Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
File:                     SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json)
Hash identifier:          6S2u0Qfdb+gEdNdx6waXse1v5Nwzp9BIAnUIKyUpcUg=
Subject key identifier:   EA:7E:A5:D8:33:D1:10:85:95:FC:77:DA:3D:79:76:C9:E5:03:FB:CF
Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
Certificate issuer:       /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
Manifest number:          0732
Signing time:             Mon 22 Jun 2026 21:52:44 +0000
Manifest this update:     Mon 22 Jun 2026 21:52:43 +0000
Manifest next update:     Mon 29 Jun 2026 21:52:43 +0000
Files and hashes:         1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: yiDQDejqINDgN4Cm099ArRwWTPV+UI0kLa2THP41LXc=)
                          2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: XchKL5ppJdIsik49dTNke5KNQEJIg/c7B1xcdOcfVn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 21:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
        Validity
            Not Before: Jun 22 21:52:43 2026 GMT
            Not After : Jun 29 21:52:43 2026 GMT
        Subject: CN=6a39aeac-4cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:b3:09:3f:e8:2e:08:51:0b:fe:9b:f8:fb:
                    8d:ab:c1:ed:3f:50:cf:ca:56:ab:4a:2e:76:1b:86:
                    49:e3:b2:34:7a:9d:f7:29:6f:14:fa:c7:d4:5e:9f:
                    97:04:3b:3b:49:62:93:02:dc:7b:09:66:4d:62:e7:
                    41:22:b7:04:21:2f:fc:a4:c4:44:a4:48:e0:e3:42:
                    37:81:f1:33:bf:22:16:96:db:bd:e3:3b:7b:5f:be:
                    79:07:14:38:4a:f1:2b:04:d0:e3:d1:e2:1d:e3:85:
                    06:53:fb:b2:7c:c1:ba:a2:f6:9d:ff:1f:4d:2f:fa:
                    d1:0e:67:b5:97:1d:7b:fb:9c:55:3e:24:55:cf:ec:
                    56:2f:69:d1:22:78:88:7e:fc:c9:da:77:b4:fb:21:
                    39:39:0d:66:22:61:7e:dd:a8:b5:ad:05:93:5f:44:
                    27:fe:92:24:74:01:f0:f0:c5:63:c2:22:9d:ce:9f:
                    34:8a:0d:bd:36:04:ef:e7:20:cb:b6:77:f5:ad:e9:
                    23:ea:75:66:08:70:9e:82:64:dc:5a:33:ac:da:08:
                    c5:05:24:85:37:00:89:fe:9e:37:74:87:13:f9:a1:
                    26:c2:68:7a:f0:94:9b:c1:c2:ab:e1:5c:c0:66:cf:
                    eb:93:a2:ad:4c:93:0e:69:d9:c4:56:77:53:e3:f9:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:A5:D8:33:D1:10:85:95:FC:77:DA:3D:79:76:C9:E5:03:FB:CF
            X509v3 Authority Key Identifier:
                keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:88:12:10:e8:c2:5f:ea:e7:1a:e3:06:f0:16:d9:aa:9e:
         20:fa:b8:fa:78:a2:09:d0:7a:90:af:b7:30:92:f1:d5:d5:27:
         51:d9:e5:e8:d9:83:c3:76:18:e6:2b:b1:8a:2e:33:a6:17:bd:
         61:e7:b2:0f:96:36:da:9f:0a:46:ca:28:df:11:aa:18:31:4b:
         97:34:ae:74:87:69:45:c8:ad:63:59:f2:ce:3e:e6:16:d1:58:
         18:0a:55:b6:3a:95:c9:fb:b7:3b:de:55:a6:2e:6f:31:c3:f3:
         0a:69:ca:ab:d2:18:2f:25:66:6c:4b:fb:cd:47:76:75:51:6e:
         fe:60:f8:7c:62:13:34:7b:89:93:64:5b:0f:a4:2a:3c:5a:eb:
         d8:a6:12:f5:8e:43:b1:d1:56:fd:6a:95:2d:38:76:5c:de:ea:
         93:cf:f8:d3:29:6e:1f:4f:e2:32:1f:42:cd:fa:b8:d6:60:fb:
         08:69:d3:dc:f6:84:af:96:26:da:65:bc:b2:e4:c5:0e:4b:a1:
         b6:fc:86:0a:47:a5:28:70:7a:bc:91:b2:d5:32:42:53:94:e6:
         6a:50:08:f5:63:ba:a1:e3:8e:ac:36:17:dd:e1:a0:27:a0:f4:
         78:98:b7:b6:4f:a6:cb:ff:c7:fe:f1:46:96:05:b6:84:66:0a:
         c2:01:2d:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw
RTI4RDVBNDQwHhcNMjYwNjIyMjE1MjQzWhcNMjYwNjI5MjE1MjQzWjAYMRYwFAYD
VQQDEw02YTM5YWVhYy00Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshizCT/oLghRC/6b+PuNq8HtP1DPylarSi52G4ZJ47I0ep33KW8U+sfUXp+X
BDs7SWKTAtx7CWZNYudBIrcEIS/8pMREpEjg40I3gfEzvyIWltu94zt7X755BxQ4
SvErBNDj0eId44UGU/uyfMG6ovad/x9NL/rRDme1lx17+5xVPiRVz+xWL2nRIniI
fvzJ2ne0+yE5OQ1mImF+3ai1rQWTX0Qn/pIkdAHw8MVjwiKdzp80ig29NgTv5yDL
tnf1rekj6nVmCHCegmTcWjOs2gjFBSSFNwCJ/p43dIcT+aEmwmh68JSbwcKr4VzA
Zs/rk6KtTJMOadnEVndT4/mC/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOp+pdgz
0RCFlfx32j15dsnlA/vPMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG
NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ
R3lySEpWSWVUWmdPS05Xa1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXh2IEhDowl/q5xrjBvAW2aqeIPq4+niiCdB6kK+3MJLx1dUnUdnl6NmDw3YY
5iuxii4zphe9YeeyD5Y22p8KRsoo3xGqGDFLlzSudIdpRcitY1nyzj7mFtFYGApV
tjqVyfu3O95Vpi5vMcPzCmnKq9IYLyVmbEv7zUd2dVFu/mD4fGITNHuJk2RbD6Qq
PFrr2KYS9Y5DsdFW/WqVLTh2XN7qk8/40yluH0/iMh9Czfq41mD7CGnT3PaEr5Ym
2mW8suTFDkuhtvyGCkelKHB6vJGy1TJCU5TmalAI9WO6oeOOrDYX3eGgJ6D0eJi3
tk+my//H/vFGlgW2hGYKwgEtyw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:29 2026 by rpki-client