Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File:                     H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier:          jNZ0xcYC53yawa91oJl0h304hUwrE5/7ETVyJEWjxGo=
Subject key identifier:   C2:44:FD:10:F9:1B:91:4F:9E:F7:B5:8B:CF:B3:23:77:C4:8C:5F:D8
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number:          04C3
Signing time:             Mon 22 Jun 2026 23:54:34 +0000
Manifest this update:     Mon 22 Jun 2026 23:54:34 +0000
Manifest next update:     Mon 29 Jun 2026 23:54:34 +0000
Files and hashes:         1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: WJoMGl884v0L8klpFvfZcbKSx7akCiLh0w0Nk3CWUoc=)
                          2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: JLSpD4WP21I45YnxCYPUZKiI0CXdyL9PtVi/LHX9mJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Jun 22 23:54:34 2026 GMT
            Not After : Jun 29 23:54:34 2026 GMT
        Subject: CN=6a39cb3a-6b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:02:a5:87:71:c0:84:d9:df:4b:6f:1d:5a:
                    39:ec:9e:87:f0:41:83:61:e7:04:1b:dd:8d:e8:51:
                    f6:a8:ae:d2:9f:2a:67:64:d7:0b:4f:24:f9:98:67:
                    b6:84:42:3a:ca:b4:5b:7c:7a:31:0a:05:da:62:1c:
                    27:36:8e:5d:62:87:b3:c4:e0:2f:1a:b9:e3:12:c1:
                    a4:9a:59:ee:85:b3:1c:93:6d:08:d7:d6:d1:33:d6:
                    75:32:6e:a5:ca:a8:ac:90:3a:14:ed:56:a1:f2:69:
                    c2:68:c7:55:70:c5:42:f3:b4:12:dd:58:b7:89:50:
                    f3:5f:29:9e:d7:48:de:28:32:22:25:9f:34:10:12:
                    5f:72:8b:c2:17:0c:b9:36:f2:65:73:4e:35:eb:83:
                    d5:c8:ef:ef:7e:bd:08:72:fe:ab:41:22:e5:eb:30:
                    85:87:de:41:24:e3:15:8f:fc:98:a5:49:73:e3:01:
                    ba:35:65:68:bd:6c:16:b5:29:4c:c6:d3:c7:53:a6:
                    c6:dc:fa:7f:a7:62:2c:66:da:47:f9:46:c6:e0:08:
                    0e:6f:ca:e4:20:fa:a4:c4:3c:a5:c2:96:af:79:6a:
                    94:72:b1:66:9a:98:c5:42:ea:ed:de:7c:61:d4:a1:
                    d8:1f:61:82:6d:17:24:9d:58:8e:91:da:05:f7:ba:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:FD:10:F9:1B:91:4F:9E:F7:B5:8B:CF:B3:23:77:C4:8C:5F:D8
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:d6:eb:52:e6:41:27:26:7c:8a:57:85:73:e4:09:91:b7:
         60:90:be:6f:ae:9b:c1:44:94:a8:e2:ec:93:3d:78:14:58:4e:
         60:34:f9:8f:cd:a1:22:61:b2:26:47:01:7b:19:82:92:32:91:
         9d:a6:26:a7:32:6d:61:67:9b:ff:4b:a1:e0:c5:d5:89:1d:dc:
         08:21:4b:11:43:c7:a7:df:b7:7c:37:00:b5:52:3c:6d:45:58:
         92:26:ee:72:4d:b7:87:23:ec:66:12:43:f2:41:7b:c9:7c:eb:
         29:10:df:50:9b:07:8c:67:22:2b:36:46:88:60:66:bc:31:94:
         24:3a:f9:8e:ea:28:83:e6:a8:24:2b:6a:fa:9d:f1:6f:0b:b8:
         be:65:b4:b4:57:e4:01:76:86:39:9f:e9:f8:ec:94:97:2b:7f:
         33:82:97:64:ad:ee:1f:2c:e9:48:83:8d:97:98:d9:b3:49:2e:
         70:22:88:22:4d:68:ad:82:55:66:f4:51:c0:f6:85:99:52:46:
         e0:88:4d:43:c8:da:30:37:a9:54:0c:9c:a6:2d:07:47:ba:dc:
         d3:9b:dc:95:b4:a4:66:d8:98:4f:12:f8:7e:41:6a:3c:a8:ce:
         3f:36:8a:79:25:39:7c:f0:9c:dd:27:e3:f8:a9:4b:d6:c5:83:
         b7:45:fd:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2
QTM0NkY2QTQwHhcNMjYwNjIyMjM1NDM0WhcNMjYwNjI5MjM1NDM0WjAYMRYwFAYD
VQQDEw02YTM5Y2IzYS02Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0gCpYdxwITZ30tvHVo57J6H8EGDYecEG92N6FH2qK7SnypnZNcLTyT5mGe2
hEI6yrRbfHoxCgXaYhwnNo5dYoezxOAvGrnjEsGkmlnuhbMck20I19bRM9Z1Mm6l
yqiskDoU7Vah8mnCaMdVcMVC87QS3Vi3iVDzXyme10jeKDIiJZ80EBJfcovCFwy5
NvJlc04164PVyO/vfr0Icv6rQSLl6zCFh95BJOMVj/yYpUlz4wG6NWVovWwWtSlM
xtPHU6bG3Pp/p2IsZtpH+UbG4AgOb8rkIPqkxDylwpaveWqUcrFmmpjFQurt3nxh
1KHYH2GCbRcknViOkdoF97otQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJE/RD5
G5FPnve1i8+zI3fEjF/YMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3
NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct
NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjBDW61LmQScmfIpXhXPkCZG3YJC+b66bwUSUqOLskz14FFhOYDT5j82hImGy
JkcBexmCkjKRnaYmpzJtYWeb/0uh4MXViR3cCCFLEUPHp9+3fDcAtVI8bUVYkibu
ck23hyPsZhJD8kF7yXzrKRDfUJsHjGciKzZGiGBmvDGUJDr5juoog+aoJCtq+p3x
bwu4vmW0tFfkAXaGOZ/p+OyUlyt/M4KXZK3uHyzpSIONl5jZs0kucCKIIk1orYJV
ZvRRwPaFmVJG4IhNQ8jaMDepVAycpi0HR7rc05vclbSkZtiYTxL4fkFqPKjOPzaK
eSU5fPCc3Sfj+KlL1sWDt0X9tw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:25 2026 by rpki-client