Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          SbzovMS3Frhd0MCNpSSzKA3UgeQO+b3RSYMmmkMKzNY=
Subject key identifier:   8F:A5:0C:DE:4C:15:B8:0D:19:EC:0B:F9:29:51:74:9D:18:EA:FE:04
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       356A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          3555
Signing time:             Fri 12 Jun 2026 15:07:23 +0000
Manifest this update:     Fri 12 Jun 2026 15:07:22 +0000
Manifest next update:     Fri 19 Jun 2026 15:07:22 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: 0aEXF/wXeAP9pdMrgWpgzesVYQuWJvrGsF6cVxRKneI=)
                          2: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13674 (0x356a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Jun 12 15:07:22 2026 GMT
            Not After : Jun 19 15:07:22 2026 GMT
        Subject: CN=6a2c20ab-c826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:99:94:53:98:80:42:c7:d8:d2:fd:d4:aa:
                    af:8e:e7:c5:18:b4:82:70:28:6a:f9:a9:00:e6:b3:
                    f8:3a:11:04:d6:f3:75:9b:3a:42:f0:68:ee:7a:a0:
                    a6:a2:79:54:4a:03:6b:0b:06:45:2a:ea:c0:64:ab:
                    77:7d:98:e3:19:36:88:77:06:e7:8e:17:82:f8:a9:
                    e2:ce:e1:11:d3:67:d5:15:15:e6:61:e8:55:3e:22:
                    df:61:58:a1:28:4f:d3:d9:15:11:20:17:dd:09:33:
                    3f:fe:67:f1:a0:d6:a4:1e:a9:fa:ad:66:dd:40:0b:
                    6e:4a:fd:12:09:d2:c1:38:ce:67:55:e4:24:0a:de:
                    aa:6b:2d:dd:50:01:19:8c:67:ab:a3:12:0d:23:bc:
                    17:59:6c:39:ff:c6:cf:55:43:31:54:42:c5:4c:7a:
                    6f:c7:49:f9:57:41:69:e7:b4:95:4a:5b:a6:76:dc:
                    06:88:1a:6e:34:75:29:41:07:5f:28:a4:bf:09:09:
                    c4:06:20:49:de:84:29:ac:44:5a:e6:e8:d3:98:48:
                    15:b2:0b:56:c9:64:95:cb:96:12:9a:87:79:f4:98:
                    c3:e0:f2:ae:93:df:0c:cb:80:2c:f5:7c:26:70:d1:
                    bb:e7:70:4d:8c:26:c5:62:70:ea:a2:f9:6a:13:e6:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A5:0C:DE:4C:15:B8:0D:19:EC:0B:F9:29:51:74:9D:18:EA:FE:04
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:bf:3d:c3:ac:6e:1f:4f:cd:5a:65:97:b0:78:53:6d:45:
         12:4a:1b:f7:5e:5d:8c:0e:29:c0:71:50:0d:af:ed:7a:91:4c:
         89:20:3e:94:0d:c6:39:cf:c6:a8:28:d7:99:6e:ad:ba:24:fd:
         52:5b:73:d0:77:ed:dc:4d:87:3d:44:be:df:ae:bd:04:65:f9:
         e4:1f:4c:30:63:f6:70:1c:c4:29:87:14:44:ee:5c:ba:e1:ce:
         6d:04:30:80:aa:40:9c:42:75:de:d9:c6:ab:d1:e0:71:7b:ef:
         f3:4a:46:f8:d4:58:67:96:57:ea:c1:2a:57:ca:1c:07:ae:d2:
         a8:4e:98:21:01:1a:55:a4:ac:48:11:b6:91:74:e5:e3:6e:70:
         d6:a1:6d:d0:ad:f6:08:63:f6:bb:a1:fb:fa:56:b9:a9:56:f9:
         bf:f2:ba:43:9c:0c:3a:66:65:1b:8d:a3:9b:3c:cb:6c:97:4e:
         7c:13:e1:12:86:8a:bf:c8:3d:02:af:d3:1b:4d:4b:c0:c8:d2:
         73:a8:fe:9d:7b:4e:de:b5:15:73:57:7e:28:e0:fb:15:e4:7b:
         39:4f:14:f1:96:4c:aa:ed:79:5b:85:77:6a:39:6a:89:7e:03:
         de:54:b6:2c:ec:ce:ed:38:d0:e8:4a:b6:57:ea:37:13:d3:4d:
         41:52:af:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1
QzA3QkJBNjIwHhcNMjYwNjEyMTUwNzIyWhcNMjYwNjE5MTUwNzIyWjAYMRYwFAYD
VQQDEw02YTJjMjBhYi1jODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+SZlFOYgELH2NL91KqvjufFGLSCcChq+akA5rP4OhEE1vN1mzpC8GjueqCm
onlUSgNrCwZFKurAZKt3fZjjGTaIdwbnjheC+KnizuER02fVFRXmYehVPiLfYVih
KE/T2RURIBfdCTM//mfxoNakHqn6rWbdQAtuSv0SCdLBOM5nVeQkCt6qay3dUAEZ
jGeroxINI7wXWWw5/8bPVUMxVELFTHpvx0n5V0Fp57SVSlumdtwGiBpuNHUpQQdf
KKS/CQnEBiBJ3oQprERa5ujTmEgVsgtWyWSVy5YSmod59JjD4PKuk98My4As9Xwm
cNG753BNjCbFYnDqovlqE+bqaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+lDN5M
FbgNGewL+SlRdJ0Y6v4EMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE
QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2
bVJRTUE3MTJJUlJjQjd1bUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO66/PcOsbh9PzVpll7B4U21FEkob915djA4pwHFQDa/tepFMiSA+lA3GOc/G
qCjXmW6tuiT9Ultz0Hft3E2HPUS+3669BGX55B9MMGP2cBzEKYcURO5cuuHObQQw
gKpAnEJ13tnGq9HgcXvv80pG+NRYZ5ZX6sEqV8ocB67SqE6YIQEaVaSsSBG2kXTl
425w1qFt0K32CGP2u6H7+la5qVb5v/K6Q5wMOmZlG42jmzzLbJdOfBPhEoaKv8g9
Aq/TG01LwMjSc6j+nXtO3rUVc1d+KOD7FeR7OU8U8ZZMqu15W4V3ajlqiX4D3lS2
LOzO7TjQ6Eq2V+o3E9NNQVKvjQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:04 2026 by rpki-client