Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          atejlKfFLJ6YsH38w/uSPYhr2X1JRzMycnOVms987bU=
Subject key identifier:   06:E1:FA:0A:EB:1E:5F:E9:18:89:90:2B:87:3C:D0:6E:BB:CC:F7:EA
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          0469
Signing time:             Sat 13 Jun 2026 00:10:43 +0000
Manifest this update:     Sat 13 Jun 2026 00:10:42 +0000
Manifest next update:     Sat 20 Jun 2026 00:10:42 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: 7NgeqBEYIOI4KGM/NETmoA3IEhlIjmep1MnQKIP2HCY=)
                          2: F31E86967B2311EF93801A72C4F9AE02.roa (hash: D6LiWMFH6d2ytAEKNZQXXNvSijIWaNdo5eD9rEi5mZA=)
                          3: 728139D62FA311F0A9129814C4F9AE02.roa (hash: eWlYnOj+XzRjYM0rC0+ZAzd4ERRZ2swjPOnqLD6EJ/Y=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: JHvS1f6jdKLwIeNTGazWPjS7qbi1eE+mp2wF3npKP1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Jun 13 00:10:42 2026 GMT
            Not After : Jun 20 00:10:42 2026 GMT
        Subject: CN=6a2ca002-2d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:af:3d:ec:24:11:5a:f9:1f:a0:e3:a7:71:
                    8a:cd:77:96:27:dc:64:15:af:2b:ae:dc:47:77:1c:
                    c6:7c:a4:0a:6e:ac:17:f8:86:5e:b3:66:40:0f:72:
                    b7:2d:f9:db:45:f1:d1:16:02:ee:96:02:ed:55:c3:
                    4c:92:3b:aa:43:5e:82:73:a1:a5:6e:04:bd:3f:bc:
                    47:76:0c:0f:f2:49:7d:30:03:4d:19:e8:f1:c1:a8:
                    84:f8:35:19:69:24:77:84:99:ef:2a:85:24:03:91:
                    02:ea:82:0c:ed:cc:de:ac:40:34:77:b8:e5:45:33:
                    26:06:8f:45:70:6f:78:50:80:97:3c:e8:fb:82:ce:
                    8b:ac:fd:d7:2e:bb:15:42:ab:6e:2b:c9:bf:ee:b3:
                    93:c3:6e:58:c5:ca:bb:7e:22:e2:0b:9c:78:42:c7:
                    7d:a0:69:0b:22:f1:7a:ad:ae:77:5c:dc:dd:4d:d1:
                    87:81:2b:96:99:78:ae:d2:46:45:9f:11:ff:23:82:
                    f5:4b:fc:19:71:e8:ba:be:d9:71:c9:f7:df:70:3a:
                    fe:de:52:59:31:df:d1:b7:e7:8b:29:d5:19:e8:05:
                    c1:51:63:c2:7a:f3:12:73:c2:8c:51:5a:19:bf:1d:
                    a6:c0:c3:f5:4e:4d:39:1e:b1:19:1d:45:b2:fe:c8:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E1:FA:0A:EB:1E:5F:E9:18:89:90:2B:87:3C:D0:6E:BB:CC:F7:EA
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:89:71:e2:cc:21:0a:94:97:a9:be:ad:57:81:a4:dc:04:
         8e:8d:ee:b3:0e:88:4b:b6:c2:fc:ec:82:34:84:7d:60:2b:fe:
         2e:20:8e:7f:2f:43:85:94:05:84:24:17:da:96:a3:dd:5e:4d:
         9d:f4:84:df:ee:18:d8:97:4d:b0:d3:33:02:cb:19:b0:c4:34:
         9b:4f:88:e7:f9:64:ca:29:b1:7e:36:b1:26:4e:50:2c:17:53:
         70:ac:30:8d:f8:62:21:69:f8:69:5b:69:47:3c:44:82:41:70:
         69:fb:bf:4d:75:ac:f5:b0:2a:3f:3a:37:4f:68:45:9a:7d:c4:
         28:d6:2c:65:0c:e6:af:59:99:a5:1b:fe:f9:94:5f:fc:96:7a:
         44:42:e2:10:dd:6d:8d:dd:0c:fa:36:fe:96:fb:e2:72:fb:a1:
         25:34:c6:12:58:41:e6:b0:b0:8d:f3:64:cd:a1:a6:6f:ca:e0:
         02:18:c2:ec:fd:eb:15:bd:b1:f8:c3:b0:59:b9:47:6b:e6:80:
         58:b9:28:16:34:34:70:06:71:cc:8f:d1:62:49:28:76:21:2e:
         04:b3:e4:e5:85:7b:7f:75:f8:02:35:3b:bd:1e:0a:29:61:cc:
         9e:96:ac:56:3f:bf:be:61:06:0f:ce:79:7c:a5:16:9d:2c:f4:
         92:5a:26:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx
QzNERTg0QUUwHhcNMjYwNjEzMDAxMDQyWhcNMjYwNjIwMDAxMDQyWjAYMRYwFAYD
VQQDEw02YTJjYTAwMi0yZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17CvPewkEVr5H6Djp3GKzXeWJ9xkFa8rrtxHdxzGfKQKbqwX+IZes2ZAD3K3
LfnbRfHRFgLulgLtVcNMkjuqQ16Cc6GlbgS9P7xHdgwP8kl9MANNGejxwaiE+DUZ
aSR3hJnvKoUkA5EC6oIM7czerEA0d7jlRTMmBo9FcG94UICXPOj7gs6LrP3XLrsV
QqtuK8m/7rOTw25Yxcq7fiLiC5x4Qsd9oGkLIvF6ra53XNzdTdGHgSuWmXiu0kZF
nxH/I4L1S/wZcei6vtlxyfffcDr+3lJZMd/Rt+eLKdUZ6AXBUWPCevMSc8KMUVoZ
vx2mwMP1Tk05HrEZHUWy/sgbGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbh+grr
Hl/pGImQK4c80G67zPfqMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB
MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjhEOS84QjAwMjM3NjlBMDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgy
VUZQZnVNNzgwVzRjUGVoSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiEqJceLMIQqUl6m+rVeBpNwEjo3usw6IS7bC/OyCNIR9YCv+LiCOfy9DhZQF
hCQX2paj3V5NnfSE3+4Y2JdNsNMzAssZsMQ0m0+I5/lkyimxfjaxJk5QLBdTcKww
jfhiIWn4aVtpRzxEgkFwafu/TXWs9bAqPzo3T2hFmn3EKNYsZQzmr1mZpRv++ZRf
/JZ6RELiEN1tjd0M+jb+lvvicvuhJTTGElhB5rCwjfNkzaGmb8rgAhjC7P3rFb2x
+MOwWblHa+aAWLkoFjQ0cAZxzI/RYkkodiEuBLPk5YV7f3X4AjU7vR4KKWHMnpas
Vj+/vmEGD855fKUWnSz0klomPg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:00:25 2026 by rpki-client