Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          xaTD6Xb6Od77qsQw7rp+awnNE4P97TXICXBko4X/Gdo=
Subject key identifier:   64:5E:4C:81:5E:70:AC:AB:0B:25:42:A0:B7:0F:9F:A3:DB:90:84:F8
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1C45
Signing time:             Fri 12 Jun 2026 16:10:46 +0000
Manifest this update:     Fri 12 Jun 2026 16:10:45 +0000
Manifest next update:     Fri 19 Jun 2026 16:10:45 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: 6D8mxiQYw0hTmlP5xXkf4Ra656TZSiky/XQDcqTUFbQ=)
                          2: C98708BE477711EBB4044E31C4F9AE02.roa (hash: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA=)
                          3: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7266 (0x1c62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Jun 12 16:10:45 2026 GMT
            Not After : Jun 19 16:10:45 2026 GMT
        Subject: CN=6a2c2f86-3af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:de:0b:7a:48:63:6d:c3:0f:a7:7d:05:16:
                    61:04:68:25:a5:45:8a:c3:d6:b5:06:e9:3c:e3:8a:
                    82:e8:e0:f6:1a:65:81:0f:89:7f:20:4b:c7:f8:5e:
                    c7:36:49:95:07:bc:a8:aa:14:2f:5e:10:78:ef:65:
                    e3:c1:88:66:e2:b0:45:1d:a9:31:66:cd:1f:d7:41:
                    10:35:1d:06:36:2d:a7:f4:ce:d7:d9:2f:a7:6a:ab:
                    78:4a:1b:f5:c2:c0:92:ca:d8:84:4c:a5:62:bf:75:
                    95:29:59:38:74:89:15:10:dd:d6:05:de:f9:30:3f:
                    12:ab:a3:1c:67:33:87:7d:3d:b3:c7:5a:d0:01:00:
                    d8:42:ca:51:01:ec:bf:b7:38:50:4b:b5:1f:1c:a6:
                    dc:5c:9e:72:04:4d:23:3f:f4:56:fb:4f:d1:2c:c5:
                    bc:03:59:93:3e:ac:53:4a:7b:41:f0:7f:93:66:78:
                    c1:d9:da:8c:8a:a7:21:3d:af:84:54:af:81:08:ee:
                    86:2c:a3:df:fd:82:02:bd:d1:2b:f9:76:fa:18:fa:
                    44:24:f5:62:b5:36:c9:65:b3:3d:00:ec:19:00:cf:
                    fe:43:81:b0:ed:3c:a9:d1:71:34:b4:42:8d:89:de:
                    8d:48:39:19:21:06:79:80:ff:62:58:0c:d9:a9:11:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5E:4C:81:5E:70:AC:AB:0B:25:42:A0:B7:0F:9F:A3:DB:90:84:F8
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8b:13:47:8b:68:9f:df:6f:22:67:de:5c:bb:fd:ab:37:01:
         a3:84:00:88:2c:8c:66:20:27:64:99:0d:0c:08:76:6e:1e:81:
         18:94:94:9c:a5:42:cf:85:35:a6:87:4d:25:7d:65:be:d5:e2:
         7d:16:8e:8a:c7:d5:55:a5:a1:7c:65:52:23:61:11:95:7b:29:
         11:94:43:eb:f8:65:07:66:07:f6:cc:52:aa:d4:d2:e0:09:ac:
         ab:d4:3d:65:76:aa:c6:b7:f0:da:67:55:a9:32:83:ce:51:49:
         55:8f:97:b3:93:c7:da:d4:5c:ee:d8:88:2d:44:bf:f4:de:2b:
         5e:e7:e8:ae:2e:32:ef:ca:05:cb:89:16:75:e6:d7:d0:37:84:
         12:ae:f6:50:74:fc:cb:27:89:6f:d9:1a:6b:2b:be:3f:e8:a9:
         96:5f:ea:d4:63:15:7f:2a:2f:a6:7a:3f:cb:79:fb:ab:d6:ff:
         44:b3:bd:91:f2:ff:dd:c2:04:9d:44:d3:fb:81:e9:7f:a5:f3:
         7f:00:2f:c6:04:14:63:99:63:30:00:d5:72:5e:a9:60:24:02:
         d8:52:3d:89:7a:7e:cc:78:fc:1f:d8:40:4a:80:2c:da:3f:d9:
         48:79:70:64:18:5d:f1:36:c7:4a:4c:dc:d5:e6:e6:53:8c:c2:
         fb:3d:24:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjYwNjEyMTYxMDQ1WhcNMjYwNjE5MTYxMDQ1WjAYMRYwFAYD
VQQDEw02YTJjMmY4Ni0zYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssTeC3pIY23DD6d9BRZhBGglpUWKw9a1Buk844qC6OD2GmWBD4l/IEvH+F7H
NkmVB7yoqhQvXhB472XjwYhm4rBFHakxZs0f10EQNR0GNi2n9M7X2S+naqt4Shv1
wsCSytiETKViv3WVKVk4dIkVEN3WBd75MD8Sq6McZzOHfT2zx1rQAQDYQspRAey/
tzhQS7UfHKbcXJ5yBE0jP/RW+0/RLMW8A1mTPqxTSntB8H+TZnjB2dqMiqchPa+E
VK+BCO6GLKPf/YICvdEr+Xb6GPpEJPVitTbJZbM9AOwZAM/+Q4Gw7Typ0XE0tEKN
id6NSDkZIQZ5gP9iWAzZqRGMJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGReTIFe
cKyrCyVCoLcPn6PbkIT4MB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX
ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqYsTR4ton99vImfeXLv9qzcBo4QAiCyMZiAnZJkNDAh2bh6BGJSUnKVCz4U1
podNJX1lvtXifRaOisfVVaWhfGVSI2ERlXspEZRD6/hlB2YH9sxSqtTS4Amsq9Q9
ZXaqxrfw2mdVqTKDzlFJVY+Xs5PH2tRc7tiILUS/9N4rXufori4y78oFy4kWdebX
0DeEEq72UHT8yyeJb9kaayu+P+ipll/q1GMVfyovpno/y3n7q9b/RLO9kfL/3cIE
nUTT+4Hpf6XzfwAvxgQUY5ljMADVcl6pYCQC2FI9iXp+zHj8H9hASoAs2j/ZSHlw
ZBhd8TbHSkzc1ebmU4zC+z0kYw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:51:25 2026 by rpki-client