Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File:                     8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier:          2dMDgb2Jn4lr90ebxdQHKCBLLh7B5e99MgtuYsxxopI=
Subject key identifier:   F0:2E:C5:80:A9:B8:93:CE:5E:E7:14:DD:C6:64:FC:93:81:09:14:91
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer:       /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number:          3D
Signing time:             Sat 13 Jun 2026 08:38:03 +0000
Manifest this update:     Sat 13 Jun 2026 08:38:03 +0000
Manifest next update:     Sat 20 Jun 2026 08:38:03 +0000
Files and hashes:         1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: LnbdmyXsssoT1ciqMa7z3cYBENprovV7MZxINqnLIlI=)
                          2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
        Validity
            Not Before: Jun 13 08:38:03 2026 GMT
            Not After : Jun 20 08:38:03 2026 GMT
        Subject: CN=6a2d16eb-5155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:eb:75:fd:55:b1:50:a0:f5:01:11:2d:35:
                    a9:67:12:ae:9e:82:ad:c6:b7:a2:9f:f8:a8:1b:20:
                    6c:4b:13:40:49:7e:3a:a8:7d:4e:f2:be:c3:37:f5:
                    9a:04:63:37:04:ef:5a:e1:53:89:71:2c:c7:7b:3c:
                    2d:44:c1:98:05:9c:00:9f:c0:74:af:d7:44:71:f1:
                    65:32:d0:39:ab:ab:e3:6a:75:c3:2e:f0:c2:be:03:
                    12:68:d1:77:18:c2:32:d7:3a:3f:00:68:77:84:e0:
                    d7:23:e7:55:64:be:cb:d0:3c:35:8c:8e:35:79:2a:
                    de:25:97:ee:50:ab:86:13:ae:6a:2d:60:82:b4:c8:
                    31:73:3e:93:22:39:a5:f3:05:7e:a6:51:be:b6:b7:
                    84:63:59:92:f3:c1:8c:a5:7e:6e:2e:ba:99:ea:f6:
                    c3:2d:42:b7:a5:5a:a9:95:7f:3f:1a:52:68:f9:61:
                    52:de:d0:e3:c6:36:ec:8c:0c:86:c3:c6:5e:bc:6a:
                    e5:e2:d6:e0:d3:f3:96:6a:bd:a5:1d:28:64:fc:81:
                    98:de:21:d3:98:21:91:08:e0:f6:eb:45:db:5b:28:
                    2e:6c:a2:54:df:df:4e:cd:4f:f6:8b:0d:77:c0:53:
                    84:6c:fd:d6:e9:01:34:3a:86:b8:51:90:fb:1a:f3:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:C5:80:A9:B8:93:CE:5E:E7:14:DD:C6:64:FC:93:81:09:14:91
            X509v3 Authority Key Identifier:
                keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:33:56:e9:7c:eb:c1:12:9b:2a:06:e6:96:4d:94:02:ac:4b:
         15:52:76:5c:4d:f0:3b:64:0c:cf:c7:9f:55:0c:04:5e:5d:d2:
         62:62:92:ca:aa:3f:00:86:37:77:98:88:7e:80:e5:95:86:7d:
         1e:f8:4f:eb:29:5e:1f:95:87:bc:bd:12:5b:8c:75:8b:b7:ca:
         37:80:f2:b6:04:fb:77:13:0f:e8:bc:ad:03:9d:e9:68:ec:31:
         86:3f:89:31:53:b7:8a:a8:38:cf:b7:51:37:d0:e0:8a:b5:22:
         86:98:92:e8:7e:62:27:a1:ad:72:2d:3f:9c:9c:50:3c:3d:84:
         9f:d5:8b:f4:b2:47:27:aa:70:25:7c:b7:84:57:e7:4c:25:1c:
         4a:99:b0:f9:d1:eb:80:cd:dc:48:db:04:e7:79:69:dd:48:63:
         8d:dc:ab:b0:ab:af:0e:84:e8:f1:db:e6:88:16:f6:e3:6c:a0:
         7e:a9:cb:1a:5e:71:69:d8:bc:53:5c:62:bc:0f:fa:a0:ff:35:
         38:24:8b:af:53:ef:03:1c:27:f4:2d:34:ae:7d:d1:05:71:9c:
         cc:fc:f3:86:75:0d:be:72:d1:83:19:e6:44:fe:26:9b:01:b1:
         23:ce:00:f6:2b:a0:ac:9e:a2:4e:62:bc:39:ee:4b:e4:8b:74:
         d2:40:4a:c7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OTcwNjExMC8GA1UEBRMoRjFFMEZEN0JEQUYxNzE5ODkwRjZCMjQ5QjNCQzQxODIx
NEJBOEFDQjAeFw0yNjA2MTMwODM4MDNaFw0yNjA2MjAwODM4MDNaMBgxFjAUBgNV
BAMTDTZhMmQxNmViLTUxNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5J+t1/VWxUKD1AREtNalnEq6egq3Gt6Kf+KgbIGxLE0BJfjqofU7yvsM39ZoE
YzcE71rhU4lxLMd7PC1EwZgFnACfwHSv10Rx8WUy0Dmrq+NqdcMu8MK+AxJo0XcY
wjLXOj8AaHeE4Ncj51VkvsvQPDWMjjV5Kt4ll+5Qq4YTrmotYIK0yDFzPpMiOaXz
BX6mUb62t4RjWZLzwYylfm4uupnq9sMtQrelWqmVfz8aUmj5YVLe0OPGNuyMDIbD
xl68auXi1uDT85ZqvaUdKGT8gZjeIdOYIZEI4PbrRdtbKC5solTf307NT/aLDXfA
U4Rs/dbpATQ6hrhRkPsa81aZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8C7FgKm4
k85e5xTdxmT8k4EJFJEwHwYDVR0jBBgwFoAU8eD9e9rxcZiQ9rJJs7xBghS6issw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0Y4ODg0NDNBMTE0
NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1ppUTlySkpzN3hCZ2hTNmlz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvOGVEOWU5cnhjWmlROXJKSnM3eEJnaFM2aXNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
NzA2L0Y4ODg0NDNBMTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1pp
UTlySkpzN3hCZ2hTNmlzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWM1bpfOvBEpsqBuaWTZQCrEsVUnZcTfA7ZAzPx59VDAReXdJiYpLKqj8Ahjd3
mIh+gOWVhn0e+E/rKV4flYe8vRJbjHWLt8o3gPK2BPt3Ew/ovK0Dnelo7DGGP4kx
U7eKqDjPt1E30OCKtSKGmJLofmInoa1yLT+cnFA8PYSf1Yv0skcnqnAlfLeEV+dM
JRxKmbD50euAzdxI2wTneWndSGON3Kuwq68OhOjx2+aIFvbjbKB+qcsaXnFp2LxT
XGK8D/qg/zU4JIuvU+8DHCf0LTSufdEFcZzM/POGdQ2+ctGDGeZE/iabAbEjzgD2
K6CsnqJOYrw57kvki3TSQErH
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:56 2026 by rpki-client