Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
File:                     72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json)
Hash identifier:          lm8ThbcTwOPvOMDWkBO0V1dMVEdzdheeoWO7V59Wa1s=
Subject key identifier:   F5:6A:C3:BB:9B:11:96:51:5E:E6:EB:91:3D:A2:C8:F9:45:BA:57:90
Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
Certificate issuer:       /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
Manifest number:          0211
Signing time:             Sat 13 Jun 2026 02:57:55 +0000
Manifest this update:     Sat 13 Jun 2026 02:57:54 +0000
Manifest next update:     Sat 20 Jun 2026 02:57:54 +0000
Files and hashes:         1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: ny0a9nEZSBLsHHgElU2Te59L8518zWQDRnQzc3W8UnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
        Validity
            Not Before: Jun 13 02:57:54 2026 GMT
            Not After : Jun 20 02:57:54 2026 GMT
        Subject: CN=6a2cc732-9c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:86:ba:19:99:db:dd:02:4d:13:50:00:0e:
                    a7:05:c9:29:af:0b:82:6b:af:bb:d1:b0:25:df:05:
                    36:e4:ff:19:1a:50:ba:af:00:73:3a:2c:8b:15:0f:
                    28:d6:3c:c4:a1:76:18:c8:53:e2:3c:10:44:f2:06:
                    cb:53:2d:55:9b:54:82:d6:24:40:87:7b:2e:3d:cc:
                    ff:4f:2f:f4:65:fc:2c:de:2e:6f:4d:8f:94:51:9a:
                    52:aa:e9:7b:22:97:00:ab:26:3d:bb:af:9a:60:1d:
                    85:65:9f:45:e3:e9:cc:f6:4f:27:13:02:17:3a:cc:
                    e1:5f:0d:31:00:28:44:19:01:46:5e:1d:c1:de:d4:
                    60:6d:4d:aa:90:63:de:80:55:62:76:65:ac:23:4e:
                    58:5f:78:f7:1f:7b:85:6d:58:68:b1:e8:15:a1:d1:
                    5f:ce:c3:0a:f1:20:12:fc:b6:a6:b7:b1:07:c9:46:
                    34:cb:2f:7a:ae:15:69:0c:09:96:2f:7c:00:70:d2:
                    89:0f:dd:be:ac:a7:a9:2b:98:68:90:88:52:55:8e:
                    04:f6:30:16:c9:5f:c2:94:25:8b:d0:8a:3a:de:08:
                    a5:b7:14:b6:ed:19:ad:ee:38:1c:6a:22:61:37:4e:
                    f0:83:76:d6:8c:da:72:9b:7d:6b:18:8e:6e:a4:60:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:C3:BB:9B:11:96:51:5E:E6:EB:91:3D:A2:C8:F9:45:BA:57:90
            X509v3 Authority Key Identifier:
                keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:13:67:98:68:b6:be:e5:b0:75:ba:26:7e:eb:d8:b1:64:65:
         50:e5:3f:1c:a2:7d:7c:9c:3b:15:fe:ee:d9:8f:c4:fc:ec:ba:
         ec:df:b9:d7:8a:16:53:ed:c4:08:c7:ec:9e:90:e1:54:d4:7b:
         7e:85:98:c3:38:06:bf:70:ff:1d:d2:0c:a6:dc:4e:ea:e5:16:
         32:56:0d:6f:6b:2d:59:5f:86:0b:84:79:96:9f:53:8d:68:e9:
         c1:74:f7:a6:ec:92:d7:fa:83:cb:0b:a7:e9:2a:0d:c7:a4:ff:
         f6:3e:f9:43:40:8f:05:ff:66:9b:01:ae:3e:a3:f8:92:04:97:
         2a:11:f3:0c:dc:d0:3d:3c:2d:45:31:da:69:88:e9:e7:05:5e:
         f7:30:56:57:04:89:17:22:71:d5:f6:13:8e:17:75:3f:03:cd:
         46:39:26:48:e5:1d:00:b1:a3:ee:ea:dd:84:7b:4d:a1:10:d9:
         5f:16:fb:7c:f1:b2:27:5e:44:8f:f6:f2:e5:a3:be:90:7d:90:
         ca:2f:5a:37:ae:76:13:b8:f5:81:43:a7:3d:91:80:a7:0b:23:
         e4:d7:7b:ce:c0:8b:59:fb:de:c0:be:bc:4a:b2:fc:8b:3f:cb:
         e0:8e:9c:2f:37:d3:c8:4e:04:2c:24:36:02:cf:69:28:c5:16:
         6c:83:d6:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4QkQxMTAvBgNVBAUTKEVGNjM2REZCMTU5MkYwMjIyMDE2QjAwRkFDQTI3MDM1
NzNGNEQyODIwHhcNMjYwNjEzMDI1NzU0WhcNMjYwNjIwMDI1NzU0WjAYMRYwFAYD
VQQDEw02YTJjYzczMi05YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydaGuhmZ290CTRNQAA6nBckprwuCa6+70bAl3wU25P8ZGlC6rwBzOiyLFQ8o
1jzEoXYYyFPiPBBE8gbLUy1Vm1SC1iRAh3suPcz/Ty/0Zfws3i5vTY+UUZpSqul7
IpcAqyY9u6+aYB2FZZ9F4+nM9k8nEwIXOszhXw0xAChEGQFGXh3B3tRgbU2qkGPe
gFVidmWsI05YX3j3H3uFbVhosegVodFfzsMK8SAS/Lamt7EHyUY0yy96rhVpDAmW
L3wAcNKJD92+rKepK5hokIhSVY4E9jAWyV/ClCWL0Io63giltxS27Rmt7jgcaiJh
N07wg3bWjNpym31rGI5upGCWJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVqw7ub
EZZRXubrkT2iyPlFuleQMB8GA1UdIwQYMBaAFO9jbfsVkvAiIBawD6yicDVz9NKC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhCRC8xMTlDQzIyMDQw
RkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhDSWdGckFQcktKd05YUDAw
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTnQteFdTOENJZ0ZyQVByS0p3TlhQMDBvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzhCRC8xMTlDQzIyMDQwRkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhD
SWdGckFQcktKd05YUDAwb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXBNnmGi2vuWwdbomfuvYsWRlUOU/HKJ9fJw7Ff7u2Y/E/Oy67N+514oWU+3E
CMfsnpDhVNR7foWYwzgGv3D/HdIMptxO6uUWMlYNb2stWV+GC4R5lp9TjWjpwXT3
puyS1/qDywun6SoNx6T/9j75Q0CPBf9mmwGuPqP4kgSXKhHzDNzQPTwtRTHaaYjp
5wVe9zBWVwSJFyJx1fYTjhd1PwPNRjkmSOUdALGj7urdhHtNoRDZXxb7fPGyJ15E
j/by5aO+kH2Qyi9aN652E7j1gUOnPZGApwsj5Nd7zsCLWfvewL68SrL8iz/L4I6c
LzfTyE4ELCQ2As9pKMUWbIPWmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:32:32 2026 by rpki-client