Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File:                     TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier:          Zf6DUYM1ZmVY5WDZpeJdDGf0nSu2StjjDZIF+mYyECk=
Subject key identifier:   03:6F:12:0E:D1:3E:22:4F:85:8E:44:42:80:6B:22:46:ED:40:3F:31
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer:       /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number:          A2
Signing time:             Sat 13 Jun 2026 07:22:48 +0000
Manifest this update:     Sat 13 Jun 2026 07:22:48 +0000
Manifest next update:     Sat 20 Jun 2026 07:22:48 +0000
Files and hashes:         1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: uIvOLLsxfITJAiF74jsxm2eAkBo9ELBG4CDwwdY9Wss=)
                          2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
        Validity
            Not Before: Jun 13 07:22:48 2026 GMT
            Not After : Jun 20 07:22:48 2026 GMT
        Subject: CN=6a2d0548-fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:25:28:20:59:ee:2b:22:86:56:91:a6:f5:
                    5b:cd:a6:52:a4:fc:35:28:d9:02:95:18:f0:4e:75:
                    c2:4e:76:46:ae:75:8d:f5:11:a2:8e:dd:9c:d7:2a:
                    95:06:e5:e9:c1:79:eb:2c:c2:00:c8:f7:ff:26:f4:
                    c0:1d:10:4e:24:3a:01:5c:6a:eb:dc:c5:79:dd:88:
                    f1:06:bc:01:39:42:a0:00:fc:d7:1a:64:b3:5c:53:
                    f2:fd:c2:5f:73:77:46:21:db:a5:84:69:9d:f7:75:
                    3b:82:75:48:8e:67:55:05:15:a7:92:f5:06:47:2e:
                    3d:d4:de:a7:8d:13:53:1c:a8:f2:c1:91:0f:d0:8a:
                    56:9a:59:ff:52:97:03:f2:01:b0:ea:d7:aa:2e:aa:
                    99:82:75:c7:bf:4c:c5:e4:5b:a8:68:7d:cb:9a:d0:
                    92:0a:c0:7c:26:0c:e2:68:56:fb:01:1c:6f:b3:61:
                    a7:e6:00:56:83:df:8f:9d:c3:69:f2:9b:06:85:b5:
                    91:7b:c9:f7:74:d2:40:8d:50:c5:e3:e9:ea:f8:7d:
                    00:6f:a1:93:0b:d5:fc:32:a6:7d:87:8c:fd:3a:38:
                    32:1a:52:8b:e6:a6:55:6a:13:05:86:5d:9f:6d:20:
                    e4:db:c3:c9:03:c3:17:f2:0f:bf:32:ab:42:c0:44:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:12:0E:D1:3E:22:4F:85:8E:44:42:80:6B:22:46:ED:40:3F:31
            X509v3 Authority Key Identifier:
                keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:e2:63:03:4d:dd:f4:07:c9:0f:36:d2:23:fd:f0:85:1c:
         8b:26:a2:43:c0:25:1d:60:ce:b9:bd:03:11:3f:d3:d5:61:03:
         6e:a5:30:94:5f:25:c2:aa:5b:07:b3:24:9e:37:1d:8a:c9:28:
         fc:03:76:d0:60:58:33:bf:af:45:aa:4e:92:68:e3:32:8d:9d:
         53:28:64:bd:b8:4d:24:0f:c1:eb:4f:e9:a7:25:0d:14:c0:f8:
         db:a7:99:ba:68:1c:a8:22:bf:91:01:7c:12:30:68:04:1b:d3:
         22:77:56:57:83:d8:d6:8f:a4:89:37:55:c2:d3:69:f0:56:87:
         b5:96:45:ed:78:c3:bf:9a:2f:b9:d2:bb:f7:33:5a:0d:1d:95:
         bf:ba:ef:57:de:1f:db:cb:e2:d6:c9:d7:f3:2a:d6:82:77:5e:
         14:d1:f5:40:fc:4b:f2:6a:6c:73:ca:31:c1:45:c5:42:74:fd:
         16:53:72:8c:60:1b:a6:33:fd:d0:b4:26:b5:86:fe:51:4e:f6:
         5e:75:c2:de:5b:83:6f:87:6f:6f:e0:78:40:3a:71:fb:95:17:
         68:3f:20:73:8e:be:e3:3e:24:34:2a:64:b6:c1:e4:a1:d6:9e:
         eb:1a:79:56:2e:a5:1c:86:a7:a5:7b:67:b5:f9:0a:50:1c:7d:
         45:25:d9:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJCNkQxMTAvBgNVBAUTKDRENEYzQUFDQzczOTVBMTNENjQyMDA3Rjk5MTBERjg4
MDQwRTRCQUIwHhcNMjYwNjEzMDcyMjQ4WhcNMjYwNjIwMDcyMjQ4WjAYMRYwFAYD
VQQDEw02YTJkMDU0OC1mYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjwlKCBZ7isihlaRpvVbzaZSpPw1KNkClRjwTnXCTnZGrnWN9RGijt2c1yqV
BuXpwXnrLMIAyPf/JvTAHRBOJDoBXGrr3MV53YjxBrwBOUKgAPzXGmSzXFPy/cJf
c3dGIdulhGmd93U7gnVIjmdVBRWnkvUGRy491N6njRNTHKjywZEP0IpWmln/UpcD
8gGw6teqLqqZgnXHv0zF5FuoaH3LmtCSCsB8JgziaFb7ARxvs2Gn5gBWg9+PncNp
8psGhbWRe8n3dNJAjVDF4+nq+H0Ab6GTC9X8MqZ9h4z9OjgyGlKL5qZVahMFhl2f
bSDk28PJA8MX8g+/MqtCwEQdWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANvEg7R
PiJPhY5EQoBrIkbtQD8xMB8GA1UdIwQYMBaAFE1POqzHOVoT1kIAf5kQ34gEDkur
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI2RC84NkRGNkM3RTcx
MDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdoUFdRZ0JfbVJEZmlBUU9T
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkI2RC84NkRGNkM3RTcxMDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdo
UFdRZ0JfbVJEZmlBUU9TNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE/jiYwNN3fQHyQ820iP98IUciyaiQ8AlHWDOub0DET/T1WEDbqUwlF8lwqpb
B7Mknjcdisko/AN20GBYM7+vRapOkmjjMo2dUyhkvbhNJA/B60/ppyUNFMD426eZ
umgcqCK/kQF8EjBoBBvTIndWV4PY1o+kiTdVwtNp8FaHtZZF7XjDv5ovudK79zNa
DR2Vv7rvV94f28vi1snX8yrWgndeFNH1QPxL8mpsc8oxwUXFQnT9FlNyjGAbpjP9
0LQmtYb+UU72XnXC3luDb4dvb+B4QDpx+5UXaD8gc46+4z4kNCpktsHkodae6xp5
Vi6lHIanpXtntfkKUBx9RSXZOw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:39 2026 by rpki-client