Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File:                     Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier:          J+3l51NnKu0Ziz4N+EBrARBA3FehmSeIxipVBlJeSwU=
Subject key identifier:   92:0C:8E:F0:DD:B4:C2:84:53:97:3E:84:74:61:31:0B:51:E7:2E:3D
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer:       /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number:          0420
Signing time:             Sat 13 Jun 2026 00:24:30 +0000
Manifest this update:     Sat 13 Jun 2026 00:24:30 +0000
Manifest next update:     Sat 20 Jun 2026 00:24:30 +0000
Files and hashes:         1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: z3VTzA0LFAwIsjO1ZNzUct7KvSELFpl9gJ02wRRZ5NM=)
                          2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: KE0mpfoQ53HdFtxz9Q1JjWNxOehBt1yE8erg7Afm7o8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
        Validity
            Not Before: Jun 13 00:24:30 2026 GMT
            Not After : Jun 20 00:24:30 2026 GMT
        Subject: CN=6a2ca33e-2f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:3b:2d:07:1f:79:99:08:62:e0:46:54:40:
                    e8:57:04:44:12:04:ce:fe:1a:49:a7:5f:be:48:ba:
                    3b:de:d0:61:da:a0:c4:d9:46:67:99:ba:64:c4:8f:
                    99:ee:2d:ea:66:01:13:33:a6:99:b8:97:0e:38:da:
                    94:41:04:80:a5:40:23:6b:97:76:f7:65:74:39:44:
                    12:99:6e:5c:aa:79:2f:3a:4b:e8:a1:31:c1:ae:f7:
                    7e:32:fb:8c:02:71:ea:46:ab:aa:11:63:68:fa:5b:
                    f6:85:f2:39:cf:08:44:61:4e:bb:ae:b2:b4:8b:02:
                    86:4e:38:0f:28:d2:f7:8c:b3:1a:b3:91:9c:f8:29:
                    25:8a:ae:d1:3b:30:76:7d:0b:5f:3a:b9:63:85:ec:
                    00:47:70:a6:35:e5:76:e2:5e:ed:8d:20:0e:c1:9c:
                    2f:48:87:af:9a:02:ff:d9:23:c5:bc:09:9c:3b:ac:
                    98:d2:28:5e:bd:29:c7:d3:0b:63:ab:1b:5f:b9:62:
                    10:70:9f:d1:d6:a3:13:29:11:d1:06:d6:ee:d1:73:
                    0a:ab:18:38:26:4c:e9:56:91:56:84:0a:d5:f2:1d:
                    80:6e:bc:17:2d:76:c3:e5:8b:13:94:28:f2:14:fb:
                    97:80:e7:d6:05:0d:e0:67:93:80:ea:65:78:e6:4e:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:8E:F0:DD:B4:C2:84:53:97:3E:84:74:61:31:0B:51:E7:2E:3D
            X509v3 Authority Key Identifier:
                keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:d5:50:7d:3b:60:68:9b:b9:5b:bf:ee:26:a4:2c:af:31:
         9d:f1:17:56:14:b1:fa:99:c8:85:15:b4:8d:22:f3:34:f5:39:
         d8:5c:7b:0e:d5:ee:d0:0f:3c:f1:02:71:3c:71:7d:ad:28:bf:
         8f:80:01:0e:aa:f1:3a:aa:3c:3b:75:dc:7d:3a:75:ef:bd:c9:
         ff:4f:0e:33:68:85:45:b4:ca:e7:da:d6:c9:9b:c1:70:2d:51:
         0d:83:e5:c5:9e:11:6e:ea:9d:f0:e3:66:c4:7b:a8:20:e5:8e:
         c8:81:03:2a:64:4b:93:2a:ce:1a:3b:e1:77:a4:83:f5:39:b5:
         72:cd:98:c5:a0:9a:a3:57:d2:92:d9:9b:e8:23:4a:d6:1a:d0:
         79:e7:81:b6:d2:37:14:63:d7:61:43:21:28:92:2c:79:27:cd:
         16:64:d2:76:a3:40:bd:79:e8:33:f5:a8:bb:26:72:9c:85:1d:
         47:19:05:14:01:3b:f2:f2:07:ef:3a:b6:9f:13:02:bc:b8:7f:
         3e:1c:83:4e:36:e5:c5:53:d2:12:b9:c0:00:9f:49:ed:5b:aa:
         01:c1:1e:c0:4b:a2:d9:a8:e1:db:72:46:0a:da:b3:f1:ca:21:
         d9:97:d1:a2:0b:6b:30:b4:61:70:98:9b:38:0b:ec:ad:62:a2:
         33:b1:95:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2
MkY2RDgxQkMwHhcNMjYwNjEzMDAyNDMwWhcNMjYwNjIwMDAyNDMwWjAYMRYwFAYD
VQQDEw02YTJjYTMzZS0yZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2w7LQcfeZkIYuBGVEDoVwREEgTO/hpJp1++SLo73tBh2qDE2UZnmbpkxI+Z
7i3qZgETM6aZuJcOONqUQQSApUAja5d292V0OUQSmW5cqnkvOkvooTHBrvd+MvuM
AnHqRquqEWNo+lv2hfI5zwhEYU67rrK0iwKGTjgPKNL3jLMas5Gc+Ckliq7ROzB2
fQtfOrljhewAR3CmNeV24l7tjSAOwZwvSIevmgL/2SPFvAmcO6yY0ihevSnH0wtj
qxtfuWIQcJ/R1qMTKRHRBtbu0XMKqxg4JkzpVpFWhArV8h2AbrwXLXbD5YsTlCjy
FPuXgOfWBQ3gZ5OA6mV45k4e2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIMjvDd
tMKEU5c+hHRhMQtR5y49MB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4
OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy
Z1pJUnpwR3FmYzlpOXRnYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApxfVUH07YGibuVu/7iakLK8xnfEXVhSx+pnIhRW0jSLzNPU52Fx7DtXu0A88
8QJxPHF9rSi/j4ABDqrxOqo8O3XcfTp1773J/08OM2iFRbTK59rWyZvBcC1RDYPl
xZ4Rbuqd8ONmxHuoIOWOyIEDKmRLkyrOGjvhd6SD9Tm1cs2YxaCao1fSktmb6CNK
1hrQeeeBttI3FGPXYUMhKJIseSfNFmTSdqNAvXnoM/WouyZynIUdRxkFFAE78vIH
7zq2nxMCvLh/PhyDTjblxVPSErnAAJ9J7VuqAcEewEui2ajh23JGCtqz8coh2ZfR
ogtrMLRhcJibOAvsrWKiM7GVEA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:42 2026 by rpki-client