Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
File:                     r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json)
Hash identifier:          S4ukEOKFF3GfgGiumczH4MuA9sQcJHTogD7TXGMCGfM=
Subject key identifier:   9A:23:70:0B:65:23:F9:12:C4:62:ED:A9:EC:40:81:17:F1:46:B2:CA
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Certificate issuer:       /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
Manifest number:          0637
Signing time:             Fri 12 Jun 2026 22:52:56 +0000
Manifest this update:     Fri 12 Jun 2026 22:52:55 +0000
Manifest next update:     Fri 19 Jun 2026 22:52:55 +0000
Files and hashes:         1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: kY67kb8eI6wJJSLGlkF6i7e+1eO3fV+YqOe49KASmDw=)
                          2: A18C330A055611F1B80F1E722C3D8C67.roa (hash: BX80cDVzZBpalgIyEiFZUq6L3s4iGC1yQ7gUj1TwOQ8=)
                          3: 75125118FE5F11F0956342DD516F56BC.roa (hash: Whh/5V1YlqO85bcjOHvfWe0PcIZNVRDICOUqC1FzhpY=)
                          4: B0203536062A11F185F9D5F9263D8C67.roa (hash: 6dnR2Nm3KNO6A8Yh2KSvhbTBZD8W+AyXyUMBx8JMzbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
        Validity
            Not Before: Jun 12 22:52:55 2026 GMT
            Not After : Jun 19 22:52:55 2026 GMT
        Subject: CN=6a2c8dc8-0896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:a3:cf:90:99:af:6c:7f:49:f3:4f:89:3d:
                    79:54:fc:bb:10:fa:6e:7a:1e:1f:e0:ae:e6:13:29:
                    00:a8:35:11:47:f2:c4:9e:d9:13:83:ac:31:85:ba:
                    b2:82:ab:25:46:fd:18:00:0c:c3:4d:95:d6:db:cc:
                    0f:56:78:72:54:d8:cb:5b:c5:c1:62:f4:71:24:8c:
                    5b:d5:8b:fa:5f:29:bc:34:87:3b:32:b2:1c:94:11:
                    4b:c3:22:72:bc:b5:19:40:b3:af:b1:90:5d:fb:51:
                    51:46:c6:1a:70:c4:85:72:ae:51:96:e5:23:59:48:
                    3c:b7:a0:0a:72:ad:e4:45:93:d6:55:28:68:3a:87:
                    dd:80:33:d4:47:6a:66:40:bf:80:32:b7:8a:3d:27:
                    d4:44:50:39:11:af:6d:0e:d3:e3:0d:31:26:0a:81:
                    51:98:17:90:ce:98:0a:03:d1:d9:7f:0a:67:d4:1a:
                    a7:4a:61:da:a6:b3:c2:fe:a4:36:75:a1:e3:fb:43:
                    25:f5:7b:c7:e1:bb:2d:cc:d4:70:0e:b3:57:4c:14:
                    fa:a1:d6:c8:01:6c:38:63:ca:40:6f:18:9f:98:f0:
                    1f:ef:8b:ec:9e:31:5e:97:cd:9b:4b:12:51:50:c6:
                    05:d8:d9:62:87:ef:2c:86:bb:22:80:12:50:d4:51:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:23:70:0B:65:23:F9:12:C4:62:ED:A9:EC:40:81:17:F1:46:B2:CA
            X509v3 Authority Key Identifier:
                keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:af:3a:8b:b2:e0:6a:fa:40:01:11:d6:bb:d5:74:41:6b:e3:
         73:8a:2c:e4:f4:d8:43:9b:77:42:09:c0:6e:32:bc:bb:94:25:
         52:27:94:e1:42:df:59:e0:6e:48:74:83:12:c7:ee:04:bd:c5:
         52:c1:19:0d:74:e2:a5:07:45:70:bf:19:9c:cc:92:c7:e9:94:
         07:6a:cd:ca:3c:6e:ed:2a:8d:cf:0e:d6:9b:d1:6b:01:85:51:
         2a:4e:08:6f:3c:de:9b:d6:1a:b2:dd:7a:42:cd:65:ef:10:f2:
         39:79:2c:99:47:dc:6d:c9:fe:1e:12:4b:4a:91:f2:9f:92:ed:
         aa:5b:b3:40:bd:6c:ce:93:60:5e:ba:dd:1b:5f:6f:fb:31:20:
         a4:b6:5c:4e:fc:3f:06:86:72:6f:a4:f9:28:97:98:3f:02:8a:
         4c:61:c7:00:14:f4:a0:bd:c1:e6:de:a1:34:10:ab:a3:9d:7c:
         b6:e8:67:e4:ca:b3:54:ad:a4:f3:4e:95:3f:53:ce:82:0a:6f:
         ef:a1:e4:50:47:87:c8:dc:51:88:9c:f9:3d:68:f1:e0:7a:00:
         5a:c6:8d:4a:56:0b:71:20:f2:96:e2:c9:60:8c:58:7e:da:a1:
         f8:16:c2:15:89:98:67:d1:18:e6:41:46:c9:57:e9:ad:e8:7e:
         1a:2b:06:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD
MkVBMEVBNUIwHhcNMjYwNjEyMjI1MjU1WhcNMjYwNjE5MjI1MjU1WjAYMRYwFAYD
VQQDEw02YTJjOGRjOC0wODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEGjz5CZr2x/SfNPiT15VPy7EPpueh4f4K7mEykAqDURR/LEntkTg6wxhbqy
gqslRv0YAAzDTZXW28wPVnhyVNjLW8XBYvRxJIxb1Yv6Xym8NIc7MrIclBFLwyJy
vLUZQLOvsZBd+1FRRsYacMSFcq5RluUjWUg8t6AKcq3kRZPWVShoOofdgDPUR2pm
QL+AMreKPSfURFA5Ea9tDtPjDTEmCoFRmBeQzpgKA9HZfwpn1BqnSmHaprPC/qQ2
daHj+0Ml9XvH4bstzNRwDrNXTBT6odbIAWw4Y8pAbxifmPAf74vsnjFel82bSxJR
UMYF2Nlih+8shrsigBJQ1FFzdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJojcAtl
I/kSxGLtqexAgRfxRrLKMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw
MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0
YUt0bVp6cjNvVGJDNmc2bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmK86i7LgavpAARHWu9V0QWvjc4os5PTYQ5t3QgnAbjK8u5QlUieU4ULfWeBu
SHSDEsfuBL3FUsEZDXTipQdFcL8ZnMySx+mUB2rNyjxu7SqNzw7Wm9FrAYVRKk4I
bzzem9Yast16Qs1l7xDyOXksmUfcbcn+HhJLSpHyn5LtqluzQL1szpNgXrrdG19v
+zEgpLZcTvw/BoZyb6T5KJeYPwKKTGHHABT0oL3B5t6hNBCro518tuhn5MqzVK2k
806VP1POggpv76HkUEeHyNxRiJz5PWjx4HoAWsaNSlYLcSDyluLJYIxYftqh+BbC
FYmYZ9EY5kFGyVfpreh+GisG8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:49 2026 by rpki-client