Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
File:                     5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json)
Hash identifier:          taIvntUcm4IZ309Rt5vKzJowML6U40kICdFV7ID5bo0=
Subject key identifier:   34:FC:83:9A:67:A4:B6:51:56:CC:87:1B:58:7C:FB:A5:23:4E:0E:34
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Certificate issuer:       /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
Manifest number:          0206
Signing time:             Sat 13 Jun 2026 03:06:16 +0000
Manifest this update:     Sat 13 Jun 2026 03:06:16 +0000
Manifest next update:     Sat 20 Jun 2026 03:06:16 +0000
Files and hashes:         1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: pk1CS+xiaRkA29PDNGPSOeyPBFng0TvGkyth79+HuMk=)
                          2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=)
                          3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
        Validity
            Not Before: Jun 13 03:06:16 2026 GMT
            Not After : Jun 20 03:06:16 2026 GMT
        Subject: CN=6a2cc928-1ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:2d:73:57:dc:3a:14:e8:33:6d:f3:0f:2e:
                    f1:18:b8:ba:f4:31:12:75:bf:5a:b5:e5:0f:6a:12:
                    e8:01:44:5f:ed:45:4e:48:35:4b:0d:fd:aa:f1:ee:
                    03:4e:11:d1:88:79:79:df:5a:ce:da:5d:b0:29:84:
                    c0:6b:43:23:e4:85:ee:7d:15:fc:8d:0c:7b:96:e4:
                    47:8d:a3:ca:f5:f4:a8:21:a5:ec:30:ca:a0:77:a5:
                    a2:23:74:15:f1:b7:8c:13:4f:a5:96:71:20:47:f4:
                    c7:08:74:9b:52:e1:44:07:55:9d:c7:25:20:0b:03:
                    41:33:c8:a1:f6:1e:c2:bc:06:4e:4b:e8:63:0a:79:
                    33:ec:42:3d:ae:67:bf:e0:39:2b:07:72:0d:0c:13:
                    bc:97:30:90:9d:cc:20:b7:af:6c:00:2e:12:2d:e9:
                    3c:ce:3b:ef:41:93:79:76:6b:59:1b:df:a7:89:72:
                    3a:e5:f5:53:c5:e4:27:38:8b:b2:ac:91:1a:50:24:
                    6e:cb:7b:6a:c4:a2:04:52:21:c6:78:1d:af:0b:c6:
                    d4:0a:35:f8:87:8d:21:ec:3f:8f:a5:56:59:53:5b:
                    0b:5e:48:bc:31:48:82:1c:ba:8a:60:e0:35:da:c7:
                    ed:1c:0e:bd:9b:c8:68:b6:79:fc:0a:a1:23:5c:8a:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FC:83:9A:67:A4:B6:51:56:CC:87:1B:58:7C:FB:A5:23:4E:0E:34
            X509v3 Authority Key Identifier:
                keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1e:a3:4d:7c:1f:51:32:eb:3b:ef:d9:89:a5:93:a0:5b:b0:
         f9:5b:f8:eb:b9:93:cd:d9:7e:7d:05:6d:0e:c6:d4:6c:ea:57:
         bf:ca:5d:1d:ce:5a:cc:c4:f1:f3:5e:9b:5b:37:7e:ac:74:42:
         b8:da:ac:24:4f:35:d0:d4:54:5e:1e:14:98:82:92:ec:71:d1:
         14:88:20:4e:82:ef:98:84:90:eb:3a:16:30:16:89:c3:cf:3f:
         e3:e5:14:c5:43:31:2f:bc:04:0a:f9:10:61:b0:b6:d4:d6:4e:
         70:01:4e:54:e1:d2:6c:5f:39:db:d2:85:39:54:56:62:a9:3a:
         31:0b:4d:00:78:4b:9c:cd:03:ee:4a:f1:38:a7:f8:00:ce:1b:
         18:21:d3:ae:5d:b4:a0:28:87:8f:50:68:b9:3d:2b:6f:a7:70:
         0c:a1:1e:d4:82:a2:5c:db:06:49:fd:cc:b3:83:26:f2:fc:ac:
         2a:d7:e3:34:3c:6e:dc:cf:48:e9:14:91:46:2c:ca:83:ed:51:
         38:ca:1f:e6:d4:74:b1:11:f4:e8:88:f1:ae:1c:0b:94:82:96:
         66:9a:ef:f9:ae:1a:22:6c:ba:fc:fe:e5:d8:40:ec:fe:65:6d:
         a7:31:96:4f:61:fd:38:ec:51:81:a8:d3:d4:2c:23:44:00:0a:
         51:da:24:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC
MjdEODQ3QTQwHhcNMjYwNjEzMDMwNjE2WhcNMjYwNjIwMDMwNjE2WjAYMRYwFAYD
VQQDEw02YTJjYzkyOC0xY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugEtc1fcOhToM23zDy7xGLi69DESdb9ateUPahLoAURf7UVOSDVLDf2q8e4D
ThHRiHl531rO2l2wKYTAa0Mj5IXufRX8jQx7luRHjaPK9fSoIaXsMMqgd6WiI3QV
8beME0+llnEgR/THCHSbUuFEB1WdxyUgCwNBM8ih9h7CvAZOS+hjCnkz7EI9rme/
4DkrB3INDBO8lzCQncwgt69sAC4SLek8zjvvQZN5dmtZG9+niXI65fVTxeQnOIuy
rJEaUCRuy3tqxKIEUiHGeB2vC8bUCjX4h40h7D+PpVZZU1sLXki8MUiCHLqKYOA1
2sftHA69m8hotnn8CqEjXIoJpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDT8g5pn
pLZRVsyHG1h8+6UjTg40MB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz
dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApx6jTXwfUTLrO+/ZiaWToFuw+Vv467mTzdl+fQVtDsbUbOpXv8pdHc5azMTx
816bWzd+rHRCuNqsJE810NRUXh4UmIKS7HHRFIggToLvmISQ6zoWMBaJw88/4+UU
xUMxL7wECvkQYbC21NZOcAFOVOHSbF8529KFOVRWYqk6MQtNAHhLnM0D7krxOKf4
AM4bGCHTrl20oCiHj1BouT0rb6dwDKEe1IKiXNsGSf3Ms4Mm8vysKtfjNDxu3M9I
6RSRRizKg+1ROMof5tR0sRH06IjxrhwLlIKWZprv+a4aImy6/P7l2EDs/mVtpzGW
T2H9OOxRgajT1CwjRAAKUdokKg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:58 2026 by rpki-client