Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          JjcS5VvZ5Sh++tMxdqorF02hnq4hY0FhWQzbsBTcesg=
Subject key identifier:   54:B9:CA:EB:22:67:E4:37:9E:3E:EB:2F:D2:EF:70:6E:10:DA:49:0B
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3555
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          354F
Signing time:             Tue 16 Jun 2026 15:16:47 +0000
Manifest this update:     Tue 16 Jun 2026 15:16:47 +0000
Manifest next update:     Tue 23 Jun 2026 15:16:47 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: 3/UVPFT+ooqP2wN55IJsvwSPn2t9RWbmY/I5JQ8EuAM=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13653 (0x3555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Jun 16 15:16:47 2026 GMT
            Not After : Jun 23 15:16:47 2026 GMT
        Subject: CN=6a3168df-7bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:3a:05:9c:aa:bd:80:f8:17:d1:2b:99:f8:
                    53:52:cf:85:ec:98:dd:cc:83:49:a0:45:a7:74:1b:
                    4a:64:a4:13:1e:81:94:75:be:15:46:5a:af:78:2c:
                    bc:fa:d2:4f:bf:50:2f:48:5d:59:29:dd:8a:fe:6b:
                    6b:59:5c:e5:3d:8f:c1:d7:ac:85:44:12:a0:04:b8:
                    33:c7:33:a7:71:ec:15:53:0d:71:41:87:32:79:66:
                    12:99:c2:7f:0e:38:f4:ad:c4:17:8e:07:b1:76:7f:
                    b1:ec:e6:4e:cb:13:01:c6:94:69:70:0f:8e:f0:54:
                    03:f2:1b:32:49:b7:b1:e4:1f:67:19:ee:ed:c1:91:
                    4c:a6:11:fb:9b:a8:4d:a3:25:b1:95:33:c9:76:2f:
                    b8:0d:0d:7d:98:35:70:50:f4:f5:75:15:47:1b:5d:
                    74:de:d3:27:91:f4:2a:ad:f8:d3:e7:c5:af:1e:93:
                    30:ff:92:06:46:d7:35:e0:41:b4:19:66:b9:a2:cd:
                    dc:30:85:0b:08:01:49:fa:3b:0c:cc:94:b4:b3:4c:
                    8a:1b:5d:d2:ef:32:4a:78:c4:64:83:fa:55:82:98:
                    64:95:80:97:fb:a2:35:5b:7c:a0:5f:f5:3c:1e:13:
                    ca:4a:d7:a0:99:9b:4f:15:89:38:9c:b1:7e:69:3a:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B9:CA:EB:22:67:E4:37:9E:3E:EB:2F:D2:EF:70:6E:10:DA:49:0B
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:fd:f4:60:96:eb:ef:bd:74:8b:6c:3a:ee:8d:67:3a:33:
         5e:10:72:6f:3f:32:8f:1a:12:b8:34:6f:8c:45:40:98:5e:a7:
         2c:e4:73:06:d3:d6:8a:6c:8a:b2:e3:c6:cf:b2:c1:6f:a7:2e:
         ae:90:c5:85:23:ca:a2:c7:73:91:ee:cf:fe:f6:4d:f3:5c:c8:
         75:6e:ad:3e:8a:fa:5c:ac:53:05:db:61:a8:cb:37:23:1a:22:
         7a:54:0b:19:79:88:56:aa:2d:3c:e7:5c:c2:72:cd:57:6e:5a:
         eb:45:ba:3f:82:8c:d3:8f:dc:49:15:8c:68:a0:e3:ca:3e:c6:
         ab:7b:2f:b1:29:8e:58:4d:b8:48:e6:53:88:7f:ad:7e:41:15:
         b9:73:20:7e:01:6e:ca:ef:3c:7f:c7:cd:43:c7:94:e2:f7:78:
         2b:e5:10:e1:0e:cc:6d:7d:cf:1a:cc:98:f9:c5:bd:d2:0c:05:
         84:1d:ae:74:c5:44:e4:cd:10:46:ea:26:e1:7b:f4:33:06:15:
         a9:d3:cb:3d:5c:06:fe:d2:31:42:51:15:2f:5b:be:fc:b4:35:
         7c:56:75:85:ab:de:92:ef:8a:39:b2:26:1f:a1:e8:fc:23:0c:
         8e:47:b9:d3:48:b8:6d:af:98:42:8d:65:9e:f1:44:92:6d:de:
         e2:75:fe:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz
NkMxNDdBNzEwHhcNMjYwNjE2MTUxNjQ3WhcNMjYwNjIzMTUxNjQ3WjAYMRYwFAYD
VQQDEw02YTMxNjhkZi03YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/I6BZyqvYD4F9ErmfhTUs+F7JjdzINJoEWndBtKZKQTHoGUdb4VRlqveCy8
+tJPv1AvSF1ZKd2K/mtrWVzlPY/B16yFRBKgBLgzxzOncewVUw1xQYcyeWYSmcJ/
Djj0rcQXjgexdn+x7OZOyxMBxpRpcA+O8FQD8hsySbex5B9nGe7twZFMphH7m6hN
oyWxlTPJdi+4DQ19mDVwUPT1dRVHG1103tMnkfQqrfjT58WvHpMw/5IGRtc14EG0
GWa5os3cMIULCAFJ+jsMzJS0s0yKG13S7zJKeMRkg/pVgphklYCX+6I1W3ygX/U8
HhPKStegmZtPFYk4nLF+aTq3iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFS5yusi
Z+Q3nj7rL9LvcG4Q2kkLMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE
QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp
Rjc4YkhGcndzeFUyd1VlbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjqb99GCW6++9dItsOu6NZzozXhBybz8yjxoSuDRvjEVAmF6nLORzBtPWimyK
suPGz7LBb6curpDFhSPKosdzke7P/vZN81zIdW6tPor6XKxTBdthqMs3IxoielQL
GXmIVqotPOdcwnLNV25a60W6P4KM04/cSRWMaKDjyj7Gq3svsSmOWE24SOZTiH+t
fkEVuXMgfgFuyu88f8fNQ8eU4vd4K+UQ4Q7MbX3PGsyY+cW90gwFhB2udMVE5M0Q
Ruom4Xv0MwYVqdPLPVwG/tIxQlEVL1u+/LQ1fFZ1haveku+KObImH6Ho/CMMjke5
00i4ba+YQo1lnvFEkm3e4nX+7A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:34 2026 by rpki-client