Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          bqECoNO7S1SIaDzx64E/88TsGM59Bznf4vJ5JFAymhs=
Subject key identifier:   0D:03:EC:2B:20:25:94:B2:42:1C:A8:EE:87:2A:AE:18:4F:33:C6:16
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          06C1
Signing time:             Fri 12 Jun 2026 22:22:18 +0000
Manifest this update:     Fri 12 Jun 2026 22:22:18 +0000
Manifest next update:     Fri 19 Jun 2026 22:22:18 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: jyrxoK0u0hYSFzQQXWsAiuyCWxMozUszZe4emx0k1Bc=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: Jun 12 22:22:18 2026 GMT
            Not After : Jun 19 22:22:18 2026 GMT
        Subject: CN=6a2c869a-6e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:6e:ff:29:ed:19:2e:65:fa:7b:5f:ef:8a:
                    da:0c:36:b1:a3:f7:e7:d7:7e:40:9e:0b:7a:06:a2:
                    f7:ed:71:69:65:2c:c2:30:c9:05:22:29:b4:75:b6:
                    39:8d:d2:1d:8a:87:09:a3:12:c9:bd:f1:64:95:85:
                    ca:b4:13:af:ee:6f:9d:e7:c1:6c:aa:9b:95:55:f8:
                    a8:ff:95:d1:3d:69:1d:5b:44:66:b5:38:f1:8c:9a:
                    ae:f9:ea:f9:06:e8:eb:e8:26:d9:de:a2:ef:7c:8b:
                    f1:28:23:d4:c6:28:f7:fc:de:64:ce:92:4e:ab:01:
                    e0:08:6a:6b:ba:ff:b6:d6:64:16:6d:83:9b:70:1c:
                    84:95:b2:39:0a:4d:68:dd:71:ce:d9:63:61:70:02:
                    90:5c:c4:1b:0a:9c:8f:c9:5c:74:47:2b:82:75:db:
                    7f:c4:eb:9c:90:39:e9:fd:8e:43:fb:8a:55:f0:40:
                    eb:8c:43:46:2f:3c:e4:75:77:50:c3:65:8f:6d:26:
                    f6:9b:53:50:4d:b4:ec:35:3f:99:b8:5b:be:06:5a:
                    10:e5:82:f7:5a:c9:d6:1f:6c:9a:f6:0b:8f:33:7e:
                    cf:90:9e:21:3c:8d:42:47:3e:7a:55:07:85:ff:c0:
                    0b:6f:aa:75:4a:9a:76:c8:4a:9d:cd:27:a6:bc:51:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:EC:2B:20:25:94:B2:42:1C:A8:EE:87:2A:AE:18:4F:33:C6:16
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:16:e6:da:1c:31:bd:15:73:b5:38:9a:02:fa:44:fb:09:
         38:2d:24:a9:2a:48:30:42:17:4c:d6:fd:fe:84:9b:ee:2f:6c:
         e6:fe:0b:87:fc:c5:63:d5:04:13:bf:85:2a:a5:08:66:c7:e4:
         c0:2f:5a:b0:97:da:f6:8b:68:cd:cf:2f:c2:35:15:38:bd:e5:
         4c:65:57:46:e0:ab:59:09:b1:69:15:72:ed:e1:86:26:c3:7c:
         a3:0c:55:56:b3:c8:9f:d3:34:3d:7e:25:79:2e:9e:5d:0b:dc:
         8a:51:1a:d7:35:0a:78:ff:d6:48:73:31:50:17:c3:6b:ce:21:
         c7:62:0d:63:7f:36:93:55:ad:a4:03:20:3e:a4:5c:cc:59:4f:
         c4:8b:8f:7e:b7:0c:68:1e:53:b7:91:39:b0:5c:93:2e:f5:31:
         17:2c:7e:4c:92:3f:ce:13:f8:99:b7:fc:77:c2:9f:43:ae:be:
         4d:2f:51:4c:77:d2:c3:91:2f:a8:ae:46:9c:64:4a:65:6d:c4:
         f7:b8:f6:b9:69:11:6a:d6:d9:4c:76:e7:f1:39:07:15:04:04:
         6b:62:e4:47:87:81:fc:6a:56:6d:8a:fa:34:4a:61:61:f1:88:
         08:a3:2c:e1:87:40:2f:1a:a8:60:f2:a1:22:47:8d:1f:40:e9:
         1c:54:05:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF
RDM4N0ExNkYwHhcNMjYwNjEyMjIyMjE4WhcNMjYwNjE5MjIyMjE4WjAYMRYwFAYD
VQQDEw02YTJjODY5YS02ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Elu/yntGS5l+ntf74raDDaxo/fn135Angt6BqL37XFpZSzCMMkFIim0dbY5
jdIdiocJoxLJvfFklYXKtBOv7m+d58FsqpuVVfio/5XRPWkdW0RmtTjxjJqu+er5
Bujr6CbZ3qLvfIvxKCPUxij3/N5kzpJOqwHgCGpruv+21mQWbYObcByElbI5Ck1o
3XHO2WNhcAKQXMQbCpyPyVx0RyuCddt/xOuckDnp/Y5D+4pV8EDrjENGLzzkdXdQ
w2WPbSb2m1NQTbTsNT+ZuFu+BloQ5YL3WsnWH2ya9guPM37PkJ4hPI1CRz56VQeF
/8ALb6p1Spp2yEqdzSemvFEH5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0D7Csg
JZSyQhyo7ocqrhhPM8YWMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC
RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr
d2ktVXpWNjdycXp0T0hvVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPmkW5tocMb0Vc7U4mgL6RPsJOC0kqSpIMEIXTNb9/oSb7i9s5v4Lh/zFY9UE
E7+FKqUIZsfkwC9asJfa9otozc8vwjUVOL3lTGVXRuCrWQmxaRVy7eGGJsN8owxV
VrPIn9M0PX4leS6eXQvcilEa1zUKeP/WSHMxUBfDa84hx2INY382k1WtpAMgPqRc
zFlPxIuPfrcMaB5Tt5E5sFyTLvUxFyx+TJI/zhP4mbf8d8KfQ66+TS9RTHfSw5Ev
qK5GnGRKZW3E97j2uWkRatbZTHbn8TkHFQQEa2LkR4eB/GpWbYr6NEphYfGICKMs
4YdALxqoYPKhIkeNH0DpHFQF0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:45 2026 by rpki-client