Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
File:                     kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json)
Hash identifier:          9Zc/gtCotWLS3QtZVpYnmdft9VuNcGtJbqXvGbHWazo=
Subject key identifier:   F4:5F:F7:0B:7B:C5:FB:A1:B7:19:1A:74:31:E9:75:26:BE:F3:8C:01
Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
Certificate issuer:       /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
Manifest number:          03F1
Signing time:             Sat 13 Jun 2026 00:13:55 +0000
Manifest this update:     Sat 13 Jun 2026 00:13:55 +0000
Manifest next update:     Sat 20 Jun 2026 00:13:55 +0000
Files and hashes:         1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: tXmfaafcEavvhStzd6oDb0QHVyHrm2TXJYMkNtVk/7M=)
                          2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD
        Validity
            Not Before: Jun 13 00:13:55 2026 GMT
            Not After : Jun 20 00:13:55 2026 GMT
        Subject: CN=6a2ca0c3-d70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:73:5b:0d:09:82:64:c7:8d:5c:98:e0:c3:
                    c4:d9:da:a8:de:af:b0:f1:72:7d:64:c5:a8:4c:49:
                    f5:69:2b:34:b7:6b:d8:65:14:eb:e5:ac:9c:93:c4:
                    95:ef:f8:d7:51:c2:77:b8:6c:5c:2f:5d:5b:7a:c7:
                    6b:52:5c:57:cc:d7:19:34:cb:ab:ea:4c:72:8a:e7:
                    da:63:4a:85:09:00:f5:6f:79:36:68:07:c6:03:0d:
                    18:0b:70:78:8d:2d:6e:dd:f1:4b:66:33:95:47:42:
                    f2:80:e3:62:85:87:af:a3:75:54:27:a2:b6:56:28:
                    e7:4f:b8:a8:0c:35:72:63:04:30:6b:cb:98:f1:27:
                    5b:85:a7:41:43:7e:d0:58:47:1c:6e:cb:83:10:13:
                    f5:0b:58:92:82:ae:dc:9b:1a:26:3b:e3:37:06:9a:
                    17:b1:4b:bb:23:50:e5:64:7f:ff:62:c4:8f:83:cf:
                    c3:d3:93:01:12:c4:65:e4:cb:23:4c:4d:ad:bf:ef:
                    97:8c:51:96:f9:a4:36:0e:3e:29:01:64:45:f2:61:
                    ea:2b:ca:c5:77:6e:1e:97:d4:65:af:46:0a:f2:2b:
                    5e:84:25:17:30:5a:48:b2:6c:a0:8d:e8:87:dc:87:
                    79:3f:b1:51:c1:a1:ad:15:91:14:32:33:41:c0:27:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5F:F7:0B:7B:C5:FB:A1:B7:19:1A:74:31:E9:75:26:BE:F3:8C:01
            X509v3 Authority Key Identifier:
                keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:95:5d:0f:e2:c9:43:cc:cd:69:03:1e:04:d5:2c:13:f1:56:
         4a:26:c7:52:23:f3:e3:d1:1c:76:93:90:dd:82:2f:8a:60:1c:
         ff:9a:98:35:41:37:df:75:5c:e2:90:4d:3b:97:6c:5e:4b:6f:
         0e:85:92:dd:56:c5:e5:2c:41:8a:d2:55:61:fb:75:c1:70:0d:
         f9:af:74:5c:8f:89:63:d9:a8:88:dd:a0:6e:b0:e7:01:4a:6d:
         e5:02:09:0d:fe:0c:0a:37:f1:bf:54:8f:3b:93:09:92:d4:06:
         70:ac:c7:68:b5:47:0e:45:4b:31:e9:f2:98:33:f1:ae:ae:de:
         a3:82:88:6c:bd:9e:9b:3e:18:51:ab:20:03:95:df:d9:e0:90:
         a5:ff:25:62:f7:1e:59:5a:e4:92:78:4a:08:e4:d7:c3:5f:03:
         6e:1f:92:a7:86:30:19:04:fc:ed:49:53:09:55:92:22:3f:9c:
         dd:22:85:75:5a:5e:9a:36:70:06:01:45:e9:d6:3b:f9:79:f5:
         10:14:9b:05:d2:97:02:10:0d:8d:b1:5d:e6:09:ae:35:ac:69:
         0b:35:f5:b0:ae:fb:17:2d:c5:82:44:4a:35:23:67:77:38:ea:
         5a:a4:14:3a:ee:7f:36:03:5c:e2:7f:66:9d:37:6b:bb:2d:bf:
         9e:f2:7d:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0
NUJFQjU2RkQwHhcNMjYwNjEzMDAxMzU1WhcNMjYwNjIwMDAxMzU1WjAYMRYwFAYD
VQQDEw02YTJjYTBjMy1kNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArCVzWw0JgmTHjVyY4MPE2dqo3q+w8XJ9ZMWoTEn1aSs0t2vYZRTr5ayck8SV
7/jXUcJ3uGxcL11besdrUlxXzNcZNMur6kxyiufaY0qFCQD1b3k2aAfGAw0YC3B4
jS1u3fFLZjOVR0LygONihYevo3VUJ6K2VijnT7ioDDVyYwQwa8uY8SdbhadBQ37Q
WEccbsuDEBP1C1iSgq7cmxomO+M3BpoXsUu7I1DlZH//YsSPg8/D05MBEsRl5Msj
TE2tv++XjFGW+aQ2Dj4pAWRF8mHqK8rFd24el9Rlr0YK8itehCUXMFpIsmygjeiH
3Id5P7FRwaGtFZEUMjNBwCdbPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRf9wt7
xfuhtxkadDHpdSa+84wBMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3
N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5
bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASJVdD+LJQ8zNaQMeBNUsE/FWSibHUiPz49EcdpOQ3YIvimAc/5qYNUE333Vc
4pBNO5dsXktvDoWS3VbF5SxBitJVYft1wXAN+a90XI+JY9moiN2gbrDnAUpt5QIJ
Df4MCjfxv1SPO5MJktQGcKzHaLVHDkVLMenymDPxrq7eo4KIbL2emz4YUasgA5Xf
2eCQpf8lYvceWVrkknhKCOTXw18Dbh+Sp4YwGQT87UlTCVWSIj+c3SKFdVpemjZw
BgFF6dY7+Xn1EBSbBdKXAhANjbFd5gmuNaxpCzX1sK77Fy3FgkRKNSNndzjqWqQU
Ou5/NgNc4n9mnTdruy2/nvJ9Jg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:42:55 2026 by rpki-client