Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
File:                     A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json)
Hash identifier:          RmWJN67TrL19heTOuzXEliQbv88aIe1y9csXMckkWoA=
Subject key identifier:   1C:D2:A2:78:AE:54:15:D9:44:75:39:65:3C:D5:DA:3C:EF:4B:36:44
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Certificate issuer:       /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial:       0C03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
Manifest number:          0BF9
Signing time:             Wed 20 May 2026 18:52:39 +0000
Manifest this update:     Wed 20 May 2026 18:52:38 +0000
Manifest next update:     Wed 27 May 2026 18:52:38 +0000
Files and hashes:         1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: LE0T5B8Kk5lSH6P//KVazZi5gvFZmoZ+e964WGW43YM=)
                          2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: 7OphPJqSmTlpEbi6K2ZmGGrAGrBjLWZQ16BfKwVh54w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
                          rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3075 (0xc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
        Validity
            Not Before: May 20 18:52:38 2026 GMT
            Not After : May 27 18:52:38 2026 GMT
        Subject: CN=6a0e02f7-9e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:b6:3e:26:7b:22:03:30:60:b5:91:3c:e4:
                    35:c8:1b:1f:d7:06:9c:43:51:7b:cd:9e:d4:6d:6e:
                    c7:d4:21:b6:5e:ce:78:78:86:0f:6a:8d:94:ad:c6:
                    17:1c:03:8c:b8:47:09:28:1f:84:59:f6:d9:02:cb:
                    df:df:e8:9c:04:7c:60:62:8f:90:e8:ec:c7:f2:98:
                    b8:b7:e8:09:03:0e:fc:49:c0:9b:38:1c:1a:32:54:
                    66:41:bd:dc:e5:76:bc:07:b6:1f:9e:3e:09:33:f6:
                    24:ca:f4:61:62:7c:f7:d3:4a:27:2b:3a:1a:ea:31:
                    ee:9e:15:2c:b2:ad:5a:6e:83:5d:8a:ee:10:5c:00:
                    b4:c9:91:13:64:27:e8:4f:12:df:42:3b:81:49:0c:
                    23:f5:cf:78:6a:41:e5:4b:12:1b:c4:84:74:97:85:
                    a2:dd:3a:61:78:34:e1:68:40:43:07:5d:68:fe:3f:
                    57:0b:e0:b2:7d:e0:54:c6:22:4b:fe:d7:54:e4:29:
                    6c:c4:7a:cd:f1:bd:fa:59:38:61:1b:b9:74:37:74:
                    97:ae:06:d2:c6:94:c0:21:19:72:f3:21:a7:99:c4:
                    f8:fe:b0:35:fc:a1:7e:ce:6c:19:fd:49:50:f9:ae:
                    43:c1:ab:26:4c:8d:d1:a9:ac:23:aa:cf:be:10:26:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:A2:78:AE:54:15:D9:44:75:39:65:3C:D5:DA:3C:EF:4B:36:44
            X509v3 Authority Key Identifier:
                keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9a:fd:b2:88:20:7b:a2:4f:a0:79:98:52:1e:df:d7:56:3b:
         56:06:7a:e3:ea:7e:10:58:de:f1:0b:2b:d4:a7:47:0b:f9:cc:
         30:3e:da:20:b5:21:8e:62:88:68:8c:95:55:30:36:79:7a:99:
         0a:74:94:04:95:d8:14:b4:da:fa:af:6e:34:63:0d:28:91:d0:
         7e:46:03:e1:22:bc:e3:43:36:48:16:c9:af:ce:1d:bd:c3:4e:
         eb:92:af:7d:57:33:74:4a:20:74:a1:5e:88:a8:6b:0e:70:a3:
         e9:58:84:8c:22:99:64:c4:d1:b7:b2:e9:ed:41:1d:5a:5b:5a:
         aa:20:26:88:00:65:63:43:6e:ca:c8:fd:5d:fe:6f:bc:c6:f4:
         01:13:72:91:7e:50:46:c2:dd:6c:64:bc:83:6b:01:57:b2:bc:
         c0:39:c9:48:62:74:e9:1f:1e:93:60:09:fb:55:b0:b9:91:91:
         92:56:e1:ba:8a:a1:76:0e:37:0b:42:cc:98:62:02:20:01:b3:
         0b:e1:0e:0a:a9:b4:90:58:6c:61:84:37:c0:68:20:7c:5e:f4:
         73:a2:c1:0c:08:e2:64:a0:e1:be:f3:8c:4c:08:fe:a6:14:9f:
         b0:a1:37:85:92:9a:5e:d8:79:cd:93:e6:d9:97:ba:72:4b:8f:
         10:57:d2:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3
RTcxOUY4OTAwHhcNMjYwNTIwMTg1MjM4WhcNMjYwNTI3MTg1MjM4WjAYMRYwFAYD
VQQDEw02YTBlMDJmNy05ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5a2PiZ7IgMwYLWRPOQ1yBsf1wacQ1F7zZ7UbW7H1CG2Xs54eIYPao2UrcYX
HAOMuEcJKB+EWfbZAsvf3+icBHxgYo+Q6OzH8pi4t+gJAw78ScCbOBwaMlRmQb3c
5Xa8B7Yfnj4JM/YkyvRhYnz300onKzoa6jHunhUssq1aboNdiu4QXAC0yZETZCfo
TxLfQjuBSQwj9c94akHlSxIbxIR0l4Wi3TpheDThaEBDB11o/j9XC+CyfeBUxiJL
/tdU5ClsxHrN8b36WThhG7l0N3SXrgbSxpTAIRly8yGnmcT4/rA1/KF+zmwZ/UlQ
+a5DwasmTI3Rqawjqs++ECb40QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzSoniu
VBXZRHU5ZTzV2jzvSzZEMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4
M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX
SVpuZm1kbTVtNXgtY1otSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoJr9sogge6JPoHmYUh7f11Y7VgZ64+p+EFje8Qsr1KdHC/nMMD7aILUhjmKI
aIyVVTA2eXqZCnSUBJXYFLTa+q9uNGMNKJHQfkYD4SK840M2SBbJr84dvcNO65Kv
fVczdEogdKFeiKhrDnCj6ViEjCKZZMTRt7Lp7UEdWltaqiAmiABlY0Nuysj9Xf5v
vMb0ARNykX5QRsLdbGS8g2sBV7K8wDnJSGJ06R8ek2AJ+1WwuZGRklbhuoqhdg43
C0LMmGICIAGzC+EOCqm0kFhsYYQ3wGggfF70c6LBDAjiZKDhvvOMTAj+phSfsKE3
hZKaXth5zZPm2Ze6ckuPEFfSJg==
-----END CERTIFICATE-----
Generated at Thu May 21 11:39:36 2026 by rpki-client