Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
File:                     4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json)
Hash identifier:          OskwaX9a7xfKMglRPc602AN2LMiwnJUq7CUh3+vWZcQ=
Subject key identifier:   8F:92:84:A5:88:75:D3:A0:F6:F2:3D:CB:67:87:42:6E:94:71:A9:23
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Certificate issuer:       /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
Manifest number:          35
Signing time:             Wed 17 Jun 2026 08:55:19 +0000
Manifest this update:     Wed 17 Jun 2026 08:55:19 +0000
Manifest next update:     Wed 24 Jun 2026 08:55:19 +0000
Files and hashes:         1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: SKxJcukSaOHZRg2GRAHN/yBisRdKAPmunefAQRsMQQg=)
                          2: 192C64F2252311F18B88524DC4833773.roa (hash: 7vrnXHB3qUyKbQqkedi+hisuqsIblcG1yBKlH+P3Y3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
        Validity
            Not Before: Jun 17 08:55:19 2026 GMT
            Not After : Jun 24 08:55:19 2026 GMT
        Subject: CN=6a3260f7-4440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:84:b7:51:29:18:68:dd:c7:ed:c3:5f:f2:
                    ea:0b:4c:e1:61:b1:bf:28:6a:83:84:63:c6:db:bd:
                    1f:56:f2:c9:93:54:e2:9f:38:2a:25:b4:d3:33:d6:
                    03:1a:47:be:de:f9:05:7d:dc:c6:32:41:6a:c1:c5:
                    34:4e:f9:a7:b0:4a:f1:56:d0:2a:5d:7c:8d:05:5d:
                    1e:05:f3:a9:e6:d2:a1:09:cb:45:e0:8f:71:bb:f3:
                    2a:4e:ac:dc:1c:0b:da:b3:d5:0b:03:ed:f0:bb:60:
                    93:be:45:df:94:21:6d:db:89:eb:c7:70:8c:b1:ab:
                    f7:d4:be:62:4b:27:e3:ca:e8:53:ea:27:dd:a8:7b:
                    5d:75:fb:8c:a2:56:62:9a:75:26:3e:4e:d3:cf:12:
                    24:e4:7d:81:b2:3c:c5:37:35:ac:e2:7e:bd:3e:a5:
                    3a:39:76:2e:b3:ac:30:57:5f:71:9e:9b:0e:3c:e4:
                    d7:2c:6e:de:88:64:0c:7a:af:f0:09:72:04:ca:af:
                    68:8a:b7:09:e6:5d:2a:06:f7:5b:05:b6:9f:7a:72:
                    3a:47:74:e4:21:73:c8:a7:f5:b6:4b:fb:e3:72:0d:
                    44:09:43:35:af:2a:0f:fe:75:4c:34:10:92:62:d1:
                    6a:2f:40:5d:da:76:b6:cd:66:ea:97:bc:0b:35:e4:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:84:A5:88:75:D3:A0:F6:F2:3D:CB:67:87:42:6E:94:71:A9:23
            X509v3 Authority Key Identifier:
                keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:73:85:50:40:1d:10:af:d7:17:63:3b:cc:ea:98:a6:82:
         41:a7:a6:13:cf:0a:bf:f8:91:25:4b:db:a3:fa:a7:d2:ef:10:
         76:9d:65:50:b6:a6:bd:ef:b0:32:74:50:8f:ad:32:9e:55:a2:
         2f:64:56:f9:7b:a6:76:4f:2f:65:61:4f:80:46:12:b8:54:4c:
         58:1d:fe:7f:45:57:23:7e:34:9e:ac:7d:5e:f1:1e:81:a9:12:
         6c:27:b2:43:c0:50:78:62:ef:ac:82:a3:ba:c7:e4:b5:34:8d:
         07:89:b0:98:52:57:ea:b4:39:76:5a:3b:be:90:b0:dc:56:7e:
         0c:a4:74:80:42:b3:a3:82:60:96:56:cb:01:ce:cd:fa:f5:a2:
         fd:34:92:3f:4d:f3:63:ae:49:d4:e7:7c:fc:6d:e9:d2:d1:76:
         57:37:65:c5:9f:e8:22:42:f2:6a:a8:9a:d2:fc:18:12:ed:d0:
         ca:97:e6:82:2b:05:f3:4c:31:83:79:cf:88:ac:a9:2e:ee:20:
         43:dd:c3:6c:fa:82:44:d3:dc:26:5f:c6:5b:76:e7:4b:20:c7:
         48:7d:6a:eb:31:14:db:43:24:b1:4f:0a:51:b3:81:9f:94:40:
         e1:8a:95:cd:ee:99:58:75:ba:1b:f9:ee:52:32:27:01:cd:f7:
         86:1c:2a:59
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OUQ3OTExMC8GA1UEBRMoRTBFRTVGNUI0Q0NFNzJDMDJDQjFCMTY1REQ4RDZEMDNF
MTE4MTVDNzAeFw0yNjA2MTcwODU1MTlaFw0yNjA2MjQwODU1MTlaMBgxFjAUBgNV
BAMTDTZhMzI2MGY3LTQ0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+5IS3USkYaN3H7cNf8uoLTOFhsb8oaoOEY8bbvR9W8smTVOKfOColtNMz1gMa
R77e+QV93MYyQWrBxTRO+aewSvFW0CpdfI0FXR4F86nm0qEJy0Xgj3G78ypOrNwc
C9qz1QsD7fC7YJO+Rd+UIW3bievHcIyxq/fUvmJLJ+PK6FPqJ92oe111+4yiVmKa
dSY+TtPPEiTkfYGyPMU3Nazifr0+pTo5di6zrDBXX3Gemw485Ncsbt6IZAx6r/AJ
cgTKr2iKtwnmXSoG91sFtp96cjpHdOQhc8in9bZL++NyDUQJQzWvKg/+dUw0EJJi
0WovQF3adrbNZuqXvAs15KkxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj5KEpYh1
06D28j3LZ4dCbpRxqSMwHwYDVR0jBBgwFoAU4O5fW0zOcsAssbFl3Y1tA+EYFccw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzQzQzJBNjkyMjRE
QjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NBc3NiRmwzWTF0QS1FWUZj
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNE81Zlcwek9jc0Fzc2JGbDNZMXRBLUVZRmNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
RDc5LzQzQzJBNjkyMjREQjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NB
c3NiRmwzWTF0QS1FWUZjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA8n3OFUEAdEK/XF2M7zOqYpoJBp6YTzwq/+JElS9uj+qfS7xB2nWVQtqa977Ay
dFCPrTKeVaIvZFb5e6Z2Ty9lYU+ARhK4VExYHf5/RVcjfjSerH1e8R6BqRJsJ7JD
wFB4Yu+sgqO6x+S1NI0HibCYUlfqtDl2Wju+kLDcVn4MpHSAQrOjgmCWVssBzs36
9aL9NJI/TfNjrknU53z8benS0XZXN2XFn+giQvJqqJrS/BgS7dDKl+aCKwXzTDGD
ec+IrKku7iBD3cNs+oJE09wmX8ZbdudLIMdIfWrrMRTbQySxTwpRs4GflEDhipXN
7plYdbob+e5SMicBzfeGHCpZ
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:40 2026 by rpki-client