Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
File:                     2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json)
Hash identifier:          uyXuN4wXx1P/kkEEZ/o0SSmA348/C04OzKEJtgEh9KU=
Subject key identifier:   E4:73:52:64:51:43:57:29:42:56:DA:F4:6B:6C:BD:DC:4D:67:35:93
Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D
Certificate issuer:       /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
Certificate serial:       355B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
Manifest number:          3552
Signing time:             Fri 12 Jun 2026 14:57:23 +0000
Manifest this update:     Fri 12 Jun 2026 14:57:23 +0000
Manifest next update:     Fri 19 Jun 2026 14:57:23 +0000
Files and hashes:         1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: EQyCU+QyDFf6hydGxmncOMI6RV2Jh097wM5ltShfYJQ=)
                          2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: OrYwlHpiSmZNjD507c7+5SVsF6TOXtHT7d2m6BJQ+nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl
                          rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13659 (0x355b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D
        Validity
            Not Before: Jun 12 14:57:23 2026 GMT
            Not After : Jun 19 14:57:23 2026 GMT
        Subject: CN=6a2c1e53-57d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:58:74:29:a8:69:a4:18:a9:59:a5:e7:75:
                    4b:fa:44:2f:66:93:f0:b4:9d:c1:1f:40:91:8b:35:
                    0b:e5:b3:a6:76:92:95:4d:9b:04:93:fd:ad:27:56:
                    bb:0d:a2:f8:1f:50:f2:90:0b:5f:05:45:a0:58:8b:
                    e1:86:90:4f:9e:b9:5c:c0:96:4a:9a:f8:bd:68:99:
                    47:b3:9c:8b:dd:10:8c:c3:53:54:7b:eb:98:83:7f:
                    f5:0a:b0:10:eb:b4:d3:75:51:bd:2e:ab:9a:08:0c:
                    f7:7a:95:83:06:cf:85:95:75:53:2d:1e:5c:99:1e:
                    b7:ad:99:85:16:27:c2:ab:aa:0d:4e:7f:24:f1:34:
                    e7:64:58:05:80:96:8f:62:78:61:de:48:44:6e:b7:
                    ad:b3:ab:50:54:8d:8b:48:70:10:c9:56:53:9d:28:
                    42:36:3c:ed:f5:c2:9f:b6:07:10:eb:59:bb:78:39:
                    6c:76:55:ad:21:b7:9c:5b:55:16:7c:18:29:d0:2f:
                    be:39:df:e6:0c:4f:b6:50:57:cb:48:ff:c8:07:9f:
                    e3:21:1c:77:75:c6:59:79:6c:8d:bb:2f:3c:27:5a:
                    1d:d6:1e:4f:3b:8c:7d:33:ed:ff:d0:67:67:9d:5c:
                    d0:fc:ba:f8:cd:f7:0a:1c:ce:22:98:82:18:c9:e7:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:52:64:51:43:57:29:42:56:DA:F4:6B:6C:BD:DC:4D:67:35:93
            X509v3 Authority Key Identifier:
                keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:d7:f9:14:e1:da:89:ce:92:6a:8c:cf:00:e5:dd:12:fa:
         28:60:d4:14:7f:ec:d8:32:e1:a2:39:7d:89:48:46:8a:1b:0c:
         b1:fb:0c:67:fc:8e:8a:5b:83:71:e8:d7:6e:81:bc:22:7a:a0:
         2f:6e:2f:13:6b:2a:77:d9:4d:27:8b:07:9f:d8:12:7d:4b:5d:
         70:05:db:44:e2:a4:02:30:2c:ae:d7:2b:77:15:86:5f:b5:b2:
         a0:c5:e3:de:32:ea:12:5f:c6:48:62:dd:57:01:43:60:2c:56:
         18:ce:b7:db:96:97:89:0d:1f:bd:13:98:00:3c:1a:6c:d5:61:
         cc:38:45:7d:7f:1c:cd:f2:fb:ed:14:42:9f:e5:91:2b:63:da:
         3c:48:cd:cb:16:d0:8c:29:d9:00:59:cf:c8:10:d0:c1:9e:a6:
         b5:17:47:02:f3:74:9f:9f:ec:22:4d:7f:95:f1:8d:3a:63:e0:
         ee:5e:4e:53:9c:a3:9a:6e:88:4e:1e:f6:33:3f:bc:f0:92:dd:
         2b:6c:f3:db:d9:70:c9:f4:18:cd:29:28:d1:5f:cd:2d:0c:8c:
         c3:a0:29:18:eb:42:cd:7c:18:3c:82:f4:22:1b:40:c6:e5:48:
         ce:ed:26:63:71:ce:44:57:10:b1:58:74:4e:7b:03:d5:aa:05:
         fc:41:a0:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5
NTBBMzZCN0QwHhcNMjYwNjEyMTQ1NzIzWhcNMjYwNjE5MTQ1NzIzWjAYMRYwFAYD
VQQDEw02YTJjMWU1My01N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0BBYdCmoaaQYqVml53VL+kQvZpPwtJ3BH0CRizUL5bOmdpKVTZsEk/2tJ1a7
DaL4H1DykAtfBUWgWIvhhpBPnrlcwJZKmvi9aJlHs5yL3RCMw1NUe+uYg3/1CrAQ
67TTdVG9LquaCAz3epWDBs+FlXVTLR5cmR63rZmFFifCq6oNTn8k8TTnZFgFgJaP
Ynhh3khEbrets6tQVI2LSHAQyVZTnShCNjzt9cKftgcQ61m7eDlsdlWtIbecW1UW
fBgp0C++Od/mDE+2UFfLSP/IB5/jIRx3dcZZeWyNuy88J1od1h5PO4x9M+3/0Gdn
nVzQ/Lr4zfcKHM4imIIYyefGewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORzUmRR
Q1cpQlba9GtsvdxNZzWTMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE
OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli
SE44WFlzTGZPREtWQ2phMzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM6XX+RTh2onOkmqMzwDl3RL6KGDUFH/s2DLhojl9iUhGihsMsfsMZ/yOiluD
cejXboG8InqgL24vE2sqd9lNJ4sHn9gSfUtdcAXbROKkAjAsrtcrdxWGX7WyoMXj
3jLqEl/GSGLdVwFDYCxWGM6325aXiQ0fvROYADwabNVhzDhFfX8czfL77RRCn+WR
K2PaPEjNyxbQjCnZAFnPyBDQwZ6mtRdHAvN0n5/sIk1/lfGNOmPg7l5OU5yjmm6I
Th72Mz+88JLdK2zz29lwyfQYzSko0V/NLQyMw6ApGOtCzXwYPIL0IhtAxuVIzu0m
Y3HORFcQsVh0TnsD1aoF/EGgNw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:52 2026 by rpki-client