Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File:                     a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier:          FyJOX2mQZRAZLzd4xvFGYCSL/4Q+ow0wIiaWSm6PcGY=
Subject key identifier:   CD:23:5B:3D:36:DF:04:5D:C1:A4:D2:85:B0:5A:35:D8:25:B2:E3:A5
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer:       /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial:       34D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number:          34B4
Signing time:             Fri 12 Jun 2026 15:18:07 +0000
Manifest this update:     Fri 12 Jun 2026 15:18:07 +0000
Manifest next update:     Fri 19 Jun 2026 15:18:07 +0000
Files and hashes:         1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: FjwJDwYVMWAfxkxaJxV0lsCAHdgl10YL5PQRyLl18H4=)
                          2: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=)
                          3: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: NHHqtoWG+gwaIC084o2r9OLvOpqSCVAznqovXmjnsXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13528 (0x34d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
        Validity
            Not Before: Jun 12 15:18:07 2026 GMT
            Not After : Jun 19 15:18:07 2026 GMT
        Subject: CN=6a2c232f-003d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:fc:75:16:51:0c:10:24:4c:dc:4c:50:71:
                    68:4c:d6:99:83:85:62:b3:4b:99:41:40:75:06:9c:
                    73:b0:68:90:cf:96:94:96:c5:ff:81:54:ac:ca:9b:
                    ce:ed:df:39:18:04:0d:1f:70:a0:71:65:df:72:c9:
                    46:d9:b8:e8:e9:91:4a:b1:04:ae:31:8b:35:f2:be:
                    1d:74:a3:11:78:e0:90:5f:18:20:63:a7:8d:a8:49:
                    be:18:70:94:62:0d:c3:ce:d7:55:c2:10:de:84:3d:
                    27:9a:22:ac:f3:11:a0:3f:b7:b4:23:65:58:37:02:
                    85:0e:83:5e:ae:ff:d1:fd:0b:94:df:5f:24:2d:c8:
                    de:51:93:b4:11:af:e8:51:04:3e:a8:c8:ea:6f:6a:
                    bd:ce:0c:28:0a:d6:24:ea:6e:44:a3:4a:42:51:dc:
                    b7:66:5b:e0:52:78:f9:dc:ef:4c:3c:aa:ed:88:a4:
                    10:08:50:a9:01:db:e1:d2:60:ef:2b:c4:25:3c:02:
                    93:71:75:90:92:bf:92:d4:14:9d:90:c9:23:63:d3:
                    de:20:c2:b8:ec:19:9c:cd:24:ce:80:9d:55:93:d3:
                    00:95:31:88:03:91:d0:eb:9b:5b:e2:8f:18:2f:b9:
                    fd:61:61:c3:fa:15:83:46:d6:ed:bf:d8:0c:33:6a:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:23:5B:3D:36:DF:04:5D:C1:A4:D2:85:B0:5A:35:D8:25:B2:E3:A5
            X509v3 Authority Key Identifier:
                keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:52:a0:9f:31:f5:7c:b4:31:b4:d3:ff:e2:f8:50:23:21:d2:
         5d:da:33:31:59:1b:7c:42:ef:bf:15:54:c1:a4:da:5f:80:f2:
         54:ea:f3:3f:38:f1:80:d3:ef:f5:b7:67:df:ab:03:93:fa:95:
         8f:97:76:e2:67:f1:11:39:73:b3:ab:63:0a:ba:8f:ba:39:79:
         1e:61:7a:7b:63:e3:68:76:77:23:c6:aa:86:33:57:1e:5d:2b:
         1f:f0:96:7e:7d:8e:31:b6:be:5a:f0:6c:9c:ca:c3:ea:34:0e:
         24:2b:29:11:2d:89:40:cf:5b:8b:18:77:d3:60:2a:92:fb:15:
         eb:4e:75:8f:75:2e:d7:6d:77:f6:00:53:80:dd:7f:11:a2:ab:
         ca:dd:8f:2c:03:20:0e:f4:a1:1b:9b:12:d2:a0:f4:d3:ed:e4:
         a6:c9:34:c9:fc:e1:53:25:6e:03:6a:54:98:66:e6:76:17:29:
         ac:78:25:71:f2:04:96:71:ab:de:9b:9d:f4:c1:a9:6b:42:91:
         3b:0e:a8:d6:33:44:d3:0c:6d:b0:f3:4b:1e:0a:c5:4e:b2:8b:
         72:24:ac:8a:37:3c:cf:8e:3e:80:b9:b9:6b:c2:da:ad:e3:69:
         c4:45:ee:5e:07:0b:b2:f8:e5:2c:37:55:02:8f:f6:e1:4d:8d:
         55:cb:c4:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz
QzQ5MzExREIwHhcNMjYwNjEyMTUxODA3WhcNMjYwNjE5MTUxODA3WjAYMRYwFAYD
VQQDEw02YTJjMjMyZi0wMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLz8dRZRDBAkTNxMUHFoTNaZg4Vis0uZQUB1BpxzsGiQz5aUlsX/gVSsypvO
7d85GAQNH3CgcWXfcslG2bjo6ZFKsQSuMYs18r4ddKMReOCQXxggY6eNqEm+GHCU
Yg3DztdVwhDehD0nmiKs8xGgP7e0I2VYNwKFDoNerv/R/QuU318kLcjeUZO0Ea/o
UQQ+qMjqb2q9zgwoCtYk6m5Eo0pCUdy3ZlvgUnj53O9MPKrtiKQQCFCpAdvh0mDv
K8QlPAKTcXWQkr+S1BSdkMkjY9PeIMK47BmczSTOgJ1Vk9MAlTGIA5HQ65tb4o8Y
L7n9YWHD+hWDRtbtv9gMM2o/yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0jWz02
3wRdwaTShbBaNdglsuOlMB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy
RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4
dE1HZWJmY3lPMUE4U1RFZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFFKgnzH1fLQxtNP/4vhQIyHSXdozMVkbfELvvxVUwaTaX4DyVOrzPzjxgNPv
9bdn36sDk/qVj5d24mfxETlzs6tjCrqPujl5HmF6e2PjaHZ3I8aqhjNXHl0rH/CW
fn2OMba+WvBsnMrD6jQOJCspES2JQM9bixh302AqkvsV6051j3Uu12139gBTgN1/
EaKryt2PLAMgDvShG5sS0qD00+3kpsk0yfzhUyVuA2pUmGbmdhcprHglcfIElnGr
3pud9MGpa0KROw6o1jNE0wxtsPNLHgrFTrKLciSsijc8z44+gLm5a8LareNpxEXu
XgcLsvjlLDdVAo/24U2NVcvE7g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:38 2026 by rpki-client