Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File:                     pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier:          89S8DDdeLF2NCxPusw02g1nJd68e3MwLiOqF5GrCf1g=
Subject key identifier:   26:FE:51:28:5E:E0:C9:CE:07:28:22:D8:11:36:1E:CA:E7:05:B8:2E
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer:       /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number:          0723
Signing time:             Fri 12 Jun 2026 21:56:53 +0000
Manifest this update:     Fri 12 Jun 2026 21:56:53 +0000
Manifest next update:     Fri 19 Jun 2026 21:56:53 +0000
Files and hashes:         1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: sk0d2Sbq7nK+2N4RC9beRC01k4fZqQKHRUCQszNR/Zk=)
                          2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: FcPeshOBgwbO9rUWdVUpY9LSkh0o6hAVezvw+Vbo09o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
                          rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
        Validity
            Not Before: Jun 12 21:56:53 2026 GMT
            Not After : Jun 19 21:56:53 2026 GMT
        Subject: CN=6a2c80a5-ce24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:92:c7:eb:42:ec:08:98:db:99:fb:3c:88:
                    4d:85:b7:43:49:b8:fa:73:28:e6:d8:e3:cd:38:5f:
                    f6:a1:e2:3c:e9:05:54:71:ee:f7:6c:33:34:0b:dc:
                    f7:d7:fe:1e:e2:27:c6:51:c5:35:f0:ee:5d:48:df:
                    d2:bd:0b:a4:0b:24:ca:3c:89:ff:2a:1a:c6:1d:b0:
                    d6:c7:a1:8c:a5:73:84:49:fb:33:99:e8:f7:3f:91:
                    32:e9:90:b8:65:2b:38:2e:0e:32:90:56:c5:9e:0b:
                    fc:78:01:d6:96:cb:07:de:82:4f:9d:a9:27:76:cb:
                    84:2d:f5:9a:a8:a2:05:fe:ab:99:bf:57:dd:41:6a:
                    48:58:9a:c5:36:d6:fa:14:35:58:7d:65:6d:01:22:
                    3c:79:b0:60:6a:0c:9b:2b:55:ab:f5:77:49:61:40:
                    26:09:3a:5e:13:e5:dc:82:d2:a4:34:33:04:c5:d2:
                    a2:de:f8:af:6f:cb:0d:ce:ea:f1:56:b5:f3:7e:02:
                    80:eb:e3:07:c0:9d:30:27:2a:46:51:53:4e:c7:05:
                    e3:87:3a:6f:71:cc:de:7b:1b:59:ab:b5:6d:28:e2:
                    21:7a:9b:61:a5:10:d5:d7:fe:79:5d:27:13:22:03:
                    09:9f:a2:81:c9:40:9d:27:87:75:16:f6:d0:a7:00:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FE:51:28:5E:E0:C9:CE:07:28:22:D8:11:36:1E:CA:E7:05:B8:2E
            X509v3 Authority Key Identifier:
                keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:7e:fa:b8:ab:10:56:dd:b0:b8:35:87:a1:82:49:e3:57:
         da:77:e8:72:c7:46:31:35:6e:c6:3f:2a:7a:ae:e4:59:0d:9c:
         ec:49:96:03:70:ad:41:6c:c5:3a:bd:a2:7b:78:38:20:d3:0e:
         ca:06:fc:ce:63:cf:27:cb:3d:0c:04:95:96:90:55:f7:bb:59:
         22:f9:80:91:6a:82:b8:10:ab:f5:50:9a:95:84:18:81:a9:53:
         0e:ac:ed:22:1a:ba:84:6c:79:ba:9c:ee:89:c2:16:99:73:b7:
         16:b6:52:7a:17:10:1d:bf:70:70:11:22:9b:0c:3d:b0:3f:64:
         ca:39:94:dd:d8:48:e3:0e:ea:91:72:68:f2:63:34:d9:bd:3d:
         7c:84:b9:d8:37:27:6d:22:a6:f0:f6:0a:15:f2:eb:8e:77:49:
         7e:ea:fa:63:99:6d:f3:65:8e:71:93:ff:af:01:89:14:c0:1a:
         5b:00:19:44:99:7b:d4:b0:b7:eb:c6:da:36:e3:b6:a5:69:8f:
         79:c8:f3:d9:a6:98:df:26:94:82:c1:ca:40:f1:12:41:ef:7e:
         72:9f:cf:6e:0c:08:ef:b7:00:cc:d9:90:ad:3c:f3:12:9c:c4:
         b6:4f:91:df:13:bf:e7:00:dc:73:57:b8:e8:99:b2:70:6e:47:
         f1:29:30:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0
NUI2MjgzOTAwHhcNMjYwNjEyMjE1NjUzWhcNMjYwNjE5MjE1NjUzWjAYMRYwFAYD
VQQDEw02YTJjODBhNS1jZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25iSx+tC7AiY25n7PIhNhbdDSbj6cyjm2OPNOF/2oeI86QVUce73bDM0C9z3
1/4e4ifGUcU18O5dSN/SvQukCyTKPIn/KhrGHbDWx6GMpXOESfszmej3P5Ey6ZC4
ZSs4Lg4ykFbFngv8eAHWlssH3oJPnakndsuELfWaqKIF/quZv1fdQWpIWJrFNtb6
FDVYfWVtASI8ebBgagybK1Wr9XdJYUAmCTpeE+XcgtKkNDMExdKi3vivb8sNzurx
VrXzfgKA6+MHwJ0wJypGUVNOxwXjhzpvcczeextZq7VtKOIhepthpRDV1/55XScT
IgMJn6KByUCdJ4d1FvbQpwDqwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCb+UShe
4MnOBygi2BE2HsrnBbguMB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy
QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln
NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly
cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkKd++rirEFbdsLg1h6GCSeNX2nfocsdGMTVuxj8qeq7kWQ2c7EmWA3CtQWzF
Or2ie3g4INMOygb8zmPPJ8s9DASVlpBV97tZIvmAkWqCuBCr9VCalYQYgalTDqzt
Ihq6hGx5upzuicIWmXO3FrZSehcQHb9wcBEimww9sD9kyjmU3dhI4w7qkXJo8mM0
2b09fIS52DcnbSKm8PYKFfLrjndJfur6Y5lt82WOcZP/rwGJFMAaWwAZRJl71LC3
68baNuO2pWmPecjz2aaY3yaUgsHKQPESQe9+cp/PbgwI77cAzNmQrTzzEpzEtk+R
3xO/5wDcc1e46JmycG5H8SkwTg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:09 2026 by rpki-client