Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
File:                     JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json)
Hash identifier:          Gqjws74cCl4AyZXwp9aNg2CnTveNlSq8hHvKv1HRc9w=
Subject key identifier:   16:DB:60:15:8B:CD:B6:6B:E0:65:FB:3D:7D:E9:2E:10:00:24:76:46
Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA
Certificate issuer:       /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
Certificate serial:       1DF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
Manifest number:          1DE8
Signing time:             Fri 12 Jun 2026 16:03:50 +0000
Manifest this update:     Fri 12 Jun 2026 16:03:50 +0000
Manifest next update:     Fri 19 Jun 2026 16:03:50 +0000
Files and hashes:         1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: ibOkMHyiqWk2TfnZmPhtzxJ5elB02cnB4hV01s+NJrE=)
                          2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: mcaworGjWUNORQMelgirXxDQ4QyGEosHFS/EBWtQzVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl
                          rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7673 (0x1df9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23C5, serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA
        Validity
            Not Before: Jun 12 16:03:50 2026 GMT
            Not After : Jun 19 16:03:50 2026 GMT
        Subject: CN=6a2c2de6-a109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:6b:e1:ca:bf:32:4d:15:ef:30:3c:e8:9c:
                    bc:52:ab:25:a6:bf:e2:7e:a3:78:44:ea:22:e9:e8:
                    4a:38:71:81:c5:7c:05:f6:4d:70:d5:93:76:23:25:
                    91:11:1c:d8:00:e9:46:91:72:12:99:b4:01:1a:d9:
                    f3:35:2d:ff:5d:35:16:22:91:60:61:67:1e:21:83:
                    2e:5d:ee:48:db:cb:06:84:71:b5:a3:ef:29:3c:86:
                    57:2c:5f:96:46:83:6f:46:08:70:29:85:03:ea:6d:
                    e9:a5:b2:3d:3d:4a:a4:ef:29:cd:84:b1:df:5c:7d:
                    e0:9c:ee:41:9d:0d:d3:e9:ce:87:9f:2f:36:49:ee:
                    2c:40:fc:0b:f3:f1:87:93:ed:54:01:0e:ae:d9:91:
                    56:e2:66:26:38:9a:e8:1b:33:74:af:18:fe:0c:b4:
                    c3:a9:3f:c7:de:a3:b3:90:5c:6b:61:53:bd:bd:1b:
                    a1:86:ed:4a:81:ff:d1:bc:a4:94:ac:62:38:90:c8:
                    10:83:53:f3:a6:e1:16:70:ba:28:c1:b9:6f:3a:db:
                    8a:03:dd:1a:76:48:45:86:4b:b4:8e:21:1f:c9:59:
                    9d:8e:97:6f:03:79:c9:41:ab:ef:ad:14:cc:1c:da:
                    52:d2:87:32:2f:45:44:af:1b:86:f7:c0:51:49:55:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:60:15:8B:CD:B6:6B:E0:65:FB:3D:7D:E9:2E:10:00:24:76:46
            X509v3 Authority Key Identifier:
                keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c0:65:6e:31:1e:ac:23:70:09:65:5f:d8:d8:f2:9c:95:8e:
         6a:4d:a8:5f:80:3b:44:1f:db:df:e7:99:f3:ca:94:a4:51:bc:
         ca:7a:e5:00:db:86:4a:48:eb:fe:1c:e2:df:86:26:e6:32:0e:
         da:4a:f5:00:d1:77:7c:00:38:57:ee:cb:c3:f9:ea:cf:86:43:
         fa:9b:86:14:10:6b:9d:d3:95:b8:0b:61:3e:c4:15:6b:e9:c7:
         d5:d1:dd:df:e2:ca:49:58:90:81:30:51:3e:fb:b1:e6:52:37:
         f7:70:7a:ac:37:e7:a7:ff:5a:23:15:e9:91:af:40:45:26:3f:
         bf:29:c0:1d:5c:40:2c:32:01:16:fa:02:7b:10:44:ac:b6:eb:
         62:9f:5e:d1:2a:59:7a:1d:fe:d4:5d:6b:4b:47:17:88:2c:28:
         42:fc:1d:23:00:ad:1a:1b:a7:f3:30:ca:8d:bc:f2:f6:9a:6c:
         b0:51:e6:aa:b2:19:47:36:14:0a:94:8a:64:9b:d5:35:02:a5:
         39:c0:f2:5f:72:90:89:38:9a:f1:57:76:91:30:5c:01:7d:ba:
         1e:ad:4b:51:ac:ae:96:90:5b:fd:6f:81:62:99:50:f6:31:67:
         a4:ee:61:ed:de:69:49:70:60:93:29:7f:47:b3:1d:34:fa:b0:
         4c:c8:3f:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIzQzUxMTAvBgNVBAUTKDI3MzQwNDdENkU5NzhENTA5QkE4QTUxQTZGMTA2NDg3
OEY0Nzc1REEwHhcNMjYwNjEyMTYwMzUwWhcNMjYwNjE5MTYwMzUwWjAYMRYwFAYD
VQQDEw02YTJjMmRlNi1hMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuY9r4cq/Mk0V7zA86Jy8Uqslpr/ifqN4ROoi6ehKOHGBxXwF9k1w1ZN2IyWR
ERzYAOlGkXISmbQBGtnzNS3/XTUWIpFgYWceIYMuXe5I28sGhHG1o+8pPIZXLF+W
RoNvRghwKYUD6m3ppbI9PUqk7ynNhLHfXH3gnO5BnQ3T6c6Hny82Se4sQPwL8/GH
k+1UAQ6u2ZFW4mYmOJroGzN0rxj+DLTDqT/H3qOzkFxrYVO9vRuhhu1Kgf/RvKSU
rGI4kMgQg1PzpuEWcLoowblvOtuKA90adkhFhku0jiEfyVmdjpdvA3nJQavvrRTM
HNpS0ocyL0VErxuG98BRSVW8kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbbYBWL
zbZr4GX7PX3pLhAAJHZGMB8GA1UdIwQYMBaAFCc0BH1ul41Qm6ilGm8QZIePR3Xa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNDNS84MzFBMjBGRUI1
QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpWQ2JxS1VhYnhCa2g0OUhk
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p6UUVmVzZYalZDYnFLVWFieEJraDQ5SGRkby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjNDNS84MzFBMjBGRUI1QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpW
Q2JxS1VhYnhCa2g0OUhkZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvcBlbjEerCNwCWVf2NjynJWOak2oX4A7RB/b3+eZ88qUpFG8ynrlANuGSkjr
/hzi34Ym5jIO2kr1ANF3fAA4V+7Lw/nqz4ZD+puGFBBrndOVuAthPsQVa+nH1dHd
3+LKSViQgTBRPvux5lI393B6rDfnp/9aIxXpka9ARSY/vynAHVxALDIBFvoCexBE
rLbrYp9e0SpZeh3+1F1rS0cXiCwoQvwdIwCtGhun8zDKjbzy9ppssFHmqrIZRzYU
CpSKZJvVNQKlOcDyX3KQiTia8Vd2kTBcAX26Hq1LUayulpBb/W+BYplQ9jFnpO5h
7d5pSXBgkyl/R7MdNPqwTMg/5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:35 2026 by rpki-client