Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File:                     FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier:          pcyv2L/DZG+ubtIE+s8MZ7q5iD3yjx/75YrBOJabn1o=
Subject key identifier:   14:CB:29:83:F7:6D:0E:1F:B6:64:08:3B:3E:73:C5:F0:76:61:AC:92
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer:       /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number:          0610
Signing time:             Thu 04 Jun 2026 22:55:15 +0000
Manifest this update:     Thu 04 Jun 2026 22:55:14 +0000
Manifest next update:     Thu 11 Jun 2026 22:55:14 +0000
Files and hashes:         1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: +zBC3IJCwBN/QV0Pq+be5RrZU/1GqCscDN7MLXg1//g=)
                          2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: NQX7JB0+/eWjbVIYCyPV0TJwdeszpx4RpQyQ+f5a0uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
                          rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 22:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
        Validity
            Not Before: Jun  4 22:55:14 2026 GMT
            Not After : Jun 11 22:55:14 2026 GMT
        Subject: CN=6a220253-8772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:4f:f0:f8:9b:02:68:83:ad:7f:e6:40:da:
                    ac:93:98:e0:18:d8:ab:b6:77:79:08:c6:a7:c9:ab:
                    18:0f:5c:67:58:f4:d9:06:50:62:bf:a6:57:b5:1d:
                    86:fd:14:e8:db:06:28:02:cb:f1:3c:04:b1:1e:d5:
                    1f:e3:e4:33:f2:cc:a8:93:1b:f2:7e:e1:52:0a:67:
                    9f:bf:74:c1:6a:44:71:7c:ea:48:5e:29:c0:9c:fe:
                    7c:54:48:9c:18:8a:ec:d4:ab:37:a3:6b:49:a4:9a:
                    bc:ae:48:03:8f:4c:aa:88:13:7b:1a:fb:dd:9f:a6:
                    e4:ba:2c:cc:41:92:a3:f9:b8:17:b3:2a:d1:56:39:
                    72:60:2f:15:ea:fe:5d:2c:ab:25:a8:ac:86:86:a0:
                    9d:0e:a4:c9:54:1b:35:9e:21:05:60:c5:96:2f:f3:
                    98:0e:69:0f:75:cd:09:2d:6e:3c:80:ee:85:10:ab:
                    44:a1:ad:e7:d6:b9:4c:32:3f:fc:47:c1:09:0b:04:
                    a7:d9:84:1a:06:18:e9:7b:a6:d0:3a:1b:30:b9:77:
                    2d:07:4c:cb:99:88:56:23:6f:1b:64:04:59:6e:9a:
                    b7:bf:37:79:1f:21:d3:46:13:a9:2c:40:ba:61:7a:
                    29:cd:23:54:e8:dc:4d:e7:a6:7a:51:69:8c:87:61:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:29:83:F7:6D:0E:1F:B6:64:08:3B:3E:73:C5:F0:76:61:AC:92
            X509v3 Authority Key Identifier:
                keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:96:fc:a0:d0:36:9a:ad:49:ff:83:57:c9:9f:bc:55:96:
         0d:c6:3c:da:7e:24:86:ed:6e:f1:d1:af:ee:80:53:36:7f:90:
         32:19:69:8d:fa:b2:47:25:20:90:44:f9:24:d0:bd:3d:af:95:
         34:fd:cf:a6:a5:97:87:c9:19:59:6c:76:b1:25:9d:07:04:17:
         5b:e5:da:65:c6:7f:82:38:a7:4a:94:5f:f4:bc:e1:40:ab:ab:
         fc:45:33:a1:bf:94:64:58:38:79:f3:f2:8f:23:dd:42:58:0e:
         62:0d:ff:19:31:a2:ed:6b:da:67:3e:4a:7f:03:d5:d1:6a:03:
         04:11:07:81:06:ea:d3:6a:a2:ba:f6:ac:00:b8:61:76:27:36:
         23:22:84:f4:4f:8b:87:ab:f1:62:f1:58:f4:c5:4d:dd:74:b0:
         2e:27:2a:c5:32:71:21:ea:55:c2:73:9b:99:d2:13:bc:46:06:
         76:19:68:8f:e7:fd:06:8a:ff:68:b0:d4:75:33:f8:e0:ba:03:
         15:19:34:59:81:b3:c4:86:5b:3c:dd:4c:2a:ef:94:38:69:66:
         5a:47:ae:9d:90:d7:28:fd:0f:cd:c6:e6:b8:73:2c:39:99:27:
         99:8e:0a:e1:fa:79:d7:fb:9a:6d:fd:00:c1:2f:51:f8:ff:5f:
         77:00:fd:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC
QzhFMTUyRDgwHhcNMjYwNjA0MjI1NTE0WhcNMjYwNjExMjI1NTE0WjAYMRYwFAYD
VQQDEw02YTIyMDI1My04NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0dZP8PibAmiDrX/mQNqsk5jgGNirtnd5CManyasYD1xnWPTZBlBiv6ZXtR2G
/RTo2wYoAsvxPASxHtUf4+Qz8syokxvyfuFSCmefv3TBakRxfOpIXinAnP58VEic
GIrs1Ks3o2tJpJq8rkgDj0yqiBN7Gvvdn6bkuizMQZKj+bgXsyrRVjlyYC8V6v5d
LKslqKyGhqCdDqTJVBs1niEFYMWWL/OYDmkPdc0JLW48gO6FEKtEoa3n1rlMMj/8
R8EJCwSn2YQaBhjpe6bQOhswuXctB0zLmYhWI28bZARZbpq3vzd5HyHTRhOpLEC6
YXopzSNU6NxN56Z6UWmMh2EjkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTLKYP3
bQ4ftmQIOz5zxfB2YaySMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF
OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX
SFExbDJuSmYzUXU4amhVdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoEuW/KDQNpqtSf+DV8mfvFWWDcY82n4khu1u8dGv7oBTNn+QMhlpjfqyRyUg
kET5JNC9Pa+VNP3PpqWXh8kZWWx2sSWdBwQXW+XaZcZ/gjinSpRf9LzhQKur/EUz
ob+UZFg4efPyjyPdQlgOYg3/GTGi7WvaZz5KfwPV0WoDBBEHgQbq02qiuvasALhh
dic2IyKE9E+Lh6vxYvFY9MVN3XSwLicqxTJxIepVwnObmdITvEYGdhloj+f9Bor/
aLDUdTP44LoDFRk0WYGzxIZbPN1MKu+UOGlmWkeunZDXKP0PzcbmuHMsOZknmY4K
4fp51/uabf0AwS9R+P9fdwD9Ug==
-----END CERTIFICATE-----
Generated at Sat Jun 6 21:51:46 2026 by rpki-client