Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File:                     pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier:          uwVvHY+UuVjIjuXMDXaNiuFhQXWmgiV0lO7ciL7j+9c=
Subject key identifier:   54:09:E8:E2:57:C5:09:AA:00:0A:B6:45:E3:A1:EF:5E:7A:52:72:B3
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer:       /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number:          2C05
Signing time:             Fri 12 Jun 2026 16:50:56 +0000
Manifest this update:     Fri 12 Jun 2026 16:50:56 +0000
Manifest next update:     Fri 19 Jun 2026 16:50:56 +0000
Files and hashes:         1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: aiZn/58hPI8KRMYK8hIFXzH5xC8EQ9deCNIzdOG2JJQ=)
                          2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: FN7ionNCsKZiB+JJCWg+mZ97x2n6JelTpdUahC3nlHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
        Validity
            Not Before: Jun 12 16:50:56 2026 GMT
            Not After : Jun 19 16:50:56 2026 GMT
        Subject: CN=6a2c38f0-faa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:88:62:b2:ef:58:9c:38:7d:54:d9:50:54:
                    2d:2b:df:ba:36:d6:bb:34:29:a1:08:5f:9a:ec:6c:
                    23:1c:5b:99:d5:4b:63:0a:62:b2:b9:4d:4e:48:01:
                    37:6f:08:49:25:51:11:71:e6:ef:cb:a0:b6:7b:1d:
                    8e:a8:d6:d1:ba:1b:6c:93:0b:07:d6:6e:54:7f:6e:
                    52:a8:4a:b9:6a:f6:87:95:20:e1:88:4a:bd:3c:b5:
                    64:ef:48:15:ce:cf:a3:72:a0:c3:98:a5:02:a0:8b:
                    fd:4a:71:49:a1:6a:25:5e:42:af:ee:65:51:97:6a:
                    2e:e8:13:ab:ba:f6:19:7a:60:49:08:4e:52:09:0d:
                    a3:03:b7:f3:ab:77:9c:44:64:59:85:5c:de:4f:e8:
                    42:30:b2:cc:56:0c:2f:97:13:11:8c:0d:b4:58:df:
                    21:fd:bf:d1:d1:5c:ab:d2:51:4c:ae:b4:13:16:b6:
                    24:2f:50:8b:e7:c0:58:66:74:24:4b:b8:48:6d:94:
                    8b:d4:b0:5a:5d:d7:aa:e7:79:e3:6d:de:32:00:9d:
                    c4:1c:b5:68:dc:ad:fd:1d:02:c7:33:02:58:0c:12:
                    b1:4d:df:c0:7e:c5:4a:51:27:b5:22:c3:a4:59:5c:
                    14:02:58:9e:8d:78:e3:c1:74:1b:8c:84:14:29:c6:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:E8:E2:57:C5:09:AA:00:0A:B6:45:E3:A1:EF:5E:7A:52:72:B3
            X509v3 Authority Key Identifier:
                keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:65:ce:97:ea:8e:4f:21:1a:0a:0b:6a:7e:a7:e0:4d:fa:5e:
         3e:ce:c3:04:cc:5b:38:be:15:eb:c1:4f:02:bb:78:6f:f7:8c:
         46:9c:57:dc:30:21:7a:8f:d5:c8:ae:51:07:a4:11:dd:91:df:
         e2:2a:f0:31:57:6a:36:33:bd:2f:d7:cc:05:c9:ab:01:19:d8:
         88:50:73:2a:0a:85:b7:2d:ae:a3:c5:61:c0:8e:76:dc:8e:62:
         a8:f7:a5:57:18:f2:a5:bd:6a:f5:fa:36:82:83:cf:69:28:ce:
         48:f0:63:f1:22:a0:6e:9e:89:30:f7:fc:3a:71:d9:d7:28:70:
         45:69:93:9e:aa:ee:53:da:41:00:dc:92:ea:95:7c:ea:77:3f:
         87:23:dc:bb:05:63:68:20:68:a8:4e:ca:11:7d:5b:83:19:f4:
         da:7a:82:78:f7:a9:83:ec:77:dd:6b:a3:be:85:8f:06:d3:9a:
         77:f0:2c:bb:08:5a:1d:ee:30:42:f5:22:5c:5f:97:9e:d2:75:
         9a:54:d8:b1:c1:ad:f0:12:1b:f9:b5:5e:be:ce:1e:e8:25:0f:
         6a:50:c7:b5:03:41:d3:08:3e:f9:eb:ee:d7:6a:63:a5:31:c6:
         97:65:95:8b:8b:c1:26:b1:c7:01:6a:10:48:51:31:e3:c0:20:
         6f:1d:66:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1
NzhBMEVENUUwHhcNMjYwNjEyMTY1MDU2WhcNMjYwNjE5MTY1MDU2WjAYMRYwFAYD
VQQDEw02YTJjMzhmMC1mYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqg2IYrLvWJw4fVTZUFQtK9+6Nta7NCmhCF+a7GwjHFuZ1UtjCmKyuU1OSAE3
bwhJJVERcebvy6C2ex2OqNbRuhtskwsH1m5Uf25SqEq5avaHlSDhiEq9PLVk70gV
zs+jcqDDmKUCoIv9SnFJoWolXkKv7mVRl2ou6BOruvYZemBJCE5SCQ2jA7fzq3ec
RGRZhVzeT+hCMLLMVgwvlxMRjA20WN8h/b/R0Vyr0lFMrrQTFrYkL1CL58BYZnQk
S7hIbZSL1LBaXdeq53njbd4yAJ3EHLVo3K39HQLHMwJYDBKxTd/AfsVKUSe1IsOk
WVwUAliejXjjwXQbjIQUKcZ26wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQJ6OJX
xQmqAAq2ReOh7156UnKzMB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ
cHppQ09QTHRNRlZYaWc3VjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcGXOl+qOTyEaCgtqfqfgTfpePs7DBMxbOL4V68FPArt4b/eMRpxX3DAheo/V
yK5RB6QR3ZHf4irwMVdqNjO9L9fMBcmrARnYiFBzKgqFty2uo8VhwI523I5iqPel
Vxjypb1q9fo2goPPaSjOSPBj8SKgbp6JMPf8OnHZ1yhwRWmTnqruU9pBANyS6pV8
6nc/hyPcuwVjaCBoqE7KEX1bgxn02nqCePepg+x33WujvoWPBtOad/AsuwhaHe4w
QvUiXF+XntJ1mlTYscGt8BIb+bVevs4e6CUPalDHtQNB0wg++evu12pjpTHGl2WV
i4vBJrHHAWoQSFEx48Agbx1m2A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:45 2026 by rpki-client