Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          Gv8AGOsxUtiCk5O5P+BgXpPTXgcRCvWasddrC3lgUvE=
Subject key identifier:   5D:FC:BA:8C:4E:F2:D4:26:F9:60:AF:23:BD:95:FF:0B:B8:97:94:69
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0D88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0CB0
Signing time:             Fri 12 Jun 2026 18:55:08 +0000
Manifest this update:     Fri 12 Jun 2026 18:55:07 +0000
Manifest next update:     Fri 19 Jun 2026 18:55:07 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: YqwNwa7rScDY9jbe0ilqRbJRUQt4U1hFL/ze1HsZ4b4=)
                          2: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          3: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
                          4: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          5: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=)
                          6: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: z9uQmxAplU6R3Ut9zsE253hEALJQfwoBwNgxaYjFwPo=)
                          7: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
                          8: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
                          9: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          10: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          11: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
                          12: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
                          13: 50C74740608511F1B54688666E47A888.roa (hash: IQGnQ5zQbYNcFjoaC/X8FlYzSh99L1UkIksPVrl/4Lc=)
                          14: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          15: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          16: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          17: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
                          18: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3464 (0xd88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Jun 12 18:55:07 2026 GMT
            Not After : Jun 19 18:55:07 2026 GMT
        Subject: CN=6a2c560c-acf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:97:a6:61:53:ee:ef:41:3c:ee:bd:e0:40:
                    d0:f0:84:2b:c8:d2:9e:7f:b7:a2:09:4c:38:bc:33:
                    b0:98:0a:93:71:d0:bf:e9:63:fd:5a:0f:dc:8e:22:
                    d0:b2:46:07:ce:d5:06:95:c2:97:44:25:b5:ce:94:
                    07:ce:3d:33:07:bf:46:37:8e:62:47:93:30:ae:05:
                    51:e7:ae:80:c8:11:18:04:86:e1:df:54:90:ab:fe:
                    d8:f6:25:cd:4d:7a:14:fa:82:34:76:53:e8:60:da:
                    f5:8c:52:0a:32:d4:98:24:f9:36:05:4f:4e:04:9f:
                    bc:8c:01:ed:0f:bd:32:c5:36:be:31:a8:85:f4:80:
                    d3:eb:3f:80:26:31:db:da:c1:19:98:a3:7b:26:d6:
                    73:7f:97:fc:14:78:5e:40:53:a1:2a:fb:4c:b4:b4:
                    e3:a9:7a:b2:ea:71:52:c3:bc:39:3e:1a:d5:3b:d3:
                    41:1c:6b:a7:85:9c:6f:fb:02:11:79:18:fc:2c:f2:
                    85:fb:dd:3f:3d:18:77:7c:b6:ef:04:66:dc:75:e2:
                    3c:ec:be:fa:b8:7f:49:eb:65:0a:f4:70:34:e0:7d:
                    6a:4c:84:c8:18:f0:c4:4d:6c:98:4d:bb:50:04:cf:
                    67:f7:18:2d:d6:38:2b:67:b8:14:40:67:b6:6b:24:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:BA:8C:4E:F2:D4:26:F9:60:AF:23:BD:95:FF:0B:B8:97:94:69
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:90:62:db:24:e1:f0:be:cb:7b:81:df:00:88:51:82:d1:4d:
         15:9b:f7:65:4c:a4:59:b4:ea:fe:da:4a:c3:55:d8:3e:e0:74:
         d4:26:e8:04:6c:a3:76:ad:f0:9d:70:06:20:48:07:58:aa:ab:
         b6:bd:d6:95:c9:a4:72:ea:af:3c:b8:21:dd:07:6f:22:d9:1c:
         46:40:5b:c0:f9:20:a9:c0:5b:a8:b0:6a:8d:58:da:b2:1f:b2:
         d3:bd:1c:57:00:78:dd:70:63:99:5f:b3:6b:19:18:01:3d:23:
         72:e7:5b:70:b5:97:b6:06:54:f1:15:18:ca:b1:f3:c1:05:02:
         c3:42:3a:6d:19:0e:7c:53:fa:c3:5e:68:87:92:fb:62:8a:e6:
         bc:e6:72:95:a8:ec:cf:27:ec:4d:db:98:65:89:db:50:28:c6:
         01:e1:bd:83:ea:19:e0:0c:e5:ef:6f:a1:02:f0:b6:65:85:81:
         75:d0:4f:8b:3c:e7:4c:73:a2:c5:16:7a:93:66:01:7d:5a:13:
         55:f6:7b:1c:8a:6e:35:2e:bd:66:40:ad:e8:23:5b:d5:2a:cb:
         3c:36:2f:4f:ba:0e:ed:ba:e8:bc:ce:d8:8c:b0:b0:45:85:4f:
         0b:6d:39:70:6a:12:d0:b3:b8:31:72:68:8c:5e:8c:1f:4b:67:
         0f:5c:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:35 2026 by rpki-client