Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
File:                     JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json)
Hash identifier:          9aQEqNv9CPEZbYJAgv4KJAbnq8+0GfSDEg2wOyOCnYg=
Subject key identifier:   35:48:64:84:62:58:6F:9E:91:1A:04:94:E1:6D:80:D4:F1:13:F8:1A
Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59
Certificate issuer:       /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
Certificate serial:       1393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
Manifest number:          1383
Signing time:             Fri 12 Jun 2026 16:55:42 +0000
Manifest this update:     Fri 12 Jun 2026 16:55:41 +0000
Manifest next update:     Fri 19 Jun 2026 16:55:41 +0000
Files and hashes:         1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: l2Eo4+l8vs8l6ht1fSNOrMRlOGasTJoS0tftzHYcO/Y=)
                          2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: 7RR7Eg0wKm27NUGXm8j0ljoSWx4fgcR/0JinjGBY2bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5011 (0x1393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659
        Validity
            Not Before: Jun 12 16:55:41 2026 GMT
            Not After : Jun 19 16:55:41 2026 GMT
        Subject: CN=6a2c3a0e-bc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:f6:d2:c9:c8:05:21:ff:88:38:e7:ad:33:
                    94:93:02:71:93:c7:d9:76:4a:e9:97:14:1e:a1:8e:
                    39:d8:a9:66:f0:9d:88:6e:51:bf:e6:ad:84:86:21:
                    c9:d5:d4:c9:98:ff:49:d8:82:0a:3b:7f:8c:03:16:
                    63:d5:65:c3:ea:e4:7e:78:f4:30:8f:78:f0:b6:c0:
                    88:99:af:9c:dc:49:95:01:39:cd:76:23:bf:9b:e4:
                    23:c4:78:e0:96:77:3f:5b:b0:d5:b8:be:da:4e:9b:
                    38:cc:59:7a:ea:43:93:ec:2d:d2:e5:a1:12:bd:71:
                    2d:71:59:e8:ea:64:79:05:0c:d2:fb:b9:c3:31:1b:
                    e0:97:c6:be:7e:31:a1:85:a1:a4:f7:37:f0:3b:51:
                    ae:6d:8d:e1:47:dc:f5:8f:ff:7c:69:42:62:54:9d:
                    c0:71:43:35:e8:67:20:6f:2b:1e:df:37:6f:d7:ed:
                    65:07:4b:e9:73:5c:8d:39:62:a8:5c:4e:e1:cd:be:
                    64:69:d6:94:19:be:c0:3f:cd:e4:63:3c:f7:88:f6:
                    96:f6:fd:99:af:7f:2d:35:b1:bf:1c:ec:76:28:49:
                    f1:45:e7:db:55:2d:f1:c7:bc:e8:47:ec:11:77:66:
                    36:30:3a:49:af:2a:9d:d8:56:bb:2d:5c:a2:27:50:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:48:64:84:62:58:6F:9E:91:1A:04:94:E1:6D:80:D4:F1:13:F8:1A
            X509v3 Authority Key Identifier:
                keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:01:c0:a9:be:ca:aa:80:31:e5:ed:3f:32:78:3c:a8:a5:
         17:de:c4:44:39:2b:db:0a:ae:12:1f:f4:98:6f:00:a9:f4:2e:
         4a:b8:3b:0e:bf:45:37:20:1c:fa:41:1c:74:f3:17:2d:1d:ce:
         c7:64:ca:a7:e2:c7:39:4f:48:0c:12:be:59:e1:f0:0c:a7:02:
         01:6e:b3:3e:da:75:25:69:06:9a:dc:54:a8:fa:62:2f:ff:fa:
         70:c3:ac:26:6a:fa:ec:1f:53:e0:d7:ff:f8:f5:cb:2b:68:76:
         be:14:33:f8:8a:33:ee:ca:e3:36:4c:b6:0d:d8:97:89:d6:08:
         17:06:e2:f6:5f:6d:01:d1:2a:5e:45:2a:4b:ca:dc:38:50:93:
         64:e3:3c:40:c5:88:6a:cb:6e:ae:b6:42:fe:51:a7:6c:18:b8:
         77:e8:11:71:b4:3f:67:28:7a:85:b6:86:04:43:9b:db:9e:da:
         69:ba:d9:b8:55:83:c1:4a:40:8c:aa:d3:d6:5c:a5:f3:84:ce:
         32:9b:8d:fd:0b:70:41:61:3a:4b:3d:cb:d9:1e:01:05:89:47:
         26:c2:8c:16:9f:7f:fa:00:56:97:d0:c4:88:c6:5d:c8:e7:06:
         24:d4:34:f4:ee:8e:ac:7b:83:e8:fb:93:ce:ad:57:b1:87:e9:
         e4:44:79:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx
NDVGQ0Q2NTkwHhcNMjYwNjEyMTY1NTQxWhcNMjYwNjE5MTY1NTQxWjAYMRYwFAYD
VQQDEw02YTJjM2EwZS1iYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtf20snIBSH/iDjnrTOUkwJxk8fZdkrplxQeoY452Klm8J2IblG/5q2EhiHJ
1dTJmP9J2IIKO3+MAxZj1WXD6uR+ePQwj3jwtsCIma+c3EmVATnNdiO/m+QjxHjg
lnc/W7DVuL7aTps4zFl66kOT7C3S5aESvXEtcVno6mR5BQzS+7nDMRvgl8a+fjGh
haGk9zfwO1GubY3hR9z1j/98aUJiVJ3AcUM16Gcgbyse3zdv1+1lB0vpc1yNOWKo
XE7hzb5kadaUGb7AP83kYzz3iPaW9v2Zr38tNbG/HOx2KEnxRefbVS3xx7zoR+wR
d2Y2MDpJryqd2Fa7LVyiJ1BPswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVIZIRi
WG+ekRoElOFtgNTxE/gaMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG
QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx
SGphV3EzbGkyQ01VWDgxbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/cBwKm+yqqAMeXtPzJ4PKilF97ERDkr2wquEh/0mG8AqfQuSrg7Dr9FNyAc
+kEcdPMXLR3Ox2TKp+LHOU9IDBK+WeHwDKcCAW6zPtp1JWkGmtxUqPpiL//6cMOs
Jmr67B9T4Nf/+PXLK2h2vhQz+Ioz7srjNky2DdiXidYIFwbi9l9tAdEqXkUqS8rc
OFCTZOM8QMWIasturrZC/lGnbBi4d+gRcbQ/Zyh6hbaGBEOb257aabrZuFWDwUpA
jKrT1lyl84TOMpuN/QtwQWE6Sz3L2R4BBYlHJsKMFp9/+gBWl9DEiMZdyOcGJNQ0
9O6OrHuD6PuTzq1XsYfp5ER5DQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:21 2026 by rpki-client