Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
File:                     7DwKarkc4TMW0oQzDDgovv4qNBM.mft (raw, json)
Hash identifier:          xlpQY/9a3CawtoI5dCHC56cvZYkHpbrWUtQBZUoL5xk=
Subject key identifier:   A1:29:11:AD:3A:DB:1D:55:8C:33:17:0F:81:91:D9:FF:0E:90:10:C8
Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Certificate issuer:       /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
Manifest number:          5E
Signing time:             Sat 13 Jun 2026 08:14:58 +0000
Manifest this update:     Sat 13 Jun 2026 08:14:58 +0000
Manifest next update:     Sat 20 Jun 2026 08:14:58 +0000
Files and hashes:         1: 7DwKarkc4TMW0oQzDDgovv4qNBM.crl (hash: +WZlh6GIbm4i0NuLoMgBOhD9kJPhC8H+x6sNSO8hjm4=)
                          2: 8FB3AD6AE58611F0A2F174BA446F56BC.roa (hash: sTktGN5NFdYq+gsUaHWLCXYe1rpci+mF34P/YuXEE0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
                          rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
        Validity
            Not Before: Jun 13 08:14:58 2026 GMT
            Not After : Jun 20 08:14:58 2026 GMT
        Subject: CN=6a2d1182-55f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:4c:42:c1:60:a7:02:27:65:cf:28:75:87:
                    e9:4f:40:68:78:c6:44:28:14:b9:57:f6:d3:b5:7d:
                    23:0b:30:3c:25:9f:f6:ec:56:82:1b:58:c5:3e:04:
                    9a:02:3b:e1:84:bd:2d:1a:61:83:58:05:99:c5:7a:
                    78:88:cf:74:a7:6e:2a:be:34:ee:5c:38:4a:9f:4b:
                    47:13:80:56:2a:c6:6c:7f:bd:7d:bf:0b:ff:16:7c:
                    01:79:7f:f8:23:f2:cd:51:24:d1:59:8d:c9:02:9e:
                    c3:7d:12:d7:3a:e8:60:cf:57:09:a8:7b:a6:fb:29:
                    4a:26:ca:aa:4b:82:88:42:cc:a4:26:32:e9:f5:10:
                    3c:a5:95:4e:aa:bf:24:04:22:3b:79:84:2e:10:8a:
                    63:5e:39:8a:80:57:2f:b9:a1:ef:72:8e:bf:f1:1a:
                    59:fc:dc:b2:e7:94:85:81:81:99:93:52:e7:ad:0a:
                    77:2b:da:bd:85:04:5c:fb:f9:55:60:aa:89:a7:e7:
                    6d:59:7d:10:7e:b3:85:ee:d9:a3:ed:c9:cb:ad:db:
                    0a:1e:73:5f:5c:a4:0d:23:2c:ea:b9:bd:24:56:43:
                    60:58:20:a3:24:87:cf:09:ce:93:5c:bf:77:29:7f:
                    c2:87:37:14:ad:9e:a9:56:05:82:2e:53:e9:9e:01:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:11:AD:3A:DB:1D:55:8C:33:17:0F:81:91:D9:FF:0E:90:10:C8
            X509v3 Authority Key Identifier:
                keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:5a:84:be:d2:b9:01:5d:ff:12:ef:fd:6f:bf:6a:8b:6f:
         4e:7a:5d:08:8f:ed:d6:5a:3d:ef:9e:d6:90:cc:6d:3c:50:0f:
         1b:09:53:2e:15:a8:5e:4f:0b:64:cc:cd:02:9e:93:52:b2:60:
         b0:78:00:a7:53:6e:63:56:ab:56:1c:77:fe:8a:ba:2c:75:7b:
         48:08:ea:89:b7:2c:03:10:17:99:d9:d0:9a:f5:19:03:e2:96:
         1b:42:22:73:04:90:c4:7a:bd:77:2a:08:c5:bb:ef:23:d4:33:
         3f:74:c6:10:e0:b6:0e:3c:0d:4d:1a:d1:d2:89:68:2c:91:69:
         93:a8:30:fa:1f:e6:5f:04:a6:64:e8:23:ac:e6:62:f0:ae:98:
         c9:81:d7:bd:59:4a:8a:69:25:de:cb:80:c9:2e:78:cf:d0:7a:
         1c:7f:b7:19:2e:41:43:b1:9a:14:8c:a7:ff:9b:5d:0c:9e:0a:
         65:65:ca:36:d7:0d:da:95:9d:55:17:a2:86:ea:cb:b7:4c:ac:
         d9:14:86:54:62:56:68:84:86:68:3f:c8:93:a0:47:20:de:fa:
         45:55:28:17:c2:36:e3:d0:39:9f:81:7c:c5:5b:b3:ad:18:7d:
         e5:d0:1f:13:f7:ad:05:a0:49:fd:70:c1:de:d1:c7:20:1b:ff:
         c6:05:25:2d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
ODhFQjExMC8GA1UEBRMoRUMzQzBBNkFCOTFDRTEzMzE2RDI4NDMzMEMzODI4QkVG
RTJBMzQxMzAeFw0yNjA2MTMwODE0NThaFw0yNjA2MjAwODE0NThaMBgxFjAUBgNV
BAMTDTZhMmQxMTgyLTU1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClKExCwWCnAidlzyh1h+lPQGh4xkQoFLlX9tO1fSMLMDwln/bsVoIbWMU+BJoC
O+GEvS0aYYNYBZnFeniIz3Snbiq+NO5cOEqfS0cTgFYqxmx/vX2/C/8WfAF5f/gj
8s1RJNFZjckCnsN9Etc66GDPVwmoe6b7KUomyqpLgohCzKQmMun1EDyllU6qvyQE
Ijt5hC4QimNeOYqAVy+5oe9yjr/xGln83LLnlIWBgZmTUuetCncr2r2FBFz7+VVg
qomn521ZfRB+s4Xu2aPtycut2woec19cpA0jLOq5vSRWQ2BYIKMkh88JzpNcv3cp
f8KHNxStnqlWBYIuU+meAanvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoSkRrTrb
HVWMMxcPgZHZ/w6QEMgwHwYDVR0jBBgwFoAU7DwKarkc4TMW0oQzDDgovv4qNBMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4OEVCL0Y4NEVCOUZDRTQ4
QTExRjA4M0QxMUU2QjQ0NkY1NkJDLzdEd0thcmtjNFRNVzBvUXpERGdvdnY0cU5C
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN0R3S2Fya2M0VE1XMG9RekREZ292djRxTkJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
OEVCL0Y4NEVCOUZDRTQ4QTExRjA4M0QxMUU2QjQ0NkY1NkJDLzdEd0thcmtjNFRN
VzBvUXpERGdvdnY0cU5CTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBppFqEvtK5AV3/Eu/9b79qi29Oel0Ij+3WWj3vntaQzG08UA8bCVMuFaheTwtk
zM0CnpNSsmCweACnU25jVqtWHHf+irosdXtICOqJtywDEBeZ2dCa9RkD4pYbQiJz
BJDEer13KgjFu+8j1DM/dMYQ4LYOPA1NGtHSiWgskWmTqDD6H+ZfBKZk6COs5mLw
rpjJgde9WUqKaSXey4DJLnjP0Hocf7cZLkFDsZoUjKf/m10MngplZco21w3alZ1V
F6KG6su3TKzZFIZUYlZohIZoP8iToEcg3vpFVSgXwjbj0DmfgXzFW7OtGH3l0B8T
960FoEn9cMHe0ccgG//GBSUt
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:56 2026 by rpki-client