Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File:                     MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier:          CXhBcg4Y7iNlUI5qn4PMndiggyaSCRNocQl0WXnFVVM=
Subject key identifier:   3D:56:14:0E:ED:16:EC:EC:8B:E2:52:7E:14:9B:A0:4E:69:05:CE:A0
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number:          0222
Signing time:             Sat 13 Jun 2026 02:55:09 +0000
Manifest this update:     Sat 13 Jun 2026 02:55:08 +0000
Manifest next update:     Sat 20 Jun 2026 02:55:08 +0000
Files and hashes:         1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: 0Tdavy858ohJ8CihGcMaV3zbtCvhiu5ye7GanLpFnXA=)
                          2: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: YUDn/ImHnu8Aga92avplp7MOrOxQVfmR+LNkM6xYKp8=)
                          3: E9874B2A16D011EF90793868C4F9AE02.roa (hash: RDszepU6uUEnaTneHbLYTo9ekedmlaHSehV5QBWdDbs=)
                          4: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: jqwk3bmRPDf7C3aKoz+TsrX90WbUHOfRvQL1M86whDk=)
                          5: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: Oxk9ItIFF7Cmn++8Qhf8B9/Jba23NXxEuE7o6lYsVNY=)
                          6: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: f4OVUhW0bi1lo1n9ZSiR+RCv7DhSrpC0lFB7A/Kd8HU=)
                          7: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: /UOXs33KnAIdS9eZMavjXXvZDkm7O2iN3QjaCdMcSZo=)
                          8: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: 7QH1OiU8+y0kM0Xbew8STqzznYlr3akTS6fkDWFomuY=)
                          9: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: L4NVil8pbyS/cOY/ej3K8v/jrMsLv9IfqmTy0v9YRG8=)
                          10: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: XLyiIx6bH4MWL4cXY1N6tcvmekDJmpJls17+hd3FRlA=)
                          11: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: bcg53TLs5nFR2EV4CBcEFe8zIM0whJbmabWS8ZS93/Q=)
                          12: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: WlT7lqcgc4c8+rWeXt+Y5JcXRKuZvK0wiGPxDwUbSb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jun 13 02:55:08 2026 GMT
            Not After : Jun 20 02:55:08 2026 GMT
        Subject: CN=6a2cc68c-8ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:34:ce:2c:eb:92:b2:ef:55:44:b0:03:ed:
                    80:83:05:a2:04:01:a7:c2:ad:e0:77:ff:06:ee:48:
                    b1:29:a0:ed:c6:f7:5c:b1:6a:91:65:7a:2f:b8:a2:
                    42:f2:76:37:c4:f2:90:06:aa:dc:ad:33:3e:66:a3:
                    3e:f8:59:3d:92:9d:da:2d:43:08:a8:a1:49:a2:73:
                    cb:39:b0:73:ec:61:a0:a5:1a:92:41:c2:3c:e2:64:
                    ec:19:63:f2:89:ef:90:fa:53:7b:17:2a:8f:2b:3b:
                    fb:ba:03:c9:38:9d:a4:9c:27:20:ba:81:1e:5c:79:
                    b9:1e:bf:7e:6d:fa:53:32:62:fc:a5:da:17:9d:9d:
                    58:32:b3:b5:91:44:ef:af:e3:25:a0:9b:ac:11:f7:
                    05:ea:23:49:aa:fc:6c:1e:db:ac:75:ca:d0:55:6f:
                    78:66:ba:70:8b:85:59:d9:ff:fc:2c:05:d6:96:ec:
                    37:81:d1:46:10:cb:45:da:18:f4:16:9d:ac:0c:09:
                    10:73:ed:51:5d:fe:4d:c5:bd:e6:97:a6:a0:79:53:
                    b2:8f:85:69:64:6a:6c:75:76:c3:7c:33:61:e1:3b:
                    19:64:9a:73:52:a6:f3:79:68:9d:6f:d0:fd:b1:55:
                    30:e2:8c:42:ac:55:95:45:20:7d:74:5e:61:d9:69:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:14:0E:ED:16:EC:EC:8B:E2:52:7E:14:9B:A0:4E:69:05:CE:A0
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:4b:e1:a2:4e:da:89:27:43:56:8a:c8:72:00:09:76:77:80:
         73:ae:e3:65:17:16:f9:1d:fb:6a:07:cb:fa:68:fb:a1:66:33:
         f2:3b:b7:a1:ce:74:63:f2:2d:47:97:8f:21:47:c9:97:56:61:
         f3:47:35:a3:68:90:59:39:27:4d:b1:dd:a2:93:ef:f6:c4:67:
         73:0c:25:57:81:7b:4e:13:09:bf:c1:c8:3f:d6:54:42:ce:3c:
         1b:7c:c2:a1:b9:a9:54:29:d9:68:64:dd:7d:6e:b3:89:6e:fe:
         44:21:3b:0d:c6:48:94:da:10:e7:6e:8e:63:7f:5b:03:cb:0c:
         9b:ef:e9:cf:2e:e9:84:97:e0:ed:df:2d:4d:23:95:9d:be:00:
         06:1a:e5:84:5f:42:54:20:23:e3:f5:bb:ca:1c:f5:b6:1e:26:
         8b:cf:d3:64:19:93:76:84:5e:c8:82:a5:ed:63:b5:79:53:db:
         ab:82:66:fd:8e:90:38:b4:e8:b2:4a:97:d3:ea:53:7c:53:79:
         8d:ae:bf:82:b3:e1:b2:08:91:23:2b:06:a6:76:f1:21:80:ec:
         51:30:1c:e5:d2:48:78:42:c8:cc:be:00:4a:b9:bf:ef:48:72:
         bf:c7:e4:a8:04:b9:dd:07:bb:2d:e7:d9:9a:c2:b6:e0:c4:a2:
         e8:c9:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:14 2026 by rpki-client