Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File:                     R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier:          bGwo6vzVYJT77fGZ2irAZ11NyYFjHsyP62ACW40+l8o=
Subject key identifier:   F8:CB:DC:CB:21:E0:58:ED:5A:00:D8:18:9A:9B:3F:D8:A3:55:73:3C
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer:       /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial:       1362
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number:          133C
Signing time:             Wed 10 Jun 2026 16:59:42 +0000
Manifest this update:     Wed 10 Jun 2026 16:59:42 +0000
Manifest next update:     Wed 17 Jun 2026 16:59:42 +0000
Files and hashes:         1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: kI8L8p1+qvl5lLmcoQrp8z0qRRedkibKfK7hDjJ2GJQ=)
                          2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: VTQTT8xuT6Dg+SWzxk2QMe23LBYYzjpf4J2jxRAO07I=)
                          3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: KjogEvmeziwi8gySjs9Ywm3IXf9Y7i+lrZLVGgULe+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
                          rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4962 (0x1362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
        Validity
            Not Before: Jun 10 16:59:42 2026 GMT
            Not After : Jun 17 16:59:42 2026 GMT
        Subject: CN=6a2997fe-c297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:44:02:bd:8f:2b:b3:41:98:b8:c0:24:df:
                    dc:74:fe:b4:38:d2:69:58:89:0f:cc:c7:51:1f:1a:
                    2b:c4:79:e3:43:d8:d7:6e:82:c7:6c:39:11:8d:92:
                    1f:cc:92:01:ce:d1:4e:ae:72:60:10:41:5f:65:e9:
                    6c:f0:06:22:17:0c:62:60:40:11:fe:8e:33:50:43:
                    06:03:b8:ea:88:17:cd:26:e7:f9:ba:0d:f8:4f:40:
                    b8:85:f2:ba:6f:c1:e5:04:a7:b6:16:59:9f:32:61:
                    93:a2:98:7a:91:eb:bf:a3:67:c7:83:fb:c3:db:f9:
                    19:95:96:f0:b3:d1:1b:41:83:72:d0:65:0f:36:d1:
                    fe:97:82:fd:51:a8:2b:94:ab:57:1b:b0:30:d1:82:
                    8a:4c:31:06:ac:0f:d4:17:1f:7e:ed:c4:fb:f1:f2:
                    7f:66:25:c4:da:25:17:74:f0:0c:8d:59:a6:f6:e0:
                    69:f0:2a:b7:12:4b:b4:cd:12:df:5a:7f:f3:37:c2:
                    76:f9:e0:21:96:59:95:c6:bc:e8:63:2c:24:da:a7:
                    81:d5:c2:bc:a2:ec:64:b9:f1:11:14:74:83:24:f0:
                    eb:9a:ad:5a:33:eb:a8:ee:d3:81:25:12:e5:43:ad:
                    5f:47:85:14:f2:55:59:dc:09:82:d5:e8:21:49:a0:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CB:DC:CB:21:E0:58:ED:5A:00:D8:18:9A:9B:3F:D8:A3:55:73:3C
            X509v3 Authority Key Identifier:
                keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:46:6c:c0:ab:be:bb:59:bc:ed:b2:c6:98:d7:68:59:40:
         1a:bc:ca:1c:5c:87:99:1f:05:69:f3:bf:73:30:e7:58:d2:82:
         f0:18:0f:08:19:65:f6:14:8a:bd:3c:e0:b1:1b:1f:3b:5c:ba:
         e1:1b:56:78:24:93:c3:3a:7b:11:ec:fe:23:ea:a7:b2:2e:06:
         f1:d8:e9:cb:e6:e8:aa:b9:fa:be:91:57:98:db:04:ab:d5:b4:
         a9:90:6c:3e:fa:47:f8:85:c3:31:05:e9:66:69:3e:ed:48:a8:
         c9:57:69:80:ba:ba:54:a1:1c:00:6c:53:6e:2c:25:6a:87:4d:
         2d:97:d7:c3:2c:ec:ce:79:29:f0:27:d0:a7:a7:61:77:20:3f:
         70:15:0a:79:67:d2:53:f6:a0:e0:38:4a:f5:2c:fc:bb:e2:34:
         b1:c0:d0:b6:82:35:70:b6:bf:da:07:9f:b2:ed:f2:85:6e:6f:
         27:d7:c6:b9:cc:0d:86:ef:be:1c:b3:66:a7:73:c5:51:a6:f4:
         75:a9:db:d1:36:67:18:98:21:99:d0:6b:3f:17:df:38:e0:aa:
         8c:5a:1b:eb:15:36:45:a8:6b:d4:2d:f5:25:ad:a7:2b:33:db:
         de:c9:49:19:88:fe:a0:ce:10:e7:a7:8a:76:9c:7a:bf:05:7c:
         72:7d:a5:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE
MkZCQkFEN0MwHhcNMjYwNjEwMTY1OTQyWhcNMjYwNjE3MTY1OTQyWjAYMRYwFAYD
VQQDEw02YTI5OTdmZS1jMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAke1EAr2PK7NBmLjAJN/cdP60ONJpWIkPzMdRHxorxHnjQ9jXboLHbDkRjZIf
zJIBztFOrnJgEEFfZels8AYiFwxiYEAR/o4zUEMGA7jqiBfNJuf5ug34T0C4hfK6
b8HlBKe2FlmfMmGToph6keu/o2fHg/vD2/kZlZbws9EbQYNy0GUPNtH+l4L9Uagr
lKtXG7Aw0YKKTDEGrA/UFx9+7cT78fJ/ZiXE2iUXdPAMjVmm9uBp8Cq3Eku0zRLf
Wn/zN8J2+eAhllmVxrzoYywk2qeB1cK8ouxkufERFHSDJPDrmq1aM+uo7tOBJRLl
Q61fR4UU8lVZ3AmC1eghSaD9QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjL3Msh
4FjtWgDYGJqbP9ijVXM8MB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw
QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x
OHo5aTJDcGJvbVRTLTdyWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd7RGbMCrvrtZvO2yxpjXaFlAGrzKHFyHmR8FafO/czDnWNKC8BgPCBll9hSK
vTzgsRsfO1y64RtWeCSTwzp7Eez+I+qnsi4G8djpy+boqrn6vpFXmNsEq9W0qZBs
PvpH+IXDMQXpZmk+7UioyVdpgLq6VKEcAGxTbiwlaodNLZfXwyzsznkp8CfQp6dh
dyA/cBUKeWfSU/ag4DhK9Sz8u+I0scDQtoI1cLa/2gefsu3yhW5vJ9fGucwNhu++
HLNmp3PFUab0danb0TZnGJghmdBrPxffOOCqjFob6xU2Rahr1C31Ja2nKzPb3slJ
GYj+oM4Q56eKdpx6vwV8cn2ljg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 17:41:05 2026 by rpki-client