Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
File:                     0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json)
Hash identifier:          EEPnpeWYx/AP4Ak+X6ohDKvuwpXqeek6o8my+XudWSI=
Subject key identifier:   E6:8F:D5:02:AD:C7:65:36:41:D6:4E:7B:A2:5B:DF:79:66:24:C6:9E
Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64
Certificate issuer:       /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64
Certificate serial:       1CAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
Manifest number:          1C9B
Signing time:             Fri 12 Jun 2026 16:08:33 +0000
Manifest this update:     Fri 12 Jun 2026 16:08:33 +0000
Manifest next update:     Fri 19 Jun 2026 16:08:33 +0000
Files and hashes:         1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: A/+CboWmh9CR/0ww47IWK7pEEXrK7AMo5v8u7FWkpQk=)
                          2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: QCwKUkVOKXGLScCAxDR4Vgfe1Cz3Vfsmtw6cpnZ9ZlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7342 (0x1cae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64
        Validity
            Not Before: Jun 12 16:08:33 2026 GMT
            Not After : Jun 19 16:08:33 2026 GMT
        Subject: CN=6a2c2f01-3e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:02:66:96:1b:21:57:6b:b0:55:0e:f4:3e:
                    77:67:78:ae:68:df:16:f8:d4:85:3e:b7:ce:28:7a:
                    69:0b:c5:41:3f:f1:33:9d:bd:55:94:da:3c:1f:63:
                    7c:d3:94:f4:93:f7:36:0d:9f:02:68:8b:f8:12:54:
                    06:19:72:76:7e:d3:6e:d9:ee:f5:42:20:f7:fb:1d:
                    29:09:c6:e9:6a:fc:d2:c4:2b:8d:63:58:6e:74:17:
                    ef:30:10:30:e6:39:28:cf:a3:c2:90:c4:65:4f:5b:
                    30:ca:72:ec:5e:be:49:fe:cf:a8:3a:c7:9f:55:40:
                    e3:2f:37:86:8f:8a:38:cc:9d:ec:a6:19:6b:63:40:
                    0a:f9:b7:c6:8e:4b:3c:53:89:35:66:ab:76:65:06:
                    2f:10:89:8a:30:05:96:2b:11:4f:de:67:1c:d3:c9:
                    c2:e4:31:54:b5:6d:1c:5d:2b:0d:7b:5c:a8:50:13:
                    de:e6:6c:6f:9b:f7:62:b7:46:a1:ee:6c:ab:1b:8c:
                    b5:c5:04:09:e4:80:b7:6b:ba:1b:65:5e:17:27:fd:
                    4c:31:0c:4c:c1:52:4b:d0:65:98:da:ef:e9:89:d6:
                    cb:c6:55:e1:84:64:a6:f7:0a:a5:65:ed:8d:13:27:
                    5d:81:e5:2e:6d:f6:ae:8f:41:31:ef:0c:83:5c:29:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:D5:02:AD:C7:65:36:41:D6:4E:7B:A2:5B:DF:79:66:24:C6:9E
            X509v3 Authority Key Identifier:
                keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:df:db:ea:ee:61:6d:b5:c5:b0:7d:27:eb:09:8b:de:6d:
         0b:d0:3b:48:18:22:ee:59:a0:29:da:39:81:f1:4b:a1:89:d4:
         70:43:8d:55:22:6b:37:2f:d4:a7:45:ad:54:26:6b:33:1a:4c:
         17:69:9d:8f:1e:5a:6f:e3:f4:84:6f:5e:14:fc:03:35:97:8e:
         2f:03:a6:4f:e3:b5:e9:d6:d6:0d:60:9c:fa:0d:aa:ec:3f:5a:
         13:c1:e6:7b:b8:9a:d1:7e:8d:d3:6f:dc:ea:4a:91:f1:67:21:
         dc:1b:ac:a5:45:b0:5a:a6:16:f4:00:44:4b:75:c1:95:33:f5:
         9b:4c:81:fe:52:31:c3:15:f5:3b:87:c1:7c:48:dd:a2:47:0d:
         ad:8c:1e:96:1f:15:9d:ea:ec:e0:25:d1:04:f9:c9:7c:f9:5a:
         6f:ad:dc:0e:fb:bd:0b:b9:8d:7f:66:67:d2:ac:1f:14:da:61:
         66:ed:23:62:52:f8:81:c2:b9:8f:bc:ff:35:b9:b5:89:0b:8e:
         74:8b:0b:06:1e:21:c0:67:c5:78:e2:42:9f:33:7e:88:35:c9:
         4e:ba:98:f4:ec:a4:fa:7a:0d:d9:af:3a:ef:54:90:30:8d:0e:
         74:dd:0d:dd:45:f5:6d:d6:8a:86:7a:ab:0f:e7:36:f7:4b:fa:
         4f:e4:1c:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG
Qjk2NTFGNjQwHhcNMjYwNjEyMTYwODMzWhcNMjYwNjE5MTYwODMzWjAYMRYwFAYD
VQQDEw02YTJjMmYwMS0zZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmxkCZpYbIVdrsFUO9D53Z3iuaN8W+NSFPrfOKHppC8VBP/Eznb1VlNo8H2N8
05T0k/c2DZ8CaIv4ElQGGXJ2ftNu2e71QiD3+x0pCcbpavzSxCuNY1hudBfvMBAw
5jkoz6PCkMRlT1swynLsXr5J/s+oOsefVUDjLzeGj4o4zJ3sphlrY0AK+bfGjks8
U4k1Zqt2ZQYvEImKMAWWKxFP3mcc08nC5DFUtW0cXSsNe1yoUBPe5mxvm/dit0ah
7myrG4y1xQQJ5IC3a7obZV4XJ/1MMQxMwVJL0GWY2u/pidbLxlXhhGSm9wqlZe2N
EyddgeUubfauj0Ex7wyDXCksWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaP1QKt
x2U2QdZOe6Jb33lmJMaeMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3
MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM
cDVtT29paGh1cEQ3bGxIMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi9Hf2+ruYW21xbB9J+sJi95tC9A7SBgi7lmgKdo5gfFLoYnUcEONVSJrNy/U
p0WtVCZrMxpMF2mdjx5ab+P0hG9eFPwDNZeOLwOmT+O16dbWDWCc+g2q7D9aE8Hm
e7ia0X6N02/c6kqR8Wch3BuspUWwWqYW9ABES3XBlTP1m0yB/lIxwxX1O4fBfEjd
okcNrYwelh8Vners4CXRBPnJfPlab63cDvu9C7mNf2Zn0qwfFNphZu0jYlL4gcK5
j7z/Nbm1iQuOdIsLBh4hwGfFeOJCnzN+iDXJTrqY9Oyk+noN2a8671SQMI0OdN0N
3UX1bdaKhnqrD+c290v6T+Qcqw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:27 2026 by rpki-client