Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File:                     AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier:          ZLf2K6RY7oHzm8vZxvlP6vfDNjLfMedzlFPnImWqdys=
Subject key identifier:   62:4D:1C:E2:15:4A:B3:B8:B1:2A:34:99:F4:85:18:08:0F:2A:51:46
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer:       /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number:          9F
Signing time:             Sat 13 Jun 2026 07:27:31 +0000
Manifest this update:     Sat 13 Jun 2026 07:27:31 +0000
Manifest next update:     Sat 20 Jun 2026 07:27:31 +0000
Files and hashes:         1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: QRMnmCBzFZyTdsLPhLPhkA4ZFRHTY7ncJ9oY9Vym3XY=)
                          2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
        Validity
            Not Before: Jun 13 07:27:31 2026 GMT
            Not After : Jun 20 07:27:31 2026 GMT
        Subject: CN=6a2d0663-cd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:b4:a2:0a:8a:08:13:24:54:ef:18:9e:dd:
                    32:cf:98:f2:18:89:6a:23:67:61:40:bd:9f:e7:5e:
                    4b:d1:25:be:8d:bd:d6:52:1c:6f:3f:18:b8:77:0e:
                    b6:be:7d:a9:de:9d:2d:ce:21:6a:03:13:40:18:89:
                    cc:12:9b:5b:d2:1a:e0:e0:c6:d8:2f:69:84:9d:20:
                    1f:eb:98:fe:6f:80:81:d9:fe:6f:3e:dd:94:26:5d:
                    06:5e:c0:d0:b8:87:82:0e:29:e7:95:70:31:8f:80:
                    ec:93:2c:5d:ae:a0:a9:17:b0:a8:af:55:16:b6:85:
                    16:ff:19:55:92:ec:2c:e2:ae:24:3c:93:2e:98:ed:
                    e4:c2:13:0e:30:06:f5:30:91:0b:89:f9:a7:2f:e1:
                    5e:39:bf:2b:7a:c0:df:cf:b8:21:00:68:0b:ad:a5:
                    2e:52:ea:aa:66:bf:00:fe:e3:49:e7:12:98:8d:18:
                    74:2f:4f:18:2c:0b:8c:7b:64:3b:5e:40:bb:ab:33:
                    01:e9:97:95:00:84:5a:26:a1:c3:23:21:3e:e9:fc:
                    ec:91:74:35:98:bb:a4:14:ef:7b:b3:61:e8:e3:56:
                    5a:23:a5:8e:10:01:42:78:ff:c7:8c:09:bc:d2:c8:
                    38:d2:07:6c:1c:53:ed:02:a1:e7:f7:eb:53:6e:d9:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4D:1C:E2:15:4A:B3:B8:B1:2A:34:99:F4:85:18:08:0F:2A:51:46
            X509v3 Authority Key Identifier:
                keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:84:18:fa:70:7f:dd:bb:66:86:45:dd:b0:74:fb:ea:7e:94:
         e1:05:1f:91:1e:6a:87:31:c6:7c:94:74:36:6e:ef:78:77:7c:
         2c:35:5e:31:25:4e:e0:fd:5d:11:af:70:8d:a3:44:23:02:4f:
         2f:7d:ea:05:4c:dc:c1:d8:1a:8f:54:25:9d:9f:c2:37:98:4a:
         61:59:b8:22:dc:71:98:2a:2f:c2:2e:74:4b:f0:c5:0d:67:74:
         00:4c:78:5f:8e:03:e8:f6:93:9f:df:d1:f6:34:8f:b9:9a:37:
         f2:19:33:69:b8:ad:0e:a5:b8:e3:f2:30:2f:af:d3:25:95:f9:
         0d:23:8b:e7:fd:5b:12:69:c9:0f:f5:75:92:04:0f:ca:a7:47:
         fe:f5:4c:c0:58:f7:77:df:49:04:72:29:fa:c6:d0:f9:c0:3c:
         3d:64:e6:0f:99:fd:3c:2a:0f:2f:37:fe:ae:e8:9d:b8:9a:d3:
         0b:53:60:41:ba:93:e2:1d:9c:88:b3:25:78:26:8d:d9:dc:c9:
         1f:e2:9c:aa:4e:5f:1a:58:73:93:37:2c:10:8d:31:69:09:4f:
         df:8a:ae:85:63:b6:33:42:3d:28:bb:fc:28:1d:84:cc:f2:b3:
         5b:2e:1e:98:a7:69:b9:4d:07:d2:aa:54:03:91:06:51:91:27:
         f5:8a:f9:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU5NzkxMTAvBgNVBAUTKDAxQzg1ODE4MTA4OEUxQjlDNTc3NURDQTBDNEJBRTlC
OUZGNTc3QjMwHhcNMjYwNjEzMDcyNzMxWhcNMjYwNjIwMDcyNzMxWjAYMRYwFAYD
VQQDEw02YTJkMDY2My1jZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4S0ogqKCBMkVO8Ynt0yz5jyGIlqI2dhQL2f515L0SW+jb3WUhxvPxi4dw62
vn2p3p0tziFqAxNAGInMEptb0hrg4MbYL2mEnSAf65j+b4CB2f5vPt2UJl0GXsDQ
uIeCDinnlXAxj4DskyxdrqCpF7Cor1UWtoUW/xlVkuws4q4kPJMumO3kwhMOMAb1
MJELifmnL+FeOb8resDfz7ghAGgLraUuUuqqZr8A/uNJ5xKYjRh0L08YLAuMe2Q7
XkC7qzMB6ZeVAIRaJqHDIyE+6fzskXQ1mLukFO97s2Ho41ZaI6WOEAFCeP/HjAm8
0sg40gdsHFPtAqHn9+tTbtl4OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJNHOIV
SrO4sSo0mfSFGAgPKlFGMB8GA1UdIwQYMBaAFAHIWBgQiOG5xXddygxLrpuf9Xez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk3OS81Mzk1MDc4NjdG
MjcxMUYwOTRCQTU3MjdDNEY5QUUwMi9BY2hZR0JDSTRibkZkMTNLREV1dW01XzFk
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTk3OS81Mzk1MDc4NjdGMjcxMUYwOTRCQTU3MjdDNEY5QUUwMi9BY2hZR0JDSTRi
bkZkMTNLREV1dW01XzFkN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIoQY+nB/3btmhkXdsHT76n6U4QUfkR5qhzHGfJR0Nm7veHd8LDVeMSVO4P1d
Ea9wjaNEIwJPL33qBUzcwdgaj1QlnZ/CN5hKYVm4ItxxmCovwi50S/DFDWd0AEx4
X44D6PaTn9/R9jSPuZo38hkzabitDqW44/IwL6/TJZX5DSOL5/1bEmnJD/V1kgQP
yqdH/vVMwFj3d99JBHIp+sbQ+cA8PWTmD5n9PCoPLzf+ruiduJrTC1NgQbqT4h2c
iLMleCaN2dzJH+Kcqk5fGlhzkzcsEI0xaQlP34quhWO2M0I9KLv8KB2EzPKzWy4e
mKdpuU0H0qpUA5EGUZEn9Yr5OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:35 2026 by rpki-client