzQyWjAYMRYwFAYD
VQQDEw02YTJjZjYwNi01MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWGEWuDIRwBIkjkdWAMWy4tcoycPGdZ7wcdsNxp1Z5E+XJRDD9OQA8bsHe5t
7o+0uKfIz9FAv87jyXi+jd/Uewlne06OwaTmVbufAJvazdSIWTG35EqgcQvHFPvA
OS3qLiN2AwKo7T0kO4wbWPmxfWt5EKbIrx0zPt6Y98zvIz/EDXJSsP+m31z/JHsZ
CIf8ieKKR8RK+fbthu1pl/l/er0smR8n1G19OoB8cyV0M0ocqzDusyrJY1E0Gf+W
ItnzrYcVrCP0bj+LpLTiHxoAiR+doNQN6OoyxGq+Fmt/wCQ+aCt4WaNY8UKOPGxW
LJjS3KT+rEkNL95ko8onMYlaCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzuThTp
YCnt+MZL/m4X+nyvbJAkMB8GA1UdIwQYMBaAFDQX6714LWXynET8C95YGk0bLeuk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81OUFGQzIwQUU0
NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpmS2NSUHdMM2xnYVRSc3Q2
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzZEQi81OUFGQzIwQUU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpm
S2NSUHdMM2xnYVRSc3Q2NlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs3GcTjtUxXYW0jJY8HZA1WoKGCaimabGa/+qmet7R/ypk9XCHO3J9AYF/2im
KAo72wsvFM3W1HG6s13dbwXDjbuna+Uwvd1GiXKHTgDbQb7SUobRzQL6RBpOl+7q
x0VMRm1aUp3Wa4NIGY8daExtmkDoRH7YEnZjMFxkHkUg8jqRuEO1SrH5y74nkWYj
O0rpsNQ2YoZD3ViTOGVKVOwCrUz+nBmQs8wn/vyqnPXzLjmiMwUm71p9F4sH4QcO
ohVy7xktPPysNW2NMp8Yqr7/lGZ8HArPhZJqgXaaDMJ6LaEnGBvu8jsj/7qLlZiS
H8zt/AHuzyBcB+bxoBs5BJvnTw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:18 2026 by rpki-client