Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File:                     hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier:          ey52mv8bgbIke+IKfqIO+B4SZEFJjCiCXV4WnOZqNqo=
Subject key identifier:   99:78:3C:79:0C:D9:77:D1:8B:37:34:D7:3D:E6:98:59:0F:7D:C6:49
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer:       /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number:          011B
Signing time:             Sat 13 Jun 2026 05:58:24 +0000
Manifest this update:     Sat 13 Jun 2026 05:58:23 +0000
Manifest next update:     Sat 20 Jun 2026 05:58:23 +0000
Files and hashes:         1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: wCmZnuSvWK1Xq8GvoYAin68m3swHmY18AuhFFj8vOCM=)
                          2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
        Validity
            Not Before: Jun 13 05:58:23 2026 GMT
            Not After : Jun 20 05:58:23 2026 GMT
        Subject: CN=6a2cf180-e4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:6f:58:50:25:71:b6:0d:da:dc:ea:9a:24:
                    12:3e:96:89:38:f8:1d:60:b3:8a:15:00:57:12:7d:
                    a7:04:6a:13:3b:41:d6:12:ce:77:05:05:94:76:3b:
                    26:1d:97:5e:83:cf:82:53:bb:91:9f:89:46:51:14:
                    10:ef:f8:6e:a7:68:88:d7:fd:02:8a:47:ae:ca:94:
                    31:0a:16:ae:9d:54:46:b1:ad:e3:ca:c5:19:c6:da:
                    bc:b0:ea:36:22:02:08:f9:86:98:8b:a0:fc:59:67:
                    a0:c1:3d:6d:a3:9e:2a:48:ae:1e:f7:c0:79:3b:8c:
                    9a:fb:89:65:0e:c9:d3:c9:bf:9b:69:22:24:99:9e:
                    eb:5b:01:ea:5d:41:5a:de:f7:16:5b:f8:00:f8:c9:
                    e3:1c:58:cc:88:57:04:ed:e0:e9:97:72:74:be:e7:
                    f5:24:33:46:50:ca:2b:f6:cd:ee:4d:d7:67:5d:41:
                    c1:df:d5:43:bc:d2:30:ef:31:64:06:1c:a2:ed:81:
                    d4:64:08:2a:c6:94:6c:f6:26:b7:7e:5e:5e:c9:88:
                    69:54:c2:64:7e:33:b6:0f:84:c4:34:6c:0d:70:e3:
                    46:80:fb:d9:1d:27:04:30:49:45:cc:de:20:77:fc:
                    c4:b9:6c:d7:18:34:11:c5:7d:a7:01:2b:1c:5b:98:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:3C:79:0C:D9:77:D1:8B:37:34:D7:3D:E6:98:59:0F:7D:C6:49
            X509v3 Authority Key Identifier:
                keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:79:1d:0b:3f:ca:a7:24:5e:31:24:6e:2a:7e:83:99:a1:
         f8:e5:ab:4a:8d:8e:8a:ce:83:a1:2b:0e:0c:ae:4f:2e:51:6a:
         0d:1c:f7:6d:5c:2c:b4:49:88:2c:d2:05:85:b2:89:db:cc:af:
         e2:5d:c8:4a:7f:e1:d6:19:bd:bb:fb:59:49:a7:ec:3e:55:d6:
         1f:e1:76:c4:48:05:d1:dc:79:e5:59:fd:48:31:38:90:09:4f:
         50:7c:47:fc:41:0c:f3:87:23:4b:dd:64:f5:a8:c0:15:c1:20:
         c8:a7:5c:83:e9:83:2a:3d:cc:2a:14:cb:8d:21:d2:f6:f3:88:
         cd:45:e0:dc:2d:5b:3f:78:c4:ac:04:34:71:f4:82:94:f1:76:
         94:11:a0:5d:2c:30:f2:3a:5a:2f:d3:c6:89:e7:e8:53:e9:b2:
         90:ee:e8:87:2d:57:43:eb:25:d4:f7:cd:07:a4:9f:72:61:07:
         7a:f7:6c:65:83:6b:dd:ec:da:e7:7c:c9:67:0b:69:a6:81:70:
         4b:52:ad:ef:80:8f:e2:26:8e:b3:bf:ab:0d:c4:ed:6a:b3:46:
         04:b7:bd:87:a1:d2:34:47:16:cb:23:08:8f:55:bc:bd:92:a5:
         82:fc:34:c0:a4:a0:f3:cc:45:ef:ce:d5:51:fc:72:b6:78:41:
         df:b2:9b:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUMxMzIxMTAvBgNVBAUTKDg1RTk5OUMyMkJFRTAxQzMyNjREM0QyMjY3NTgyMTA5
MkZGRkQwMkMwHhcNMjYwNjEzMDU1ODIzWhcNMjYwNjIwMDU1ODIzWjAYMRYwFAYD
VQQDEw02YTJjZjE4MC1lNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqQxvWFAlcbYN2tzqmiQSPpaJOPgdYLOKFQBXEn2nBGoTO0HWEs53BQWUdjsm
HZdeg8+CU7uRn4lGURQQ7/hup2iI1/0CikeuypQxChaunVRGsa3jysUZxtq8sOo2
IgII+YaYi6D8WWegwT1to54qSK4e98B5O4ya+4llDsnTyb+baSIkmZ7rWwHqXUFa
3vcWW/gA+MnjHFjMiFcE7eDpl3J0vuf1JDNGUMor9s3uTddnXUHB39VDvNIw7zFk
Bhyi7YHUZAgqxpRs9ia3fl5eyYhpVMJkfjO2D4TENGwNcONGgPvZHScEMElFzN4g
d/zEuWzXGDQRxX2nASscW5h8FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJl4PHkM
2XfRizc01z3mmFkPfcZJMB8GA1UdIwQYMBaAFIXpmcIr7gHDJk09ImdYIQkv/9As
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEzMi9DNEZBMTRGOEI4
MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFjTW1UVDBpWjFnaENTX18w
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2dUFj
TW1UVDBpWjFnaENTX18wQ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/t5HQs/yqckXjEkbip+g5mh+OWrSo2Ois6DoSsODK5PLlFqDRz3bVwstEmI
LNIFhbKJ28yv4l3ISn/h1hm9u/tZSafsPlXWH+F2xEgF0dx55Vn9SDE4kAlPUHxH
/EEM84cjS91k9ajAFcEgyKdcg+mDKj3MKhTLjSHS9vOIzUXg3C1bP3jErAQ0cfSC
lPF2lBGgXSww8jpaL9PGiefoU+mykO7ohy1XQ+sl1PfNB6SfcmEHevdsZYNr3eza
53zJZwtppoFwS1Kt74CP4iaOs7+rDcTtarNGBLe9h6HSNEcWyyMIj1W8vZKlgvw0
wKSg88xF787VUfxytnhB37KbEA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:22 2026 by rpki-client