Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          l4I/0EuJnwJPKvosANqysf6JRBQl6XRHsPM35qZzQE4=
Subject key identifier:   45:C9:1C:0F:7A:E6:4C:8F:17:00:85:EA:40:89:C0:E3:AF:39:13:AB
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0E9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0E8F
Signing time:             Fri 12 Jun 2026 17:42:55 +0000
Manifest this update:     Fri 12 Jun 2026 17:42:54 +0000
Manifest next update:     Fri 19 Jun 2026 17:42:54 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: UGfRV86Un5M2q2OLd7bhp6URC9X/NbALRhHHGxj6jjM=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3739 (0xe9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Jun 12 17:42:54 2026 GMT
            Not After : Jun 19 17:42:54 2026 GMT
        Subject: CN=6a2c451f-4377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:8d:a3:ca:33:fd:6e:96:e9:c3:b8:14:e1:
                    3b:74:a0:d5:a3:42:d1:8e:a1:74:c8:69:64:d3:fc:
                    18:74:18:9b:35:8c:0c:44:08:89:96:b3:95:ad:5e:
                    fa:99:c0:ad:95:5a:09:a0:5a:92:02:a8:e1:ca:6a:
                    10:c9:47:46:7c:6c:a5:c4:98:85:98:8a:ea:62:6a:
                    77:f9:99:22:7c:4c:9a:e5:e9:66:9f:03:fb:7e:b3:
                    d3:4f:a1:1e:48:81:f9:40:19:85:f6:ff:09:6e:de:
                    02:89:45:26:11:30:80:86:b3:00:e0:02:26:bd:2f:
                    28:f6:0f:5a:a1:04:0d:c5:4f:85:22:14:3f:8a:92:
                    5e:70:13:e5:58:20:26:22:fc:b9:76:4c:86:4e:5a:
                    c6:47:00:73:76:db:5a:6b:a8:37:50:87:d8:05:ee:
                    63:bf:ad:a2:2d:82:ff:4f:58:a2:b0:29:45:42:9f:
                    e4:8f:7f:9f:e7:dd:b1:4e:d0:7d:3b:83:f2:f6:03:
                    a0:fe:1a:16:0f:19:18:99:f2:2e:3c:bd:f4:a7:30:
                    17:aa:ef:75:37:8f:d1:30:e6:60:58:78:a0:22:c3:
                    bb:73:83:94:cb:58:1e:37:07:52:a2:d4:1b:8b:bd:
                    0b:e4:f9:3b:fc:cd:e0:e5:01:bf:11:0a:4e:38:47:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C9:1C:0F:7A:E6:4C:8F:17:00:85:EA:40:89:C0:E3:AF:39:13:AB
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:33:ef:fa:75:00:41:b6:14:1b:e8:07:d5:6b:40:99:f3:
         bf:a8:63:4d:48:92:ba:00:de:57:90:e8:f6:9b:d6:cc:8a:e4:
         00:a4:b7:8e:83:03:5f:01:be:26:4f:2e:80:0c:df:15:7b:a2:
         c5:c2:0b:ef:f5:3e:d9:56:73:6c:13:41:a8:8d:96:a6:65:37:
         e3:9b:8f:0c:7c:25:81:54:12:55:2f:2f:20:4d:19:37:38:59:
         2f:68:9c:e9:fb:47:80:24:b3:64:ff:aa:60:26:c1:35:81:d7:
         06:14:a6:61:e6:5a:16:a5:31:8a:18:83:30:3e:11:a4:62:16:
         2a:c5:f7:14:a8:e8:1c:23:a6:a0:76:be:2d:dc:2f:b4:d7:82:
         7c:61:4a:f7:65:b2:c2:e4:ee:70:24:dd:57:3f:8d:a6:d8:8f:
         4b:ec:50:f0:b9:9b:29:ff:93:38:84:db:d9:0f:ac:b2:dc:89:
         57:e5:05:2c:09:27:29:c4:f0:da:6e:2a:a8:7e:08:2b:c3:32:
         36:ef:3f:dc:5d:cc:04:c5:d3:98:e5:ce:ac:7a:df:a3:e4:19:
         65:31:75:4a:ca:ec:45:6d:2f:12:fc:b4:27:67:4a:a6:c5:ed:
         a3:16:4d:87:62:6b:2f:e4:6f:fa:f0:3a:2d:81:c1:05:eb:e2:
         fc:f5:21:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYwNzYxMTAvBgNVBAUTKDQ3OEE0QkREMDExMjFEMUM2QjMzM0VDQzNFMjVCQTFB
ODg3MTk5QUEwHhcNMjYwNjEyMTc0MjU0WhcNMjYwNjE5MTc0MjU0WjAYMRYwFAYD
VQQDEw02YTJjNDUxZi00Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmQiNo8oz/W6W6cO4FOE7dKDVo0LRjqF0yGlk0/wYdBibNYwMRAiJlrOVrV76
mcCtlVoJoFqSAqjhymoQyUdGfGylxJiFmIrqYmp3+ZkifEya5elmnwP7frPTT6Ee
SIH5QBmF9v8Jbt4CiUUmETCAhrMA4AImvS8o9g9aoQQNxU+FIhQ/ipJecBPlWCAm
Ivy5dkyGTlrGRwBzdttaa6g3UIfYBe5jv62iLYL/T1iisClFQp/kj3+f592xTtB9
O4Py9gOg/hoWDxkYmfIuPL30pzAXqu91N4/RMOZgWHigIsO7c4OUy1geNwdSotQb
i70L5Pk7/M3g5QG/EQpOOEexywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXJHA96
5kyPFwCF6kCJwOOvOROrMB8GA1UdIwQYMBaAFEeKS90BEh0cazM+zD4luhqIcZmq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjA3Ni9BNDA4RjU4MkI5
MDQxMUU5QjFENTBCNDFDNEY5QUUwMi9SNHBMM1FFU0hSeHJNejdNUGlXNkdvaHht
YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I0cEwzUUVTSFJ4ck16N01QaVc2R29oeG1hby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjA3Ni9BNDA4RjU4MkI5MDQxMUU5QjFENTBCNDFDNEY5QUUwMi9SNHBMM1FFU0hS
eHJNejdNUGlXNkdvaHhtYW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAepYz7/p1AEG2FBvoB9VrQJnzv6hjTUiSugDeV5Do9pvWzIrkAKS3joMDXwG+
Jk8ugAzfFXuixcIL7/U+2VZzbBNBqI2WpmU345uPDHwlgVQSVS8vIE0ZNzhZL2ic
6ftHgCSzZP+qYCbBNYHXBhSmYeZaFqUxihiDMD4RpGIWKsX3FKjoHCOmoHa+Ldwv
tNeCfGFK92WywuTucCTdVz+NptiPS+xQ8LmbKf+TOITb2Q+sstyJV+UFLAknKcTw
2m4qqH4IK8MyNu8/3F3MBMXTmOXOrHrfo+QZZTF1SsrsRW0vEvy0J2dKpsXtoxZN
h2JrL+Rv+vA6LYHBBevi/PUhdg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:23 2026 by rpki-client