Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          QOuIBzRDl6uPfAeRbQAqvjByUSVKKeQPSXZKl3sSKOs=
Subject key identifier:   9A:F6:F0:F6:03:86:C2:46:BC:3E:A7:6A:B3:4B:B4:65:68:6B:11:3A
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          0240
Signing time:             Sat 13 Jun 2026 02:30:50 +0000
Manifest this update:     Sat 13 Jun 2026 02:30:50 +0000
Manifest next update:     Sat 20 Jun 2026 02:30:50 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: Oj3bvW6NRoA2/zYmmNd+UlL+Vntjdkyicuqd67VZdlk=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Jun 13 02:30:50 2026 GMT
            Not After : Jun 20 02:30:50 2026 GMT
        Subject: CN=6a2cc0da-ff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:33:0d:8e:94:51:56:5e:25:51:6d:0c:8e:
                    48:6a:a4:51:fa:a4:e2:a4:6b:d4:8c:17:c4:a5:51:
                    25:8b:9f:b7:e7:8f:52:59:36:a2:b7:45:e7:8b:0c:
                    c8:61:bc:25:ce:07:1e:1a:24:5f:88:0e:10:05:33:
                    1d:11:b9:fb:2b:b9:24:e3:e9:ff:84:fd:e3:20:54:
                    6f:ca:6d:d9:d6:2a:ea:5d:d3:18:2a:ef:8b:04:e6:
                    c1:10:ac:99:2d:d0:ed:44:95:08:4a:9d:78:7b:ff:
                    24:e0:36:9e:ad:71:3d:21:16:85:08:c1:d6:1e:51:
                    05:d7:90:18:0f:f7:48:4c:d9:07:91:f3:f3:5c:fe:
                    1b:16:b0:19:0b:ca:b9:3f:9c:77:3c:05:71:be:e6:
                    ef:37:b3:7e:7e:c4:db:27:fc:19:0c:d7:9b:bf:ee:
                    c9:b3:c2:e1:3f:3e:90:a7:4d:8e:20:f0:d9:04:17:
                    36:6a:11:9a:a9:c2:3c:2b:11:4a:e7:2a:28:a3:a1:
                    3c:2a:c2:c8:40:fa:67:9b:4d:fd:0f:48:cc:2d:05:
                    0b:a1:15:d4:af:78:71:75:04:af:2d:7a:ae:60:98:
                    ff:76:fc:56:e3:53:59:b3:d6:23:03:b5:63:19:5a:
                    ec:5a:fd:d7:54:5b:99:6a:3c:16:b6:f6:19:71:42:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F6:F0:F6:03:86:C2:46:BC:3E:A7:6A:B3:4B:B4:65:68:6B:11:3A
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:3f:2b:d0:f8:7f:42:a3:a5:43:fa:a7:a2:24:7a:83:4c:
         7d:18:28:f4:5b:0d:65:75:db:6c:bc:77:78:19:0c:99:f0:5d:
         53:70:93:dd:b5:6d:b0:85:dc:5e:50:1e:ff:b4:70:5c:3f:ad:
         cf:04:4b:54:bd:c5:8d:cb:1f:43:5a:28:4f:1e:bd:ce:a1:05:
         bb:40:bf:7f:22:61:b4:05:43:39:cc:b4:d1:cc:84:60:14:36:
         cd:34:d9:f0:a2:42:99:bd:d4:d2:6d:45:49:cc:49:68:32:31:
         8c:d7:56:a9:61:d8:70:e4:d8:49:e9:7a:b2:bf:ea:21:b7:ec:
         bd:76:9e:8d:3e:22:9f:6d:b1:fe:ff:aa:d1:b3:5c:02:88:38:
         d6:71:15:d9:77:84:b1:c6:02:18:5a:61:c2:13:a9:93:69:a4:
         12:94:15:8b:80:e2:a6:38:4a:f7:9b:0e:92:f7:55:3b:72:6c:
         01:5f:cd:9e:13:f9:b4:f6:45:02:ba:d1:1d:6a:0c:4b:9f:0d:
         2c:63:72:19:07:98:5e:2b:47:12:7e:7b:59:ce:96:69:78:49:
         42:69:e0:06:d4:8e:6a:4b:a8:60:7a:ac:78:5b:35:2b:b0:c1:
         ff:fc:1b:41:72:dc:32:5f:c3:0a:e5:16:34:01:77:a7:ba:a8:
         a5:26:20:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2
OUU5MTIwRUQwHhcNMjYwNjEzMDIzMDUwWhcNMjYwNjIwMDIzMDUwWjAYMRYwFAYD
VQQDEw02YTJjYzBkYS1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGwzDY6UUVZeJVFtDI5IaqRR+qTipGvUjBfEpVEli5+3549SWTait0XniwzI
YbwlzgceGiRfiA4QBTMdEbn7K7kk4+n/hP3jIFRvym3Z1irqXdMYKu+LBObBEKyZ
LdDtRJUISp14e/8k4DaerXE9IRaFCMHWHlEF15AYD/dITNkHkfPzXP4bFrAZC8q5
P5x3PAVxvubvN7N+fsTbJ/wZDNebv+7Js8LhPz6Qp02OIPDZBBc2ahGaqcI8KxFK
5yooo6E8KsLIQPpnm039D0jMLQULoRXUr3hxdQSvLXquYJj/dvxW41NZs9YjA7Vj
GVrsWv3XVFuZajwWtvYZcUIkIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJr28PYD
hsJGvD6narNLtGVoaxE6MB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5
QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr
QjZVcVk3dHpsbE5wNlJJTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnvk/K9D4f0KjpUP6p6IkeoNMfRgo9FsNZXXbbLx3eBkMmfBdU3CT3bVtsIXc
XlAe/7RwXD+tzwRLVL3FjcsfQ1ooTx69zqEFu0C/fyJhtAVDOcy00cyEYBQ2zTTZ
8KJCmb3U0m1FScxJaDIxjNdWqWHYcOTYSel6sr/qIbfsvXaejT4in22x/v+q0bNc
Aog41nEV2XeEscYCGFphwhOpk2mkEpQVi4DipjhK95sOkvdVO3JsAV/NnhP5tPZF
ArrRHWoMS58NLGNyGQeYXitHEn57Wc6WaXhJQmngBtSOakuoYHqseFs1K7DB//wb
QXLcMl/DCuUWNAF3p7qopSYgLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:58:20 2026 by rpki-client