Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
File:                     h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json)
Hash identifier:          wQ8C6eyVZWXWi0itytixwWhiQSgJp65x4wB5c+diO7U=
Subject key identifier:   1C:D8:8D:F6:D5:E5:BB:C2:0F:B3:2C:7A:95:B0:0E:AE:D3:CC:38:AF
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Certificate issuer:       /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
Manifest number:          0254
Signing time:             Sat 13 Jun 2026 02:31:34 +0000
Manifest this update:     Sat 13 Jun 2026 02:31:33 +0000
Manifest next update:     Sat 20 Jun 2026 02:31:33 +0000
Files and hashes:         1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: q8O3d7e4/Ik+VdaA8YS9jxdW+Rw+whZMTD6PyCI6NPY=)
                          2: 00FB58CE5D4611F186A46996B2833773.roa (hash: NVOHwEnXASVBqmCqfxY3gSyyM9N1jznjqr0Pc3+NqTM=)
                          3: 20EEA4E85D4511F19E70A12CB2833773.roa (hash: 0NWy9uzlmlVP6XgEKzHCIkE1793aYzIulkG89nveM1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
        Validity
            Not Before: Jun 13 02:31:33 2026 GMT
            Not After : Jun 20 02:31:33 2026 GMT
        Subject: CN=6a2cc105-0437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:2f:96:e7:19:97:d9:6e:f9:64:39:4c:23:
                    a6:2d:a1:f4:a3:5b:db:cc:7e:46:70:b0:7e:bb:29:
                    62:48:31:a9:5c:cd:c7:ac:89:82:73:f8:eb:11:eb:
                    1e:4c:bb:92:27:b8:a7:ec:64:5c:ac:8a:ab:fb:ec:
                    28:59:f1:4f:12:58:da:bb:c8:48:a2:c6:09:d9:3f:
                    b2:fb:54:55:80:9c:3f:37:f9:94:c4:77:0d:3e:58:
                    e4:c6:67:0e:8b:f9:2b:67:85:06:de:2d:3a:fb:3d:
                    f9:9e:4f:3b:b7:ec:18:3b:36:eb:a4:4e:72:0e:31:
                    0a:96:85:10:8e:31:85:20:79:a2:b7:0f:44:27:90:
                    b1:59:69:4a:88:3d:1b:f1:af:7e:8c:76:ec:fb:d5:
                    e2:24:08:de:c1:f5:43:a1:ff:c8:9d:15:32:29:b8:
                    f5:f1:cf:f0:96:06:93:42:8a:96:f4:1b:b1:4b:82:
                    d1:a1:ea:45:31:b4:74:69:80:4c:bb:46:d6:b3:d1:
                    13:7f:93:a1:ee:02:15:27:58:51:98:35:99:1e:ca:
                    2f:af:b3:34:de:c4:09:15:a0:ba:1d:3b:67:07:bf:
                    8f:46:5c:e7:21:39:a7:ae:9f:40:cc:6d:c2:44:c2:
                    25:1c:65:a9:c1:23:ab:04:05:8b:84:6a:53:97:9a:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:8D:F6:D5:E5:BB:C2:0F:B3:2C:7A:95:B0:0E:AE:D3:CC:38:AF
            X509v3 Authority Key Identifier:
                keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0b:90:5e:43:01:3a:cd:0c:9c:c1:be:f5:49:14:a1:49:22:
         63:2d:09:9b:32:87:20:b4:7f:6f:2b:7b:7a:2c:7f:76:69:bb:
         5c:02:7a:d2:f2:58:a5:78:d8:c1:28:01:21:80:ac:0a:12:5e:
         b5:8c:7c:27:ea:96:18:f2:45:39:d9:9a:54:8f:26:38:88:c9:
         86:72:a1:9e:c4:9e:0a:70:48:5d:a8:dc:b1:ad:8b:ef:13:8b:
         36:62:5a:ab:c2:d9:f8:92:c7:a7:bf:5f:9e:0b:0e:b0:e6:44:
         e7:c8:c9:a1:31:4d:55:84:a4:e4:71:5b:f3:bd:a7:68:28:0a:
         2e:47:00:19:8a:66:07:c2:08:da:ce:cb:17:6c:98:8b:34:34:
         49:f8:82:bf:ef:f7:b7:ad:9d:3a:5e:3d:27:88:64:ae:b1:97:
         cb:f5:16:c7:32:6c:66:24:f9:60:9f:99:d8:14:4f:9a:db:c6:
         1f:80:dc:6e:dc:c8:e5:12:3c:f7:a9:d2:26:39:9f:0e:73:b6:
         f0:fe:db:a9:fb:10:23:7f:f1:c2:30:6f:0d:f0:f8:ea:d1:b1:
         29:c4:b3:a0:79:11:91:94:43:12:ad:e6:ee:ee:6b:20:86:56:
         52:fb:78:fe:01:de:5d:ea:60:7e:e8:68:b5:8f:54:17:ad:8f:
         95:58:27:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy
REVGNEMyMzQwHhcNMjYwNjEzMDIzMTMzWhcNMjYwNjIwMDIzMTMzWjAYMRYwFAYD
VQQDEw02YTJjYzEwNS0wNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqKIvlucZl9lu+WQ5TCOmLaH0o1vbzH5GcLB+uyliSDGpXM3HrImCc/jrEese
TLuSJ7in7GRcrIqr++woWfFPEljau8hIosYJ2T+y+1RVgJw/N/mUxHcNPljkxmcO
i/krZ4UG3i06+z35nk87t+wYOzbrpE5yDjEKloUQjjGFIHmitw9EJ5CxWWlKiD0b
8a9+jHbs+9XiJAjewfVDof/InRUyKbj18c/wlgaTQoqW9BuxS4LRoepFMbR0aYBM
u0bWs9ETf5Oh7gIVJ1hRmDWZHsovr7M03sQJFaC6HTtnB7+PRlznITmnrp9AzG3C
RMIlHGWpwSOrBAWLhGpTl5pVKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzYjfbV
5bvCD7MsepWwDq7TzDivMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB
RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi
dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALwuQXkMBOs0MnMG+9UkUoUkiYy0JmzKHILR/byt7eix/dmm7XAJ60vJYpXjY
wSgBIYCsChJetYx8J+qWGPJFOdmaVI8mOIjJhnKhnsSeCnBIXajcsa2L7xOLNmJa
q8LZ+JLHp79fngsOsOZE58jJoTFNVYSk5HFb872naCgKLkcAGYpmB8II2s7LF2yY
izQ0SfiCv+/3t62dOl49J4hkrrGXy/UWxzJsZiT5YJ+Z2BRPmtvGH4DcbtzI5RI8
96nSJjmfDnO28P7bqfsQI3/xwjBvDfD46tGxKcSzoHkRkZRDEq3m7u5rIIZWUvt4
/gHeXepgfuhotY9UF62PlVgnHg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:20 2026 by rpki-client