Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File:                     MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier:          Cb+49EkHzm/KzE7nry5NVFPqWFoyZtGJmiebxihVD9o=
Subject key identifier:   CB:1E:A0:72:66:20:C0:68:96:5B:AD:3D:A1:AB:77:1F:9D:BE:42:49
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer:       /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number:          0115
Signing time:             Thu 11 Jun 2026 08:22:41 +0000
Manifest this update:     Thu 11 Jun 2026 08:22:41 +0000
Manifest next update:     Thu 18 Jun 2026 08:22:41 +0000
Files and hashes:         1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: MnbjBz6TBtAmJhhAh3D27T9+Ba4mozXZiuQcK7cvwAg=)
                          2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: 8RwXImvokvSX9GnVWZYfh0skm/ZCGYwhT4s+TGjd6Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
        Validity
            Not Before: Jun 11 08:22:41 2026 GMT
            Not After : Jun 18 08:22:41 2026 GMT
        Subject: CN=6a2a7051-592c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:ea:ee:d0:34:bc:e3:f9:0d:94:15:0f:b8:
                    b0:eb:ea:fa:0d:e3:ee:bf:37:aa:7e:b7:f0:a5:84:
                    29:ac:c0:d4:98:4f:3d:47:9e:1b:d9:5b:c6:12:a2:
                    71:96:e0:ce:64:4d:4b:99:3f:14:5e:cc:50:09:bc:
                    80:36:43:4a:4d:d0:52:a1:d3:3e:47:3f:0d:c0:66:
                    b4:d3:07:8d:9b:ef:40:e8:d8:34:ac:7b:dc:a4:a6:
                    25:3a:38:92:45:12:15:27:21:ae:51:8a:4f:f5:ce:
                    ec:c6:7a:db:02:40:7a:e4:a0:0d:08:43:93:f1:ff:
                    5d:bc:02:79:0a:0b:d6:31:4d:b0:ba:0b:68:bb:6b:
                    a5:9f:96:4f:be:55:ff:a2:41:91:c2:86:ca:c5:44:
                    80:e7:21:2c:fb:b7:4f:80:eb:55:3f:3b:fa:2d:77:
                    de:a1:b0:ce:b2:78:02:2f:16:b6:c3:9d:16:2c:e3:
                    3c:6e:0c:10:78:ae:63:5b:1d:a4:f3:21:6c:aa:82:
                    40:84:65:e0:7f:49:2a:93:32:82:bc:3a:2f:a2:76:
                    81:86:67:67:89:3a:cd:9f:12:9d:a3:18:9d:ef:87:
                    26:9f:bf:6f:f5:9e:d1:d7:3c:98:56:48:ee:44:43:
                    c9:82:39:b4:86:ec:e1:fb:32:d8:e8:58:bb:f3:4e:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:A0:72:66:20:C0:68:96:5B:AD:3D:A1:AB:77:1F:9D:BE:42:49
            X509v3 Authority Key Identifier:
                keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:ce:a7:3d:d3:55:9d:7b:cf:94:5e:ea:ed:da:84:34:40:
         b8:11:14:9d:98:b8:cf:24:64:35:42:08:82:28:be:89:88:9b:
         4b:15:f8:bd:75:12:db:47:d9:45:3e:68:98:06:6b:11:43:05:
         a2:64:1c:dc:ee:49:cc:4c:ae:83:3e:a5:74:05:59:9d:aa:28:
         49:d4:65:37:18:1a:6a:e1:2a:a2:70:18:3d:9a:d6:86:68:f1:
         ae:fa:f5:55:d8:5a:71:7d:b1:99:a5:84:db:31:6e:a6:fd:5c:
         47:04:75:1f:c7:d8:84:f1:ba:3c:e0:bb:1f:4a:24:ea:04:10:
         32:c6:1b:dd:43:e0:e4:98:24:67:f5:ba:45:54:a3:d4:2e:2f:
         f3:ae:af:fc:dd:76:66:ad:f5:99:0a:fa:ad:2d:5f:40:37:83:
         0e:81:94:71:f7:44:cd:0a:93:e4:ed:d0:21:3b:c0:d3:9c:ec:
         47:a2:e9:12:5f:99:74:b0:42:3d:d1:9c:25:20:6f:0c:ed:f8:
         08:02:47:d3:99:9c:0d:75:ca:3e:24:90:9d:e0:66:93:4a:d1:
         15:7f:6c:55:ed:e0:77:a1:1b:8a:be:1c:8b:67:6a:03:51:39:
         33:8b:1b:4b:26:63:f2:84:ba:a7:4e:ff:07:d3:06:0f:f6:83:
         13:66:ac:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw
QkVFQTQ4RDAwHhcNMjYwNjExMDgyMjQxWhcNMjYwNjE4MDgyMjQxWjAYMRYwFAYD
VQQDEw02YTJhNzA1MS01OTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3k/q7tA0vOP5DZQVD7iw6+r6DePuvzeqfrfwpYQprMDUmE89R54b2VvGEqJx
luDOZE1LmT8UXsxQCbyANkNKTdBSodM+Rz8NwGa00weNm+9A6Ng0rHvcpKYlOjiS
RRIVJyGuUYpP9c7sxnrbAkB65KANCEOT8f9dvAJ5CgvWMU2wugtou2uln5ZPvlX/
okGRwobKxUSA5yEs+7dPgOtVPzv6LXfeobDOsngCLxa2w50WLOM8bgwQeK5jWx2k
8yFsqoJAhGXgf0kqkzKCvDovonaBhmdniTrNnxKdoxid74cmn79v9Z7R1zyYVkju
REPJgjm0huzh+zLY6Fi7807LBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMseoHJm
IMBollutPaGrdx+dvkJJMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx
QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2
c05zTjVsWmZBc2tMN3FTTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT4nOpz3TVZ17z5Re6u3ahDRAuBEUnZi4zyRkNUIIgii+iYibSxX4vXUS20fZ
RT5omAZrEUMFomQc3O5JzEyugz6ldAVZnaooSdRlNxgaauEqonAYPZrWhmjxrvr1
VdhacX2xmaWE2zFupv1cRwR1H8fYhPG6POC7H0ok6gQQMsYb3UPg5JgkZ/W6RVSj
1C4v866v/N12Zq31mQr6rS1fQDeDDoGUcfdEzQqT5O3QITvA05zsR6LpEl+ZdLBC
PdGcJSBvDO34CAJH05mcDXXKPiSQneBmk0rRFX9sVe3gd6Ebir4ci2dqA1E5M4sb
SyZj8oS6p07/B9MGD/aDE2as7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:48 2026 by rpki-client