Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
File:                     hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json)
Hash identifier:          BYQMLdd/tcVp30J4cd2DYXjIvXhiAaV5hyUfF7DGAoM=
Subject key identifier:   E8:CF:3D:FB:4A:7E:84:16:85:1A:AB:68:A7:8F:9A:81:C7:0E:E1:8B
Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38
Certificate issuer:       /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
Certificate serial:       0AFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
Manifest number:          0AF4
Signing time:             Mon 22 Jun 2026 19:23:16 +0000
Manifest this update:     Mon 22 Jun 2026 19:23:15 +0000
Manifest next update:     Mon 29 Jun 2026 19:23:15 +0000
Files and hashes:         1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: 9IxH+/ZmN1/Mx/sGB6pRZer8fhS7fLdlY7qgRFVLah8=)
                          2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: Xk8rqUEI1EvPoBoNnuA98z3YAjM9r/LxfYko8v880Gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl
                          rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2815 (0xaff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
        Validity
            Not Before: Jun 22 19:23:15 2026 GMT
            Not After : Jun 29 19:23:15 2026 GMT
        Subject: CN=6a398ba4-fabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:55:c2:43:16:ac:8b:3d:39:cd:c0:d8:f4:
                    64:af:9c:39:80:d5:d1:7c:3b:da:e1:de:e1:8d:fe:
                    f2:b3:28:f7:6e:06:65:51:9a:d6:36:9d:1b:77:ff:
                    a9:29:d6:1d:4f:4c:39:24:61:71:44:8a:fc:56:cd:
                    c1:18:77:fd:48:d4:78:d0:4c:4b:0a:06:3d:12:36:
                    d4:6b:4c:34:3f:53:b1:cc:f3:f5:04:4e:2d:4f:35:
                    6a:35:9e:8d:63:f1:e2:b7:e7:e8:e7:79:1d:93:db:
                    c7:4b:1f:81:d9:21:fc:29:71:4d:ac:25:bb:41:55:
                    78:f5:a7:43:a5:ea:4e:03:35:be:07:24:03:9e:1d:
                    7b:28:f5:5b:79:1f:1b:a9:28:07:92:58:74:88:11:
                    a5:ca:d8:9b:b2:0c:ef:a9:85:8f:31:0f:8a:11:19:
                    da:46:00:6a:9f:0c:d4:13:5b:a0:5f:39:76:4e:66:
                    fd:8b:3f:95:ca:6c:f6:4c:a5:43:28:f1:71:d5:8f:
                    7c:a0:e9:59:16:6d:ec:cc:68:ad:7d:13:55:e8:c6:
                    a6:da:33:7b:fe:f7:97:c0:a8:bf:64:13:ff:43:7a:
                    79:24:87:4b:c0:84:c7:b7:ff:ad:df:dd:bf:9f:41:
                    cd:bd:fb:f1:e0:0b:0d:5a:7a:74:85:01:0c:09:bf:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:3D:FB:4A:7E:84:16:85:1A:AB:68:A7:8F:9A:81:C7:0E:E1:8B
            X509v3 Authority Key Identifier:
                keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:00:24:05:d3:69:a3:a0:58:81:b9:b0:cf:0a:d2:eb:72:
         35:44:d1:73:69:76:55:b0:d9:35:4e:cf:81:8c:c8:96:9c:71:
         19:46:3e:77:85:af:05:e7:fa:51:66:fd:91:19:97:bb:cc:02:
         43:50:37:17:ad:c3:2c:05:b3:80:ba:15:ba:65:eb:5a:fe:b0:
         00:54:3e:5b:84:f4:5a:d5:f7:66:5a:34:12:86:aa:93:4e:d2:
         42:ca:96:f1:1d:81:03:3b:a9:bf:9c:b7:ad:64:7c:83:19:c5:
         95:49:6f:a2:e9:ea:42:ac:7b:09:b3:16:b2:02:14:78:0e:e8:
         9e:1c:86:a1:0c:82:66:c7:fa:02:7e:3b:17:dc:b7:2e:c1:13:
         4d:cb:a7:c7:09:ff:f6:b3:df:71:68:ea:7e:0a:da:e2:2d:03:
         4d:95:23:bd:e1:d2:25:7f:44:50:7c:6d:ec:fb:8c:31:79:69:
         d7:78:ae:1a:14:5e:e3:d1:c7:c5:c6:5f:7e:db:57:5c:35:7c:
         d6:6e:42:6c:00:76:eb:27:ce:2a:54:53:98:05:ea:e1:bd:74:
         ff:0c:ee:ba:c6:0a:e9:e9:df:1d:44:f1:7b:42:3c:50:33:2a:
         df:80:8c:06:54:65:27:50:44:8e:2c:55:fa:61:58:c5:d6:f2:
         c4:76:94:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1
MkRFNjMzMzgwHhcNMjYwNjIyMTkyMzE1WhcNMjYwNjI5MTkyMzE1WjAYMRYwFAYD
VQQDEw02YTM5OGJhNC1mYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpZVwkMWrIs9Oc3A2PRkr5w5gNXRfDva4d7hjf7ysyj3bgZlUZrWNp0bd/+p
KdYdT0w5JGFxRIr8Vs3BGHf9SNR40ExLCgY9EjbUa0w0P1OxzPP1BE4tTzVqNZ6N
Y/Hit+fo53kdk9vHSx+B2SH8KXFNrCW7QVV49adDpepOAzW+ByQDnh17KPVbeR8b
qSgHklh0iBGlytibsgzvqYWPMQ+KERnaRgBqnwzUE1ugXzl2Tmb9iz+Vymz2TKVD
KPFx1Y98oOlZFm3szGitfRNV6Mam2jN7/veXwKi/ZBP/Q3p5JIdLwITHt/+t392/
n0HNvfvx4AsNWnp0hQEMCb9NqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjPPftK
foQWhRqraKePmoHHDuGLMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF
N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N
emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ
dUtkZWtFOENjamhTM21NemcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT14AJAXTaaOgWIG5sM8K0utyNUTRc2l2VbDZNU7PgYzIlpxxGUY+d4WvBef6
UWb9kRmXu8wCQ1A3F63DLAWzgLoVumXrWv6wAFQ+W4T0WtX3Zlo0Eoaqk07SQsqW
8R2BAzupv5y3rWR8gxnFlUlvounqQqx7CbMWsgIUeA7onhyGoQyCZsf6An47F9y3
LsETTcunxwn/9rPfcWjqfgra4i0DTZUjveHSJX9EUHxt7PuMMXlp13iuGhRe49HH
xcZffttXXDV81m5CbAB26yfOKlRTmAXq4b10/wzuusYK6enfHUTxe0I8UDMq34CM
BlRlJ1BEjixV+mFYxdbyxHaUbw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:00 2026 by rpki-client