Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
File:                     FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json)
Hash identifier:          7744BHz4ZUwT22CE/n4Zm8blr6bKlscEQ6KzeOv6wzU=
Subject key identifier:   BA:A5:D8:3C:A1:99:3F:95:AE:40:CB:40:00:4C:34:3D:5B:97:87:56
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       0977
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
Manifest number:          096A
Signing time:             Fri 12 Jun 2026 20:05:56 +0000
Manifest this update:     Fri 12 Jun 2026 20:05:56 +0000
Manifest next update:     Fri 19 Jun 2026 20:05:56 +0000
Files and hashes:         1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: G7bOEuGlBleO4Snndcx/oB9ua7F7EqLi9yDvEKYpVa4=)
                          2: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: bb8HyNyKIjx5SksD6joAdCJUSHjg2S6d1c1Q2DuBeAE=)
                          3: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: dpdvSxpnzFoLOrPlT7mye8vYPNMa/TRbkA9BwRASPSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423 (0x977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Jun 12 20:05:56 2026 GMT
            Not After : Jun 19 20:05:56 2026 GMT
        Subject: CN=6a2c66a4-505f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:e1:b0:8a:bc:7a:10:6a:a5:8c:54:8d:b4:
                    ee:9a:3c:cb:91:d5:7c:18:35:5e:ac:1d:f5:db:12:
                    ed:a8:85:b0:3a:af:ec:64:39:8f:b2:34:98:02:69:
                    26:e5:37:f1:23:e0:52:4f:9e:00:91:57:79:8c:33:
                    74:92:a0:4f:99:48:cc:02:16:7d:ee:e6:00:c8:dd:
                    d5:a0:ee:b5:0f:7a:46:a5:cb:8b:3d:18:50:86:f3:
                    f5:5d:ef:50:1b:2d:5d:61:11:bd:23:0e:85:e7:35:
                    8b:32:14:14:da:ea:8b:a3:1e:93:3c:ec:82:ae:8a:
                    c2:c1:88:c4:60:2a:ae:47:67:5b:6e:4a:50:24:45:
                    3e:29:1f:d7:80:87:a4:84:d6:c7:aa:f4:b9:3a:2b:
                    37:60:47:3f:5f:8b:db:bb:88:89:06:54:b1:59:a3:
                    78:46:fd:47:dd:89:c0:5f:95:d9:16:dc:ea:4c:a6:
                    8e:7e:36:2c:3c:2b:de:12:b4:cc:c3:a1:f8:b0:86:
                    8e:ba:40:3f:93:55:ee:52:35:ac:87:1e:9e:3e:aa:
                    03:21:b0:94:b6:1a:66:a2:28:d9:e5:55:09:3c:79:
                    42:cd:0c:d8:f5:86:d2:3e:be:61:e0:84:64:58:82:
                    e3:c6:03:56:5a:1d:81:fd:5d:8f:72:2f:e2:0c:2e:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A5:D8:3C:A1:99:3F:95:AE:40:CB:40:00:4C:34:3D:5B:97:87:56
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:f4:5b:0e:f9:80:a9:b2:26:6f:9c:09:58:c5:e6:04:0f:
         f5:f0:79:83:68:50:88:29:d0:c1:36:dc:59:ad:cd:4f:80:4c:
         1f:f7:5b:95:c3:08:08:7d:29:1f:d4:19:05:4f:f0:a4:4a:79:
         01:d1:ae:06:4f:29:d6:f0:90:71:27:e5:a5:f9:37:f8:75:91:
         f1:ae:40:2a:cb:01:dd:5a:72:c4:28:14:df:01:12:d9:1e:9a:
         e7:78:7d:c4:84:00:5c:96:58:b9:f3:71:e9:a6:77:a7:2e:8d:
         c9:52:9e:fc:54:cd:30:b9:60:d0:8c:aa:0c:6f:f4:15:ef:4f:
         a6:82:cd:17:9a:13:16:05:e3:23:1c:22:e0:fb:3a:91:25:61:
         cf:cb:aa:8c:ef:7d:22:00:f3:d5:58:27:37:2b:4b:bb:22:f6:
         ec:8c:af:28:28:f1:71:73:60:6a:89:ea:b8:d1:24:3a:7f:e1:
         00:7b:da:0f:42:87:d7:39:81:5f:0a:40:00:02:eb:7d:e6:8b:
         22:df:64:79:0b:b3:bc:6a:87:b4:8e:2a:da:be:b0:b6:ba:6d:
         b1:1e:c6:56:12:40:32:f4:d6:82:20:41:32:23:f9:f1:9a:09:
         df:58:92:67:0f:61:fc:ca:5c:f1:b2:dd:9e:58:38:3d:14:56:
         3c:4a:a9:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx
NTlEMjc4QkEwHhcNMjYwNjEyMjAwNTU2WhcNMjYwNjE5MjAwNTU2WjAYMRYwFAYD
VQQDEw02YTJjNjZhNC01MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoALhsIq8ehBqpYxUjbTumjzLkdV8GDVerB312xLtqIWwOq/sZDmPsjSYAmkm
5TfxI+BST54AkVd5jDN0kqBPmUjMAhZ97uYAyN3VoO61D3pGpcuLPRhQhvP1Xe9Q
Gy1dYRG9Iw6F5zWLMhQU2uqLox6TPOyCrorCwYjEYCquR2dbbkpQJEU+KR/XgIek
hNbHqvS5Ois3YEc/X4vbu4iJBlSxWaN4Rv1H3YnAX5XZFtzqTKaOfjYsPCveErTM
w6H4sIaOukA/k1XuUjWshx6ePqoDIbCUthpmoijZ5VUJPHlCzQzY9YbSPr5h4IRk
WILjxgNWWh2B/V2Pci/iDC6cOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLql2Dyh
mT+VrkDLQABMND1bl4dWMB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5
QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODg3Ri9BQjU2OTk5OEI5QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3Vjhx
WHU1WXJnMG1ObkVWblNlTG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALhz0Ww75gKmyJm+cCVjF5gQP9fB5g2hQiCnQwTbcWa3NT4BMH/dblcMICH0p
H9QZBU/wpEp5AdGuBk8p1vCQcSflpfk3+HWR8a5AKssB3VpyxCgU3wES2R6a53h9
xIQAXJZYufNx6aZ3py6NyVKe/FTNMLlg0IyqDG/0Fe9PpoLNF5oTFgXjIxwi4Ps6
kSVhz8uqjO99IgDz1VgnNytLuyL27IyvKCjxcXNgaonquNEkOn/hAHvaD0KH1zmB
XwpAAALrfeaLIt9keQuzvGqHtI4q2r6wtrptsR7GVhJAMvTWgiBBMiP58ZoJ31iS
Zw9h/Mpc8bLdnlg4PRRWPEqp/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:15 2026 by rpki-client