Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File:                     X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier:          5q+j8VX8RKmF2bdOhK1wRuXfGADc2RDtMCe+J+VISzQ=
Subject key identifier:   37:29:F6:16:8B:1F:3E:22:C5:78:CD:89:DF:92:42:7F:18:44:94:39
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer:       /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial:       0576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number:          0575
Signing time:             Fri 12 Jun 2026 23:20:28 +0000
Manifest this update:     Fri 12 Jun 2026 23:20:28 +0000
Manifest next update:     Fri 19 Jun 2026 23:20:28 +0000
Files and hashes:         1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: rjxP35d62/HfhNuCp4FD2wn1KZfWDTGT2ktnNMmbAJ8=)
                          2: 026757CA3E2A11F19724AD26B6833773.roa (hash: yGLqEyfKOhCLMSX2whrGvvy8lUSZ6kp3DgyqhvORmyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
                          rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
        Validity
            Not Before: Jun 12 23:20:28 2026 GMT
            Not After : Jun 19 23:20:28 2026 GMT
        Subject: CN=6a2c943c-5f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:2a:71:84:c9:f3:26:f8:5b:9f:2f:ec:5b:
                    ff:37:08:ae:1c:7b:8c:a8:9e:48:59:da:5d:8d:8c:
                    ca:bc:bd:4e:5c:e5:7a:b6:5b:b6:0f:15:d9:cd:2c:
                    ce:f1:88:5c:24:ac:ea:d6:8e:87:81:fe:ab:b9:ac:
                    4f:97:f1:4e:81:42:fc:ad:78:df:29:7c:81:87:1d:
                    84:7a:e7:a7:d3:c7:9a:e0:e1:26:87:81:31:0d:b5:
                    e3:50:1a:1b:01:61:40:43:91:95:8e:11:82:95:92:
                    8e:cc:ee:77:d2:98:65:80:8a:bc:3d:2c:3a:2c:78:
                    21:3c:e7:50:51:bc:79:80:a9:be:09:d0:e0:07:9b:
                    92:f1:f6:0a:b6:0b:d0:8f:d2:ea:fd:d4:4c:3a:bc:
                    34:ef:18:c8:5b:ae:38:58:19:9c:fe:b1:d1:84:7b:
                    a8:5b:c7:87:8b:15:65:8e:91:62:9b:36:04:9c:a8:
                    f2:15:9b:f0:c1:aa:99:5b:43:c6:6f:1c:19:54:5b:
                    2b:a8:51:8f:dd:9c:cc:2d:53:57:d7:35:8b:05:5d:
                    6c:d7:7d:c3:c2:5c:e1:38:d6:75:a3:6a:36:b3:1f:
                    3d:fa:c2:3a:3b:32:ac:57:6c:6f:13:3c:8d:4e:9f:
                    67:24:c7:83:9b:78:1f:ec:f1:7c:ee:14:dd:39:e3:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:F6:16:8B:1F:3E:22:C5:78:CD:89:DF:92:42:7F:18:44:94:39
            X509v3 Authority Key Identifier:
                keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:48:ea:a3:00:25:c4:ab:ef:4e:11:33:18:bb:98:29:cc:
         50:4c:f1:50:d9:72:9d:3d:16:fe:f7:de:3d:00:a7:a4:cd:3d:
         d1:82:13:f0:05:bb:48:ad:3e:31:d6:fa:48:02:31:d1:d4:08:
         65:fe:39:2f:4a:26:8a:6c:c2:25:7a:b6:00:74:9d:ac:6d:57:
         f0:b4:e7:f2:b5:f7:ea:81:6f:ee:51:2f:96:a2:4e:ed:4d:0a:
         a4:42:fd:8e:b5:f6:d8:5f:08:55:06:9c:e5:cb:4c:43:e4:e1:
         cf:e7:fe:10:45:40:71:51:af:e9:f8:4a:7b:12:ed:5b:b6:ba:
         5f:5d:0d:13:02:71:99:a9:d5:91:17:19:30:28:4a:90:ba:30:
         ba:72:73:c2:f2:e3:8d:8a:5d:18:4b:57:91:24:70:a4:23:85:
         5a:42:f9:2f:6e:d1:ea:f5:20:22:44:e2:3f:f5:fe:3e:8e:1d:
         4b:5e:e6:da:fe:70:b8:28:1e:3d:a1:84:44:c6:b5:ad:09:68:
         2f:f7:d4:f9:20:54:14:df:f7:33:d7:d4:d1:77:23:6b:f6:1d:
         cc:ce:9d:4e:75:64:e9:b1:08:8b:21:9d:b4:0f:8a:ad:17:ff:
         07:b4:3a:6b:fa:86:d9:50:14:e1:89:4b:4f:01:e1:0a:24:08:
         9f:e2:0f:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB
RDRGRURFQjgwHhcNMjYwNjEyMjMyMDI4WhcNMjYwNjE5MjMyMDI4WjAYMRYwFAYD
VQQDEw02YTJjOTQzYy01ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnaQqcYTJ8yb4W58v7Fv/NwiuHHuMqJ5IWdpdjYzKvL1OXOV6tlu2DxXZzSzO
8YhcJKzq1o6Hgf6ruaxPl/FOgUL8rXjfKXyBhx2Eeuen08ea4OEmh4ExDbXjUBob
AWFAQ5GVjhGClZKOzO530phlgIq8PSw6LHghPOdQUbx5gKm+CdDgB5uS8fYKtgvQ
j9Lq/dRMOrw07xjIW644WBmc/rHRhHuoW8eHixVljpFimzYEnKjyFZvwwaqZW0PG
bxwZVFsrqFGP3ZzMLVNX1zWLBV1s133DwlzhONZ1o2o2sx89+sI6OzKsV2xvEzyN
Tp9nJMeDm3gf7PF87hTdOePlNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcp9haL
Hz4ixXjNid+SQn8YRJQ5MB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE
MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G
RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnU1I6qMAJcSr704RMxi7mCnMUEzxUNlynT0W/vfePQCnpM090YIT8AW7SK0+
Mdb6SAIx0dQIZf45L0omimzCJXq2AHSdrG1X8LTn8rX36oFv7lEvlqJO7U0KpEL9
jrX22F8IVQac5ctMQ+Thz+f+EEVAcVGv6fhKexLtW7a6X10NEwJxmanVkRcZMChK
kLowunJzwvLjjYpdGEtXkSRwpCOFWkL5L27R6vUgIkTiP/X+Po4dS17m2v5wuCge
PaGERMa1rQloL/fU+SBUFN/3M9fU0Xcja/YdzM6dTnVk6bEIiyGdtA+KrRf/B7Q6
a/qG2VAU4YlLTwHhCiQIn+IPAA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:47 2026 by rpki-client