Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File:                     9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier:          lYk6U0jd7VcPrOTvZ9iRBfVZc4WFkxNKV4c+Xm1bEi0=
Subject key identifier:   75:E1:20:57:4A:B9:35:D1:5A:4D:5B:24:38:7C:B2:4F:48:B8:BB:46
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer:       /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number:          0148
Signing time:             Sat 13 Jun 2026 05:14:18 +0000
Manifest this update:     Sat 13 Jun 2026 05:14:18 +0000
Manifest next update:     Sat 20 Jun 2026 05:14:18 +0000
Files and hashes:         1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: cH8Te9xpqoEplSCJeRQrKXnuHtmEWxKcU45vb4rDZb0=)
                          2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: Y4eMPkfyTXrtKvA+X6u1unLZ0mgOp+sFenl0Spk8Log=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
        Validity
            Not Before: Jun 13 05:14:18 2026 GMT
            Not After : Jun 20 05:14:18 2026 GMT
        Subject: CN=6a2ce72a-a4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:d2:19:74:2a:e3:f0:9b:71:35:f9:d6:16:
                    f2:9b:b4:ce:ab:b3:ce:d3:99:0d:00:39:a4:a5:45:
                    96:51:18:18:63:14:ba:5c:ce:57:de:02:62:c2:0b:
                    e6:a6:ea:c3:bb:8f:d5:1e:1a:e7:54:9f:68:f9:5f:
                    10:bb:f4:1c:34:ae:24:5d:8c:91:1c:e5:df:29:77:
                    3a:5a:a4:c0:3b:49:71:9c:dc:6a:ed:92:2b:7a:80:
                    d7:20:d0:32:a4:dd:3e:ab:a2:b3:50:2c:21:92:22:
                    1e:2a:96:0d:80:b2:d2:8f:6f:10:51:34:82:53:52:
                    72:29:5f:22:bd:d5:a6:dd:5c:36:33:21:fb:8c:9f:
                    ab:aa:1f:e6:46:83:95:60:19:bb:44:14:3c:78:9b:
                    20:22:84:af:ce:1f:36:b1:24:3c:ac:99:66:6c:5a:
                    41:3b:d8:21:48:18:24:04:b1:7f:b3:62:b9:dc:30:
                    27:26:2e:d7:62:91:d7:8c:ac:d2:ec:ac:ee:8c:5f:
                    72:83:39:45:cf:03:4d:e9:3b:67:13:90:c3:e4:85:
                    98:fd:2e:4a:38:d4:0e:59:ba:1b:f9:23:2e:78:7d:
                    bf:b4:4a:bc:80:91:3e:75:b1:6d:b8:7b:cd:ee:d5:
                    eb:85:b2:69:a7:42:d6:8f:78:fe:79:bc:a8:2e:c6:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:20:57:4A:B9:35:D1:5A:4D:5B:24:38:7C:B2:4F:48:B8:BB:46
            X509v3 Authority Key Identifier:
                keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:90:77:fe:04:d9:b3:a6:ff:70:02:3a:60:0d:57:1f:62:
         a9:2a:01:de:3a:90:ea:47:0b:82:8d:a2:cc:c7:b4:b3:49:f3:
         9a:c8:fb:dd:62:56:46:1d:b1:8e:45:76:05:a1:9c:9a:d3:49:
         89:0f:6c:54:62:dd:0d:95:16:d3:54:0e:5f:ad:21:b5:98:54:
         63:4e:a7:9b:29:4a:23:3d:f5:85:95:e1:90:16:34:8c:57:40:
         0c:f2:4c:e4:de:e6:07:28:ff:58:7c:b7:97:e3:68:1b:d1:ce:
         f9:e4:54:21:b8:9f:5c:0a:77:7b:55:96:6a:ba:af:17:c5:ac:
         9e:76:f7:ee:db:63:9c:88:6d:07:1d:7b:d0:81:0c:8e:92:65:
         9e:0f:31:9d:62:0f:20:4b:d8:b1:38:6b:44:02:85:fc:b0:55:
         85:dc:e7:2e:0c:8c:35:48:6b:88:6b:c0:11:99:3f:e5:22:c1:
         93:73:02:28:26:7b:0a:cd:5c:e1:b3:49:5a:ee:eb:db:18:56:
         32:18:5a:aa:dc:50:c5:da:0e:14:c5:d0:f4:46:8c:ca:26:7c:
         c5:19:aa:94:ae:4e:6b:36:4d:f5:4e:d4:bc:18:6f:a5:4c:f9:
         ee:0e:af:c1:8b:e2:f1:16:84:0a:82:91:8c:1c:26:29:28:0e:
         d3:eb:f4:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1
RDczODhGMjQwHhcNMjYwNjEzMDUxNDE4WhcNMjYwNjIwMDUxNDE4WjAYMRYwFAYD
VQQDEw02YTJjZTcyYS1hNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEfSGXQq4/CbcTX51hbym7TOq7PO05kNADmkpUWWURgYYxS6XM5X3gJiwgvm
purDu4/VHhrnVJ9o+V8Qu/QcNK4kXYyRHOXfKXc6WqTAO0lxnNxq7ZIreoDXINAy
pN0+q6KzUCwhkiIeKpYNgLLSj28QUTSCU1JyKV8ivdWm3Vw2MyH7jJ+rqh/mRoOV
YBm7RBQ8eJsgIoSvzh82sSQ8rJlmbFpBO9ghSBgkBLF/s2K53DAnJi7XYpHXjKzS
7KzujF9ygzlFzwNN6TtnE5DD5IWY/S5KONQOWbob+SMueH2/tEq8gJE+dbFtuHvN
7tXrhbJpp0LWj3j+ebyoLsZo6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXhIFdK
uTXRWk1bJDh8sk9IuLtGMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx
QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ
Z05WODBDZk5udUZkYzRqeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU2+Qd/4E2bOm/3ACOmANVx9iqSoB3jqQ6kcLgo2izMe0s0nzmsj73WJWRh2x
jkV2BaGcmtNJiQ9sVGLdDZUW01QOX60htZhUY06nmylKIz31hZXhkBY0jFdADPJM
5N7mByj/WHy3l+NoG9HO+eRUIbifXAp3e1WWarqvF8Wsnnb37ttjnIhtBx170IEM
jpJlng8xnWIPIEvYsThrRAKF/LBVhdznLgyMNUhriGvAEZk/5SLBk3MCKCZ7Cs1c
4bNJWu7r2xhWMhhaqtxQxdoOFMXQ9EaMyiZ8xRmqlK5OazZN9U7UvBhvpUz57g6v
wYvi8RaECoKRjBwmKSgO0+v0Pw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:52 2026 by rpki-client