Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          IYsJt0PgjXQgjyW8CB86E2HZJ+mShfgblIOzKqxquUo=
Subject key identifier:   18:D1:0F:A6:75:CB:7A:76:91:EF:73:00:CD:41:A0:1A:EA:4B:F7:30
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3572
Signing time:             Fri 12 Jun 2026 14:23:49 +0000
Manifest this update:     Fri 12 Jun 2026 14:23:48 +0000
Manifest next update:     Fri 19 Jun 2026 14:23:48 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: o494ky8kXFJfDsZcN99m8yGh5uuBuSyAwRz7Jha+UYo=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: Jun 12 14:23:48 2026 GMT
            Not After : Jun 19 14:23:48 2026 GMT
        Subject: CN=6a2c1675-2810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:95:c7:b1:c4:79:18:37:2f:ba:a4:78:10:
                    99:c0:28:df:34:ac:d9:8d:2c:4a:36:89:89:5c:a0:
                    fe:09:fd:f7:f5:ea:91:0d:47:a2:ee:84:a1:6e:71:
                    e2:6d:9c:48:b1:c0:b8:60:9c:d4:1e:8a:63:8e:13:
                    34:5a:db:b8:6a:9f:a0:12:01:de:c2:9f:d3:dc:63:
                    34:2c:af:e1:5f:e9:30:f5:b9:2f:5b:55:ea:d1:a3:
                    09:13:82:a6:84:4e:47:c6:74:fc:05:95:49:56:05:
                    07:c6:84:ee:5d:b9:4a:78:84:18:d2:bf:f2:7e:d3:
                    42:00:a2:0b:85:61:57:5a:91:50:5f:1a:c9:c7:8d:
                    0f:3e:08:fe:bd:5e:5b:b3:8b:83:ca:81:b8:c2:8a:
                    af:e0:25:97:b3:2a:db:2a:07:97:80:82:49:ac:d2:
                    b8:9b:a6:72:57:47:01:70:b9:3d:1e:47:56:da:aa:
                    b9:07:2a:96:f8:69:09:cd:7c:89:e6:fd:94:17:92:
                    44:15:69:b4:19:45:f0:89:87:f3:77:33:20:95:05:
                    f1:9c:72:55:5d:9a:bf:88:1f:05:4a:cd:11:df:d0:
                    da:02:d3:95:ce:53:46:4a:d1:17:85:20:39:70:7a:
                    e9:42:89:a6:60:ef:b5:b3:c1:62:6a:f1:72:2d:87:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:0F:A6:75:CB:7A:76:91:EF:73:00:CD:41:A0:1A:EA:4B:F7:30
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:f0:74:9d:fe:57:f0:60:60:4f:c8:3b:51:41:8e:f9:c8:
         64:08:37:aa:e6:90:5e:71:2a:32:2b:f2:c4:89:80:ee:ad:c9:
         96:de:55:02:5d:69:bb:ea:a0:c3:64:41:2a:0d:73:df:f1:45:
         de:e7:e4:fe:fe:26:ab:11:e1:c5:18:bd:07:3e:fe:da:8d:49:
         ef:f8:c5:ba:0f:6a:56:73:0d:ab:1c:72:b6:cc:c3:c5:1f:cf:
         e7:07:47:a2:90:f0:54:45:c6:36:4b:07:01:2a:5b:0d:34:6c:
         c8:82:00:30:44:c5:44:63:5f:e6:fa:d3:d1:81:aa:57:f1:58:
         fd:1f:8a:13:0f:25:cd:85:09:c2:f2:59:74:bb:e8:71:a6:f2:
         2f:90:3c:0c:34:81:5d:e6:94:92:ba:9b:39:78:05:aa:b0:fa:
         82:21:a5:12:d7:7e:6a:b5:9e:6f:2f:cf:b9:cc:37:d1:b7:1c:
         4e:5f:f7:60:e3:a2:57:24:26:dd:9f:57:6a:e1:87:c1:01:14:
         29:c4:f4:0b:a0:cb:18:16:3f:94:7f:89:a5:3e:63:5f:fe:1d:
         90:b4:cc:a3:05:c0:6d:e1:f6:40:9c:7f:4b:f7:53:99:cb:67:
         55:b6:67:d5:aa:3c:ff:6a:3d:46:4c:2f:a7:79:b5:52:c0:75:
         30:fc:d6:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx
ODk3NEZERTIwHhcNMjYwNjEyMTQyMzQ4WhcNMjYwNjE5MTQyMzQ4WjAYMRYwFAYD
VQQDEw02YTJjMTY3NS0yODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwV2Vx7HEeRg3L7qkeBCZwCjfNKzZjSxKNomJXKD+Cf339eqRDUei7oShbnHi
bZxIscC4YJzUHopjjhM0Wtu4ap+gEgHewp/T3GM0LK/hX+kw9bkvW1Xq0aMJE4Km
hE5HxnT8BZVJVgUHxoTuXblKeIQY0r/yftNCAKILhWFXWpFQXxrJx40PPgj+vV5b
s4uDyoG4woqv4CWXsyrbKgeXgIJJrNK4m6ZyV0cBcLk9HkdW2qq5ByqW+GkJzXyJ
5v2UF5JEFWm0GUXwiYfzdzMglQXxnHJVXZq/iB8FSs0R39DaAtOVzlNGStEXhSA5
cHrpQommYO+1s8FiavFyLYdfbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjRD6Z1
y3p2ke9zAM1BoBrqS/cwMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE
ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV
YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlffwdJ3+V/BgYE/IO1FBjvnIZAg3quaQXnEqMivyxImA7q3Jlt5VAl1pu+qg
w2RBKg1z3/FF3ufk/v4mqxHhxRi9Bz7+2o1J7/jFug9qVnMNqxxytszDxR/P5wdH
opDwVEXGNksHASpbDTRsyIIAMETFRGNf5vrT0YGqV/FY/R+KEw8lzYUJwvJZdLvo
cabyL5A8DDSBXeaUkrqbOXgFqrD6giGlEtd+arWeby/Pucw30bccTl/3YOOiVyQm
3Z9XauGHwQEUKcT0C6DLGBY/lH+JpT5jX/4dkLTMowXAbeH2QJx/S/dTmctnVbZn
1ao8/2o9Rkwvp3m1UsB1MPzWOA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:58 2026 by rpki-client