Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File:                     8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier:          +WZv6LpbsKu28hHrgN67R3bFjCcjiCWSoxu3lrwdhck=
Subject key identifier:   85:0C:FF:A5:39:40:35:2D:75:DB:E9:0C:EB:E5:D9:B9:41:AA:47:49
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number:          71
Signing time:             Sat 13 Jun 2026 07:52:39 +0000
Manifest this update:     Sat 13 Jun 2026 07:52:38 +0000
Manifest next update:     Sat 20 Jun 2026 07:52:38 +0000
Files and hashes:         1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: wuVkdOVr4x7jmbU+piexhhvBVLSeLh565eVVgv8P8To=)
                          2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: ivbdN4NvvnbB10SMOQMCGpQDBPImMhiYIJBpIIj7B+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: Jun 13 07:52:38 2026 GMT
            Not After : Jun 20 07:52:38 2026 GMT
        Subject: CN=6a2d0c47-1557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:0c:f2:2e:1c:1b:19:65:b5:6c:13:5a:bc:
                    14:6c:64:1c:e8:74:72:a4:f5:6c:2a:f5:34:2f:40:
                    ca:1e:14:b6:52:a4:f7:24:a0:3f:13:aa:2f:45:04:
                    a2:78:c6:38:75:9c:16:3c:2e:59:1f:4a:26:a1:5e:
                    e2:cb:f1:d2:ff:3e:e1:85:64:c0:a5:46:f6:71:30:
                    ff:c6:bf:8c:1c:4d:90:f8:ee:2f:28:24:cf:06:07:
                    aa:86:83:ed:11:04:dc:3d:d4:ef:c9:cf:5c:1e:bf:
                    40:36:52:64:14:80:b5:8d:53:eb:e6:d7:58:06:1e:
                    57:f7:8f:3b:c7:4b:5e:9f:55:f5:99:54:4b:1e:a3:
                    b4:19:c4:62:75:4c:05:80:dd:ec:96:63:f5:ca:3e:
                    a4:7a:22:7b:95:ab:b9:14:bb:31:2f:f7:60:fd:4b:
                    d5:a3:5c:3d:b4:a5:1c:ee:ce:9b:d0:53:d4:18:39:
                    60:21:24:b7:d4:71:73:90:e3:c4:52:1c:ab:54:05:
                    6d:4d:fe:32:ad:9d:e2:a7:92:26:18:ec:a2:cc:5a:
                    3a:ad:57:f4:7b:10:72:03:b0:1d:0e:86:52:ea:91:
                    67:0a:a5:a3:1b:7d:0d:24:59:8d:5e:1d:45:bd:cf:
                    72:a5:e9:9f:c9:f0:3f:2d:df:4a:0f:f0:2a:01:73:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0C:FF:A5:39:40:35:2D:75:DB:E9:0C:EB:E5:D9:B9:41:AA:47:49
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:33:cf:e4:03:ec:79:c0:20:25:0d:ac:3c:13:1d:f0:5f:
         f1:2c:9f:85:62:00:b9:6d:2b:9c:08:63:c6:69:27:79:55:b8:
         7c:95:18:bb:ca:a2:67:2c:48:14:92:08:8d:c1:e4:8e:0a:96:
         36:a6:4d:dc:83:55:91:38:ed:4b:67:d2:3c:6d:47:a4:4c:4c:
         86:20:07:ec:cf:a2:2e:3c:ae:bc:6a:83:ab:6c:b6:b7:cc:63:
         b0:33:e9:95:d7:ee:50:94:65:e5:ef:d8:bf:ef:66:bb:7b:8a:
         48:3e:56:6b:84:3f:8d:04:6b:f5:66:44:47:de:62:33:1e:43:
         fd:36:a8:49:6a:e6:e9:e5:59:f8:43:89:27:ac:72:7b:c0:96:
         8b:0c:1d:30:a1:db:80:ee:a2:29:3c:f8:c6:90:e4:26:86:57:
         9c:ac:31:94:ea:0b:85:07:4d:23:4d:0f:07:67:01:31:24:ec:
         fb:ed:74:0b:09:9b:4e:37:ea:ce:63:03:cf:78:f7:fe:93:54:
         35:81:78:a9:ff:79:6d:62:41:aa:24:4b:4c:14:a6:5e:d9:d5:
         38:17:e9:d7:ce:d4:0a:b5:51:9c:cc:e6:8b:fa:1e:1b:75:69:
         ff:d6:c8:22:7c:5f:58:94:d4:18:72:31:ad:f1:85:64:50:51:
         75:cb:03:8b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QUU2QTExMC8GA1UEBRMoRjA1MjFBNUI2REIwNEQ3NTZGQTI5NTJBMEYyOUEzOTEy
MTJDNThCMjAeFw0yNjA2MTMwNzUyMzhaFw0yNjA2MjAwNzUyMzhaMBgxFjAUBgNV
BAMTDTZhMmQwYzQ3LTE1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/nAzyLhwbGWW1bBNavBRsZBzodHKk9Wwq9TQvQMoeFLZSpPckoD8Tqi9FBKJ4
xjh1nBY8LlkfSiahXuLL8dL/PuGFZMClRvZxMP/Gv4wcTZD47i8oJM8GB6qGg+0R
BNw91O/Jz1wev0A2UmQUgLWNU+vm11gGHlf3jzvHS16fVfWZVEseo7QZxGJ1TAWA
3eyWY/XKPqR6InuVq7kUuzEv92D9S9WjXD20pRzuzpvQU9QYOWAhJLfUcXOQ48RS
HKtUBW1N/jKtneKnkiYY7KLMWjqtV/R7EHIDsB0OhlLqkWcKpaMbfQ0kWY1eHUW9
z3Kl6Z/J8D8t30oP8CoBc2LtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhQz/pTlA
NS112+kM6+XZuUGqR0kwHwYDVR0jBBgwFoAU8FIaW22wTXVvopUqDymjkSEsWLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRTZBLzIxOUQ3RDhBQkMx
MjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhWdm9wVXFEeW1qa1NFc1dM
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOEZJYVcyMndUWFZ2b3BVcUR5bWprU0VzV0xJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB
RTZBLzIxOUQ3RDhBQkMxMjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhW
dm9wVXFEeW1qa1NFc1dMSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBxqDPP5APsecAgJQ2sPBMd8F/xLJ+FYgC5bSucCGPGaSd5Vbh8lRi7yqJnLEgU
kgiNweSOCpY2pk3cg1WROO1LZ9I8bUekTEyGIAfsz6IuPK68aoOrbLa3zGOwM+mV
1+5QlGXl79i/72a7e4pIPlZrhD+NBGv1ZkRH3mIzHkP9NqhJaubp5Vn4Q4knrHJ7
wJaLDB0woduA7qIpPPjGkOQmhlecrDGU6guFB00jTQ8HZwExJOz77XQLCZtON+rO
YwPPePf+k1Q1gXip/3ltYkGqJEtMFKZe2dU4F+nXztQKtVGczOaL+h4bdWn/1sgi
fF9YlNQYcjGt8YVkUFF1ywOL
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:22 2026 by rpki-client