Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File:                     iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier:          DnXEqqUGVCn7m6QGZgAu1zZo9EXNSypUEs3vzElDJtM=
Subject key identifier:   70:A7:17:19:25:89:1E:F6:78:80:BE:B3:D3:9C:80:F8:45:BE:33:54
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer:       /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number:          08F6
Signing time:             Fri 12 Jun 2026 20:57:43 +0000
Manifest this update:     Fri 12 Jun 2026 20:57:42 +0000
Manifest next update:     Fri 19 Jun 2026 20:57:42 +0000
Files and hashes:         1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: 8Yqw5oQ2n9tNaagjF32X4dwQTIj0rN51IOeLtarfGqQ=)
                          2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=)
                          3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
        Validity
            Not Before: Jun 12 20:57:42 2026 GMT
            Not After : Jun 19 20:57:42 2026 GMT
        Subject: CN=6a2c72c7-840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2b:99:b3:98:55:b5:7c:54:b2:cc:33:68:9e:
                    54:6a:9c:c2:a0:4f:bd:a1:0b:c0:d1:40:85:30:9b:
                    53:ca:e2:4b:e9:7c:b9:2d:30:46:cf:df:f8:73:2b:
                    43:42:17:8d:e5:bb:15:e7:ea:3f:b7:28:69:9f:ee:
                    e3:68:b3:b5:39:36:c3:cd:61:71:6e:1d:47:e9:4c:
                    3f:b8:fa:01:a7:55:7f:8c:81:ce:5d:07:e7:93:85:
                    1d:77:ad:31:7f:8a:f1:62:6c:b6:3a:c0:a0:07:e0:
                    fc:e9:23:b3:9d:4e:63:26:62:55:09:b1:4a:04:fd:
                    34:d1:6f:07:a8:b4:a9:ba:0c:88:39:53:ce:b5:3b:
                    3c:91:8b:88:57:e4:8b:c3:5c:8a:b7:93:40:65:21:
                    49:f7:58:43:bf:ac:91:cb:e2:31:16:90:49:0e:bb:
                    4c:8f:db:d1:24:02:88:3a:b8:70:77:a4:26:13:02:
                    7b:a2:05:a0:d8:95:b9:8b:6d:7c:c3:0f:3d:fd:8b:
                    eb:d9:3e:0d:57:aa:0d:d1:34:bf:e3:10:0f:c2:65:
                    87:f5:70:af:d8:c6:29:60:df:4c:47:72:80:1a:e6:
                    1e:2b:50:56:22:62:a3:c3:21:70:35:4d:96:24:13:
                    38:6f:68:e4:c6:72:23:3c:32:d7:da:0d:6e:a7:f9:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:17:19:25:89:1E:F6:78:80:BE:B3:D3:9C:80:F8:45:BE:33:54
            X509v3 Authority Key Identifier:
                keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:86:b8:16:47:e8:05:cb:2e:7c:45:f9:a4:39:e9:5a:52:97:
         4b:bb:51:3f:c5:19:46:3b:68:1b:2d:26:43:99:4c:2d:ff:94:
         2e:f4:0c:c8:66:4e:30:88:bf:3c:36:d9:78:5c:91:69:5c:40:
         56:fd:e2:8b:42:f9:9b:f1:f8:ca:59:34:e1:65:aa:e1:7e:88:
         53:85:d1:88:9d:e3:fa:c6:48:08:c2:c8:e6:d1:55:da:72:eb:
         bd:15:51:fe:18:1e:42:c3:48:cb:e8:2e:19:dd:2f:4e:c7:4e:
         dc:b0:38:30:e2:a8:d7:99:0b:8c:a6:2c:c0:7a:4f:a2:12:25:
         d9:2e:91:82:57:1e:35:5d:3d:e1:2b:f5:7e:23:d6:b0:a5:3a:
         e4:4a:59:53:b3:b9:07:92:ef:30:49:14:f4:ad:13:00:6d:c7:
         ec:a5:37:ed:00:a0:b0:4f:19:31:83:a3:50:b3:eb:0c:66:c5:
         8e:9e:a9:ce:9d:c1:71:8e:fb:21:7c:d8:e3:0a:f7:95:07:2b:
         b0:ef:8d:a2:58:2d:8a:a3:c1:ae:fb:e6:10:e2:92:5d:98:6a:
         68:c2:a6:0c:a7:95:61:63:c8:11:a0:76:d3:33:5e:62:5a:48:
         97:b2:2d:7d:cb:a5:b6:1f:05:fd:6e:bf:4f:cf:9d:8b:31:39:
         a3:d8:bb:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlGNUExMTAvBgNVBAUTKDg4N0U3OUUyNUI2RDFEMzdFRjFGMzFCQzVBMDIzMkY4
RTc2NTE1NDUwHhcNMjYwNjEyMjA1NzQyWhcNMjYwNjE5MjA1NzQyWjAYMRYwFAYD
VQQDEw02YTJjNzJjNy04NDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiiuZs5hVtXxUsswzaJ5UapzCoE+9oQvA0UCFMJtTyuJL6Xy5LTBGz9/4cytD
QheN5bsV5+o/tyhpn+7jaLO1OTbDzWFxbh1H6Uw/uPoBp1V/jIHOXQfnk4Udd60x
f4rxYmy2OsCgB+D86SOznU5jJmJVCbFKBP000W8HqLSpugyIOVPOtTs8kYuIV+SL
w1yKt5NAZSFJ91hDv6yRy+IxFpBJDrtMj9vRJAKIOrhwd6QmEwJ7ogWg2JW5i218
ww89/Yvr2T4NV6oN0TS/4xAPwmWH9XCv2MYpYN9MR3KAGuYeK1BWImKjwyFwNU2W
JBM4b2jkxnIjPDLX2g1up/nSvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCnFxkl
iR72eIC+s9OcgPhFvjNUMB8GA1UdIwQYMBaAFIh+eeJbbR037x8xvFoCMvjnZRVF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx
QkExMUVCQkMxQTU4NENDNEY5QUUwMi9pSDU1NGx0dEhUZnZIekc4V2dJeS1PZGxG
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi9pSDU1NGx0dEhU
ZnZIekc4V2dJeS1PZGxGVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiIa4FkfoBcsufEX5pDnpWlKXS7tRP8UZRjtoGy0mQ5lMLf+ULvQMyGZOMIi/
PDbZeFyRaVxAVv3ii0L5m/H4ylk04WWq4X6IU4XRiJ3j+sZICMLI5tFV2nLrvRVR
/hgeQsNIy+guGd0vTsdO3LA4MOKo15kLjKYswHpPohIl2S6RglceNV094Sv1fiPW
sKU65EpZU7O5B5LvMEkU9K0TAG3H7KU37QCgsE8ZMYOjULPrDGbFjp6pzp3BcY77
IXzY4wr3lQcrsO+NolgtiqPBrvvmEOKSXZhqaMKmDKeVYWPIEaB20zNeYlpIl7It
fculth8F/W6/T8+dizE5o9i7sA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:43 2026 by rpki-client