Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
File:                     S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json)
Hash identifier:          b6Hjj93a+rJrVuysAF+IhR0vRAff0mWtccZ+OJcBkH8=
Subject key identifier:   8D:BF:8F:E1:34:15:57:DD:A7:4A:E8:DF:FE:B5:A1:D0:C1:5F:E8:78
Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Certificate issuer:       /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Certificate serial:       0848
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
Manifest number:          0840
Signing time:             Fri 12 Jun 2026 20:59:10 +0000
Manifest this update:     Fri 12 Jun 2026 20:59:09 +0000
Manifest next update:     Fri 19 Jun 2026 20:59:09 +0000
Files and hashes:         1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: cnk73KrVSnuGrV1yfYRaffyxMXbwFvlJ7o1UN0FKbDY=)
                          2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: uOMbohBjqYkrJACqTf93OXW7s4M6jLEwG//Jh6twRk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
        Validity
            Not Before: Jun 12 20:59:09 2026 GMT
            Not After : Jun 19 20:59:09 2026 GMT
        Subject: CN=6a2c731d-4af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:f3:52:62:76:e3:f8:9a:84:0c:79:40:f2:
                    10:45:94:d7:12:6b:ef:20:23:80:3c:50:1e:77:9c:
                    78:be:a0:6f:5d:c8:ef:4d:04:ae:8b:20:80:05:51:
                    63:32:41:2d:56:91:20:57:c5:9e:19:74:8b:1b:58:
                    2c:2a:31:4e:82:2f:da:0a:7b:db:f6:44:b7:25:93:
                    ab:eb:6f:48:6d:89:2d:8a:ba:4e:27:24:d6:5c:f0:
                    71:6b:0f:36:ec:e7:d7:7e:c7:62:4e:1f:4b:d0:85:
                    1d:02:06:50:96:ce:77:15:b8:6d:7a:fe:80:e6:8c:
                    7c:0d:dd:ca:9b:6c:67:6b:07:78:c1:58:7f:59:0e:
                    ed:56:b0:1d:74:bc:9f:74:25:19:c2:ee:44:27:58:
                    59:97:58:2f:56:bd:e1:a5:c4:98:0a:67:d3:bd:19:
                    98:03:ad:a0:f7:47:d1:13:82:ba:6e:77:ae:d4:4d:
                    a3:23:28:49:40:69:36:6b:e0:70:60:d7:df:dc:f6:
                    97:16:e4:14:c6:0d:77:f7:74:16:9f:3b:f8:12:3e:
                    00:6d:ef:85:2d:84:7b:5b:02:0c:1a:1e:88:ba:fb:
                    90:66:bc:20:b2:b6:ee:ec:18:82:76:f3:2d:c8:7f:
                    fe:21:7c:09:87:c4:3a:9b:5d:4d:d1:6f:a0:37:e6:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:8F:E1:34:15:57:DD:A7:4A:E8:DF:FE:B5:A1:D0:C1:5F:E8:78
            X509v3 Authority Key Identifier:
                keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1c:06:78:08:21:ff:24:09:74:55:3a:81:02:28:92:24:f9:
         1d:c1:83:53:9d:e3:f1:7e:9b:f3:9d:31:99:97:72:03:10:3e:
         b7:da:0f:e3:b2:2d:44:6c:68:d5:cf:c8:07:78:4f:fc:8d:f3:
         61:4c:aa:fb:7a:42:48:37:b7:12:c9:12:1c:e0:9c:b2:3e:87:
         20:b8:b4:7b:c9:96:83:71:ab:f8:87:23:7a:d9:fe:96:fd:2f:
         45:12:f2:b4:03:7b:68:b9:53:b0:64:24:7a:62:da:e6:bc:f7:
         20:83:97:b1:45:15:2a:7a:dd:a6:e1:1d:2d:a2:41:31:bf:8d:
         14:a1:03:01:f0:53:e6:14:d4:17:41:a5:e4:cd:1f:8e:db:60:
         f3:03:10:b1:d6:2a:a2:b1:42:d5:5f:9e:30:da:24:4e:6d:4e:
         ee:09:3c:f3:06:b4:18:ad:32:a2:51:df:f8:67:e1:b6:74:21:
         d5:e3:aa:9b:33:51:76:6c:f1:f4:d7:0c:5e:93:40:df:e7:7b:
         75:d8:78:4d:61:89:6b:e1:be:6e:f5:a4:ab:3d:97:db:75:34:
         5c:da:d4:3e:2f:8f:c3:c3:74:24:41:3a:f3:4b:75:16:d8:a1:
         35:4d:0c:b0:8b:c6:f5:8c:9f:7c:48:4f:90:19:d1:d3:0d:44:
         c0:62:b2:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5NzcwMDEzMkM3
QUM4NkU2MjAwHhcNMjYwNjEyMjA1OTA5WhcNMjYwNjE5MjA1OTA5WjAYMRYwFAYD
VQQDEw02YTJjNzMxZC00YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFbzUmJ24/iahAx5QPIQRZTXEmvvICOAPFAed5x4vqBvXcjvTQSuiyCABVFj
MkEtVpEgV8WeGXSLG1gsKjFOgi/aCnvb9kS3JZOr629IbYktirpOJyTWXPBxaw82
7OfXfsdiTh9L0IUdAgZQls53Fbhtev6A5ox8Dd3Km2xnawd4wVh/WQ7tVrAddLyf
dCUZwu5EJ1hZl1gvVr3hpcSYCmfTvRmYA62g90fRE4K6bneu1E2jIyhJQGk2a+Bw
YNff3PaXFuQUxg1393QWnzv4Ej4Abe+FLYR7WwIMGh6IuvuQZrwgsrbu7BiCdvMt
yH/+IXwJh8Q6m11N0W+gN+YhCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2/j+E0
FVfdp0ro3/61odDBX+h4MB8GA1UdIwQYMBaAFEuFZ/s4e/10B2tQl3ABMseshuYg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0M1Mi82NTI4MzZFODEz
OEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19YUUhhMUNYY0FFeXg2eUc1
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M0Vm4temg3X1hRSGExQ1hjQUV5eDZ5RzVpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Q0M1Mi82NTI4MzZFODEzOEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19Y
UUhhMUNYY0FFeXg2eUc1aUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqRwGeAgh/yQJdFU6gQIokiT5HcGDU53j8X6b850xmZdyAxA+t9oP47ItRGxo
1c/IB3hP/I3zYUyq+3pCSDe3EskSHOCcsj6HILi0e8mWg3Gr+Icjetn+lv0vRRLy
tAN7aLlTsGQkemLa5rz3IIOXsUUVKnrdpuEdLaJBMb+NFKEDAfBT5hTUF0Gl5M0f
jttg8wMQsdYqorFC1V+eMNokTm1O7gk88wa0GK0yolHf+GfhtnQh1eOqmzNRdmzx
9NcMXpNA3+d7ddh4TWGJa+G+bvWkqz2X23U0XNrUPi+Pw8N0JEE680t1FtihNU0M
sIvG9YyffEhPkBnR0w1EwGKyWw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:01 2026 by rpki-client