Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File:                     K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier:          CIinf5ELbIt8cdnqtDKkieYk2UA76E3kCw44EICevK8=
Subject key identifier:   C7:00:4B:39:F8:04:0D:69:A3:67:9A:1D:8C:27:AF:D4:C0:B6:21:E2
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer:       /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial:       0EAD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number:          0E9D
Signing time:             Thu 04 Jun 2026 15:36:27 +0000
Manifest this update:     Thu 04 Jun 2026 15:36:27 +0000
Manifest next update:     Thu 11 Jun 2026 15:36:27 +0000
Files and hashes:         1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: xraJrVawru+4yKUTNAekA3sxU3gdLbpFQrmznzjkTiw=)
                          2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: +AnMnxmKTZyscWe5AeUEPNU2Nvb8Uu/NJlADVWANwr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3757 (0xead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
        Validity
            Not Before: Jun  4 15:36:27 2026 GMT
            Not After : Jun 11 15:36:27 2026 GMT
        Subject: CN=6a219b7b-1849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:62:c9:13:4f:c9:e3:75:17:ca:a9:4d:bb:
                    7f:68:76:c6:b9:5c:43:a3:35:6f:6a:e7:7e:b9:94:
                    97:78:b6:33:33:31:8f:b8:fb:5c:eb:4b:c9:9c:83:
                    a0:96:81:44:a6:2f:03:46:28:30:f5:b7:30:b4:fa:
                    c7:e2:90:96:28:4b:b0:29:b4:c2:57:49:19:46:b1:
                    1a:4b:08:32:a0:f1:d2:e7:bf:84:de:f0:b1:f2:5d:
                    b8:7d:dc:be:79:7d:f3:04:f8:c2:e1:94:36:47:64:
                    b4:76:a6:ec:3c:8f:69:bd:f7:a2:34:7f:35:9c:63:
                    66:f6:25:ec:a7:61:2a:ea:a4:b7:39:f6:72:e6:58:
                    48:26:67:11:1a:14:b1:af:ca:8c:d7:b3:27:ff:24:
                    2e:1f:72:1a:66:e2:95:97:b2:20:ec:e6:89:81:ee:
                    e4:38:01:1e:e9:48:14:e8:9c:9a:5d:79:3d:a4:a2:
                    5c:04:82:4e:ab:f5:34:e1:84:e9:b9:fd:ab:65:5f:
                    fd:ef:d2:64:17:a0:a7:8f:46:0e:4d:1b:f4:cc:5c:
                    19:d3:5a:96:5a:7e:c3:5f:e8:47:2a:32:82:4f:10:
                    dd:20:e2:d3:96:6d:43:51:59:01:1b:bf:0b:a8:ea:
                    4a:06:70:4b:66:c3:71:f1:68:4b:fd:eb:a1:ea:14:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:00:4B:39:F8:04:0D:69:A3:67:9A:1D:8C:27:AF:D4:C0:B6:21:E2
            X509v3 Authority Key Identifier:
                keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:95:a8:a9:d8:ae:c4:70:72:06:3d:33:8c:90:9e:fa:40:84:
         72:fc:74:af:1f:a3:38:40:1d:a5:07:25:bc:e3:03:2d:91:89:
         cc:f9:34:8d:50:21:25:c1:6a:59:0b:71:c2:2e:9d:93:73:26:
         0d:91:2d:61:09:2d:0a:72:72:79:91:76:52:f6:b1:5a:e9:05:
         90:0f:bd:b2:95:86:c6:c2:5f:e6:22:7e:f0:a1:ea:c8:be:ee:
         5b:73:d0:d1:69:6d:53:a5:94:1a:91:fb:fc:6c:98:30:99:72:
         ce:d6:fd:22:14:ff:0c:74:7e:ef:eb:2d:17:1a:ca:1c:89:ad:
         4a:55:c3:41:56:11:27:fe:2f:af:ce:d6:91:e5:f7:84:ae:4e:
         51:87:f0:f2:52:70:56:95:83:ea:55:ec:9b:3c:c1:f9:d7:e3:
         5a:80:7d:93:d3:40:39:a9:4f:2e:a5:1d:90:ab:99:ae:76:12:
         ba:48:3e:59:d9:b8:45:27:fc:cd:cc:d2:6f:32:aa:36:6c:27:
         a1:55:c8:4b:b0:91:19:01:18:36:3c:e5:17:26:ea:1d:22:df:
         41:28:24:fc:94:e3:c7:e1:1d:6f:af:2c:90:f9:71:74:83:15:
         e9:6b:be:8c:ee:a8:b0:05:2c:2b:8f:de:86:fa:e6:4f:80:ca:
         2f:25:5e:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw
NDU2MjMyQzYwHhcNMjYwNjA0MTUzNjI3WhcNMjYwNjExMTUzNjI3WjAYMRYwFAYD
VQQDEw02YTIxOWI3Yi0xODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxj9iyRNPyeN1F8qpTbt/aHbGuVxDozVvaud+uZSXeLYzMzGPuPtc60vJnIOg
loFEpi8DRigw9bcwtPrH4pCWKEuwKbTCV0kZRrEaSwgyoPHS57+E3vCx8l24fdy+
eX3zBPjC4ZQ2R2S0dqbsPI9pvfeiNH81nGNm9iXsp2Eq6qS3OfZy5lhIJmcRGhSx
r8qM17Mn/yQuH3IaZuKVl7Ig7OaJge7kOAEe6UgU6JyaXXk9pKJcBIJOq/U04YTp
uf2rZV/979JkF6Cnj0YOTRv0zFwZ01qWWn7DX+hHKjKCTxDdIOLTlm1DUVkBG78L
qOpKBnBLZsNx8WhL/euh6hQCvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcASzn4
BA1po2eaHYwnr9TAtiHiMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3
NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy
VG5VNGJlNkRjaTRFVmlNc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI5WoqdiuxHByBj0zjJCe+kCEcvx0rx+jOEAdpQclvOMDLZGJzPk0jVAhJcFq
WQtxwi6dk3MmDZEtYQktCnJyeZF2UvaxWukFkA+9spWGxsJf5iJ+8KHqyL7uW3PQ
0WltU6WUGpH7/GyYMJlyztb9IhT/DHR+7+stFxrKHImtSlXDQVYRJ/4vr87WkeX3
hK5OUYfw8lJwVpWD6lXsmzzB+dfjWoB9k9NAOalPLqUdkKuZrnYSukg+Wdm4RSf8
zczSbzKqNmwnoVXIS7CRGQEYNjzlFybqHSLfQSgk/JTjx+Edb68skPlxdIMV6Wu+
jO6osAUsK4/ehvrmT4DKLyVeTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:16 2026 by rpki-client