Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
File:                     P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json)
Hash identifier:          G8Y1WsT/6E6Nm4tlzYPLDNlJA8kUsnSx7YaVg5PxkZU=
Subject key identifier:   7F:DA:DF:68:47:C3:43:BB:2C:05:2E:59:02:92:D8:6D:24:D0:AF:EC
Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
Certificate issuer:       /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
Manifest number:          0224
Signing time:             Sat 13 Jun 2026 02:53:34 +0000
Manifest this update:     Sat 13 Jun 2026 02:53:34 +0000
Manifest next update:     Sat 20 Jun 2026 02:53:34 +0000
Files and hashes:         1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: w6h+Bfi1+VWiIPdIhBJLGBxZOREbUDm1177sGLwz5UU=)
                          2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: F4bqm9WQs1g0ZI6Eys/rDBe4XBqJ0gtCIN4AXwG1g8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
        Validity
            Not Before: Jun 13 02:53:34 2026 GMT
            Not After : Jun 20 02:53:34 2026 GMT
        Subject: CN=6a2cc62e-c575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:35:81:84:ab:d0:d5:16:77:85:4e:06:47:a0:
                    23:d3:a1:3d:e3:2d:3b:b0:a3:7f:3c:84:12:fe:08:
                    ba:43:e0:f4:e1:55:cf:fe:99:d6:a4:a0:9f:3a:17:
                    e1:42:92:c6:22:02:0e:c6:80:9e:44:0a:0e:76:d7:
                    4e:54:8c:38:85:9a:72:c9:b5:b7:d6:5e:a8:a1:ed:
                    dd:1d:68:f7:51:b7:59:a4:e2:1b:41:50:85:ed:9c:
                    ee:03:46:88:6c:3e:44:95:b5:62:26:4b:55:da:90:
                    f2:f9:24:06:a0:e1:5a:45:42:40:0f:e5:59:43:30:
                    fa:f9:52:39:8f:8d:e1:a8:d7:87:77:7c:70:da:0f:
                    18:15:cc:9e:50:81:99:e0:d8:1d:8e:26:50:f4:a3:
                    8a:a6:b0:8e:e4:8b:fc:49:68:7c:be:27:db:94:62:
                    13:86:8f:d6:5c:fd:ea:09:52:d4:7d:68:ae:0f:9a:
                    68:04:69:4f:ce:9e:4b:8c:6a:72:2d:30:f5:01:ea:
                    c2:d9:81:cb:f0:b6:2a:bc:2b:b4:bf:91:b6:1b:f7:
                    d9:7e:4c:db:ee:2f:e0:45:b6:d1:57:c8:11:a5:6e:
                    2b:bf:07:82:56:bf:0f:ee:6f:de:29:26:f1:a1:ab:
                    50:06:a3:70:6b:8e:af:0a:aa:34:0b:61:7e:ea:cb:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:DF:68:47:C3:43:BB:2C:05:2E:59:02:92:D8:6D:24:D0:AF:EC
            X509v3 Authority Key Identifier:
                keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b0:81:8c:24:85:ee:b7:e9:41:e2:c7:2a:21:a9:34:ba:04:
         29:f1:1b:c4:55:17:44:59:9b:5b:9e:c5:50:87:fe:e9:4c:19:
         3f:d5:19:1a:fc:09:04:4c:3d:c0:09:57:f1:3f:6f:bd:e6:fa:
         65:22:79:07:0d:96:10:7e:db:c9:8e:ab:8e:82:cd:9b:ea:33:
         ca:30:ca:6b:6a:e5:69:d1:82:fb:c1:18:7b:ec:4e:cd:9e:a6:
         cf:a3:25:22:27:13:2f:8f:f2:3b:05:56:29:52:f4:21:a2:63:
         a7:a8:02:42:81:be:dd:c2:d1:bb:04:42:18:c8:6d:6c:70:45:
         5c:9e:b4:72:fb:92:48:aa:03:29:88:31:94:33:c5:7e:a8:63:
         5f:74:bf:53:28:c4:23:4e:d2:15:d9:e5:74:13:a9:66:1f:90:
         8d:39:c4:01:67:d0:71:0b:0c:74:b5:5e:c3:f1:a1:16:de:76:
         b6:22:03:27:c7:0b:47:87:7a:18:5e:8a:1f:d3:dd:b4:3e:36:
         d4:ce:c8:11:20:a5:c9:75:13:78:5a:89:07:7f:9c:6f:d5:cb:
         3d:92:f9:4c:7d:fc:ee:f3:bf:28:7f:8e:15:5e:ef:60:cf:30:
         4d:47:9b:7d:68:a2:4d:2f:c4:b3:c8:fe:39:1f:0c:c3:84:88:
         3a:26:9c:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy
QjU3MDI2MzcwHhcNMjYwNjEzMDI1MzM0WhcNMjYwNjIwMDI1MzM0WjAYMRYwFAYD
VQQDEw02YTJjYzYyZS1jNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+jWBhKvQ1RZ3hU4GR6Aj06E94y07sKN/PIQS/gi6Q+D04VXP/pnWpKCfOhfh
QpLGIgIOxoCeRAoOdtdOVIw4hZpyybW31l6ooe3dHWj3UbdZpOIbQVCF7ZzuA0aI
bD5ElbViJktV2pDy+SQGoOFaRUJAD+VZQzD6+VI5j43hqNeHd3xw2g8YFcyeUIGZ
4NgdjiZQ9KOKprCO5Iv8SWh8vifblGITho/WXP3qCVLUfWiuD5poBGlPzp5LjGpy
LTD1AerC2YHL8LYqvCu0v5G2G/fZfkzb7i/gRbbRV8gRpW4rvweCVr8P7m/eKSbx
oatQBqNwa46vCqo0C2F+6svOxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/a32hH
w0O7LAUuWQKS2G0k0K/sMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0
QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2
QkJaaHM2NzMySk1yVndKamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2rCBjCSF7rfpQeLHKiGpNLoEKfEbxFUXRFmbW57FUIf+6UwZP9UZGvwJBEw9
wAlX8T9vveb6ZSJ5Bw2WEH7byY6rjoLNm+ozyjDKa2rladGC+8EYe+xOzZ6mz6Ml
IicTL4/yOwVWKVL0IaJjp6gCQoG+3cLRuwRCGMhtbHBFXJ60cvuSSKoDKYgxlDPF
fqhjX3S/UyjEI07SFdnldBOpZh+QjTnEAWfQcQsMdLVew/GhFt52tiIDJ8cLR4d6
GF6KH9PdtD421M7IESClyXUTeFqJB3+cb9XLPZL5TH387vO/KH+OFV7vYM8wTUeb
fWiiTS/Es8j+OR8Mw4SIOiacZg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:10 2026 by rpki-client