Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
File:                     ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json)
Hash identifier:          44bcED4evXV8YZxReqTu6hNzqdAaMJJqYxbXTVjXTdc=
Subject key identifier:   2D:92:18:B4:00:1B:87:A8:AB:3E:21:64:65:F2:53:48:C0:6C:9F:97
Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
Certificate issuer:       /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
Manifest number:          0E
Signing time:             Sat 13 Jun 2026 09:12:45 +0000
Manifest this update:     Sat 13 Jun 2026 09:12:45 +0000
Manifest next update:     Sat 20 Jun 2026 09:12:45 +0000
Files and hashes:         1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: hT2bWpLXY9IBy2HVuqxVOjeDWCyiWEDxcocrSwwiRWc=)
                          2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
                          rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
        Validity
            Not Before: Jun 13 09:12:45 2026 GMT
            Not After : Jun 20 09:12:45 2026 GMT
        Subject: CN=6a2d1f0d-c1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:74:f5:f9:4e:10:79:fb:e9:01:b4:e8:86:
                    5a:e8:d4:e9:c0:72:9f:19:9f:6d:ef:6c:6d:af:28:
                    e1:2a:cb:da:bf:23:f7:eb:9f:ee:12:52:ec:85:7f:
                    d1:a6:6d:a4:a5:67:8a:d9:39:55:32:58:87:7b:3d:
                    2f:fd:f9:14:e8:c8:97:ae:cb:e2:cd:cc:ec:12:7c:
                    51:1b:36:cd:dc:13:0e:4b:4f:b9:88:f7:93:95:c3:
                    63:41:bd:45:fb:c6:fd:09:04:62:12:c4:78:65:10:
                    c5:b9:fa:48:49:16:12:0f:40:8f:b5:46:1a:a3:8f:
                    91:65:c7:27:49:23:f7:1e:64:27:9e:99:65:ce:9f:
                    b9:9b:c5:30:b0:9f:1d:86:a6:95:b5:20:8f:e7:15:
                    ca:ab:30:d8:d1:66:7a:bd:88:d6:73:f0:38:58:a2:
                    4d:eb:88:ca:c4:12:75:a4:90:97:16:b1:af:59:b1:
                    7c:8b:b5:2c:e5:04:f7:3e:b1:57:a8:5b:8f:72:aa:
                    e8:e0:63:50:df:7b:ff:0b:16:61:a3:4d:3f:0d:56:
                    51:46:99:3c:07:0b:a4:68:67:f1:ec:62:68:35:84:
                    13:e7:aa:10:74:ce:ae:13:c8:f9:43:3d:02:69:d5:
                    38:1b:a8:4c:cc:9d:10:3d:95:31:55:76:0f:44:b6:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:92:18:B4:00:1B:87:A8:AB:3E:21:64:65:F2:53:48:C0:6C:9F:97
            X509v3 Authority Key Identifier:
                keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:2b:0d:f2:ca:a6:84:4f:b4:6d:1b:7b:cc:81:eb:06:f8:
         da:47:41:f8:cb:ca:78:fb:75:09:58:11:f8:c3:a2:0d:3d:b3:
         e6:4f:c1:7b:9a:59:79:73:38:ba:1e:d5:04:c8:ae:81:9e:d8:
         6b:ba:9f:08:aa:ee:8e:cb:c9:5a:11:56:26:7b:21:b7:46:55:
         1a:68:35:dc:f7:60:51:ad:1c:16:60:f8:1a:80:4f:ee:4f:08:
         31:d9:5f:44:ef:f1:91:9b:df:c7:2e:34:61:c7:a5:f1:55:f2:
         95:47:cc:e3:08:a9:ac:73:5b:52:e8:3c:43:19:39:40:a1:62:
         45:e4:92:02:f0:8f:24:d9:85:81:00:17:fe:70:18:ac:91:e7:
         5f:fb:2c:33:77:96:09:b1:0e:ae:94:d2:32:d7:f3:83:b5:34:
         9c:2b:e1:2d:96:08:b1:ec:6a:b9:0f:89:25:49:e3:a0:d3:3d:
         d1:e8:a9:0d:35:8c:9c:bf:a6:44:e2:ec:eb:3f:d2:e2:0a:04:
         a3:8e:fa:e2:77:2f:e5:4d:7e:c5:f3:47:2e:18:83:b0:d9:25:
         28:ab:cb:d1:1a:93:5e:94:6c:c0:01:39:0e:65:72:9e:a3:28:
         db:e6:09:19:5c:df:ef:d2:35:eb:29:ea:1e:2a:3b:69:88:54:
         b6:6a:53:01
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG
MkFEQzExMzAeFw0yNjA2MTMwOTEyNDVaFw0yNjA2MjAwOTEyNDVaMBgxFjAUBgNV
BAMTDTZhMmQxZjBkLWMxYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCX93T1+U4QefvpAbTohlro1OnAcp8Zn23vbG2vKOEqy9q/I/frn+4SUuyFf9Gm
baSlZ4rZOVUyWId7PS/9+RToyJeuy+LNzOwSfFEbNs3cEw5LT7mI95OVw2NBvUX7
xv0JBGISxHhlEMW5+khJFhIPQI+1Rhqjj5FlxydJI/ceZCeemWXOn7mbxTCwnx2G
ppW1II/nFcqrMNjRZnq9iNZz8DhYok3riMrEEnWkkJcWsa9ZsXyLtSzlBPc+sVeo
W49yqujgY1Dfe/8LFmGjTT8NVlFGmTwHC6RoZ/HsYmg1hBPnqhB0zq4TyPlDPQJp
1TgbqEzMnRA9lTFVdg9EtvuDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULZIYtAAb
h6irPiFkZfJTSMBsn5cwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx
ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z
TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBOnisN8sqmhE+0bRt7zIHrBvjaR0H4y8p4+3UJWBH4w6INPbPmT8F7mll5czi6
HtUEyK6Bnthrup8Iqu6Oy8laEVYmeyG3RlUaaDXc92BRrRwWYPgagE/uTwgx2V9E
7/GRm9/HLjRhx6XxVfKVR8zjCKmsc1tS6DxDGTlAoWJF5JIC8I8k2YWBABf+cBis
kedf+ywzd5YJsQ6ulNIy1/ODtTScK+Etlgix7Gq5D4klSeOg0z3R6KkNNYycv6ZE
4uzrP9LiCgSjjvridy/lTX7F80cuGIOw2SUoq8vRGpNelGzAATkOZXKeoyjb5gkZ
XN/v0jXrKeoeKjtpiFS2alMB
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:34 2026 by rpki-client