Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
File:                     SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json)
Hash identifier:          DLWy6YHRRHgVsogQrKQC/wIe5PS/Ae8rvlbARbQTJko=
Subject key identifier:   AE:25:98:87:EA:D2:3E:23:F1:9D:A2:BA:9C:8E:18:89:8A:D9:75:BF
Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
Certificate issuer:       /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
Manifest number:          0108
Signing time:             Sat 13 Jun 2026 06:12:08 +0000
Manifest this update:     Sat 13 Jun 2026 06:12:08 +0000
Manifest next update:     Sat 20 Jun 2026 06:12:08 +0000
Files and hashes:         1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: PCC0bUG4wa/quXuJ1aiJ7Wf4En0Qa5RJx+RbCbmmaqQ=)
                          2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
                          rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
        Validity
            Not Before: Jun 13 06:12:08 2026 GMT
            Not After : Jun 20 06:12:08 2026 GMT
        Subject: CN=6a2cf4b8-848a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:2d:ce:a4:74:b6:06:d5:33:10:29:1f:64:
                    2c:c1:da:cf:9e:92:08:32:5b:78:6d:d6:87:da:28:
                    ed:cd:01:6a:84:a6:97:ee:07:1c:c9:3d:91:c1:21:
                    9b:a9:1d:d6:39:84:a9:be:e7:d8:aa:e4:c3:4f:cd:
                    db:11:56:de:4d:28:f0:47:5a:37:b2:12:86:01:7c:
                    27:99:ac:d6:9c:df:fa:9f:03:f7:58:15:a6:b9:11:
                    f3:2e:d0:64:35:b2:60:f0:fd:eb:eb:24:2f:cf:a5:
                    44:fe:bf:04:7d:16:41:bf:9a:23:46:62:7f:d8:53:
                    0c:30:23:69:67:b3:44:ae:d5:ff:20:3f:86:f8:a5:
                    31:5e:d7:5b:8f:b8:f9:d2:82:11:a2:e1:ae:c6:2c:
                    eb:2c:8d:26:d4:d5:5c:f0:60:09:24:0a:ce:69:04:
                    b1:e7:88:06:d6:43:f5:83:e1:73:27:d0:b3:fd:0b:
                    79:62:49:bf:2d:03:fb:54:90:c4:86:60:5d:81:b9:
                    05:9f:c9:ac:58:6b:59:7c:06:c3:b8:bd:cb:56:90:
                    3b:c4:54:f3:1f:3c:e8:66:d7:fd:bc:68:8f:6e:95:
                    b8:89:01:57:14:9e:bb:a8:ce:1f:59:8e:ee:e6:5f:
                    4c:03:d0:91:59:3a:07:04:b5:96:d6:c8:7a:58:a4:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:25:98:87:EA:D2:3E:23:F1:9D:A2:BA:9C:8E:18:89:8A:D9:75:BF
            X509v3 Authority Key Identifier:
                keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:71:55:16:5d:ae:18:7e:2b:ce:71:e2:1b:ef:01:28:70:21:
         2e:f5:00:e0:94:f7:60:21:ae:5a:23:40:4a:49:a3:fc:49:6d:
         d7:b2:5a:8f:19:7b:3c:9c:69:77:1c:be:1a:a4:1c:d3:05:b4:
         25:5e:af:84:78:f3:6f:04:b4:ea:91:7a:bc:ec:db:d2:3c:7a:
         9a:a9:3e:df:27:6f:ef:35:94:50:20:94:71:84:25:d5:db:ce:
         67:6c:86:e4:8c:42:90:cb:1a:a6:8d:62:e3:c7:28:24:86:18:
         35:41:bd:f9:60:e3:29:59:0a:57:72:f5:46:94:6e:05:72:a5:
         f6:cd:63:4d:07:5e:2b:3a:71:29:87:90:d8:2c:e2:9f:9f:3f:
         78:b4:a8:75:6a:1c:b1:9e:e4:e3:52:bb:64:ab:84:ba:9b:b1:
         f1:4d:ba:19:ed:29:d6:73:44:41:d8:16:00:a4:99:da:f1:7c:
         a6:6f:5a:aa:9d:b4:37:fc:37:0f:52:27:cb:f0:43:28:19:03:
         6e:f0:8d:2e:fa:02:15:b7:64:fd:0d:6e:04:8d:62:17:e6:8c:
         45:2c:a4:db:9a:d5:ed:79:b7:b5:ef:6a:5f:fa:fd:47:38:a8:
         d8:5f:49:65:5e:0a:88:0d:b2:e6:96:a8:0b:79:58:9d:7d:e9:
         f1:22:b7:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE
QjQ4ODgyQ0EwHhcNMjYwNjEzMDYxMjA4WhcNMjYwNjIwMDYxMjA4WjAYMRYwFAYD
VQQDEw02YTJjZjRiOC04NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVstzqR0tgbVMxApH2QswdrPnpIIMlt4bdaH2ijtzQFqhKaX7gccyT2RwSGb
qR3WOYSpvufYquTDT83bEVbeTSjwR1o3shKGAXwnmazWnN/6nwP3WBWmuRHzLtBk
NbJg8P3r6yQvz6VE/r8EfRZBv5ojRmJ/2FMMMCNpZ7NErtX/ID+G+KUxXtdbj7j5
0oIRouGuxizrLI0m1NVc8GAJJArOaQSx54gG1kP1g+FzJ9Cz/Qt5Ykm/LQP7VJDE
hmBdgbkFn8msWGtZfAbDuL3LVpA7xFTzHzzoZtf9vGiPbpW4iQFXFJ67qM4fWY7u
5l9MA9CRWToHBLWW1sh6WKSvpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4lmIfq
0j4j8Z2iupyOGImK2XW/MB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2
RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P
ZlMtSVJabU9MR0xiU0lnc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV3FVFl2uGH4rznHiG+8BKHAhLvUA4JT3YCGuWiNASkmj/Elt17Jajxl7PJxp
dxy+GqQc0wW0JV6vhHjzbwS06pF6vOzb0jx6mqk+3ydv7zWUUCCUcYQl1dvOZ2yG
5IxCkMsapo1i48coJIYYNUG9+WDjKVkKV3L1RpRuBXKl9s1jTQdeKzpxKYeQ2Czi
n58/eLSodWocsZ7k41K7ZKuEupux8U26Ge0p1nNEQdgWAKSZ2vF8pm9aqp20N/w3
D1Iny/BDKBkDbvCNLvoCFbdk/Q1uBI1iF+aMRSyk25rV7Xm3te9qX/r9Rzio2F9J
ZV4KiA2y5paoC3lYnX3p8SK3gg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:14 2026 by rpki-client