Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
File:                     SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json)
Hash identifier:          Tbd0ovU9tCU2WZmEHUcxW9PASKgdd3IxKvPDOXKsQgI=
Subject key identifier:   4D:F6:85:E7:6A:21:B8:9C:A7:AE:C2:6C:5E:FD:3B:88:E0:2C:1D:32
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Certificate issuer:       /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
Manifest number:          26
Signing time:             Fri 05 Jun 2026 09:15:10 +0000
Manifest this update:     Fri 05 Jun 2026 09:15:10 +0000
Manifest next update:     Fri 12 Jun 2026 09:15:10 +0000
Files and hashes:         1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: KC1ywsW0M6FbQsm2mdvE6bCLWTsCLLVHavaQAJFQeXg=)
                          2: 712388E4280111F1A83DAB9AB3833773.roa (hash: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
                          rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
        Validity
            Not Before: Jun  5 09:15:10 2026 GMT
            Not After : Jun 12 09:15:10 2026 GMT
        Subject: CN=6a22939e-3737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:e1:83:d1:4a:15:28:ec:e6:4f:05:5f:65:
                    73:b4:5c:1a:f3:d8:17:e8:fe:41:a4:93:67:63:8a:
                    04:a3:29:b0:8b:fe:5b:6f:a9:0b:c4:e6:14:46:e6:
                    82:64:c5:a2:74:55:3f:17:52:92:f4:2f:57:ee:57:
                    d7:6a:59:ca:6e:07:a9:e1:21:3b:9a:e5:96:3b:10:
                    ca:3c:dc:a8:80:21:7f:e4:ac:fd:c2:84:5f:68:c0:
                    24:e4:59:61:f7:19:49:c8:de:9c:a6:13:24:97:e1:
                    0f:dc:09:04:fe:51:ad:d3:47:b7:b9:4e:d2:88:0a:
                    11:7d:07:f7:84:77:fa:98:46:2e:13:83:2c:b9:75:
                    3e:ff:d5:86:8a:af:47:01:fb:17:ee:81:28:fa:e9:
                    5d:71:42:55:b5:23:53:2e:6c:19:de:8d:83:ea:23:
                    8a:e2:e1:b5:0e:ee:17:25:4d:6c:7f:43:f0:5a:f1:
                    36:9d:a4:bd:89:5d:1a:e0:4f:70:73:fd:37:b1:f2:
                    f5:73:dd:90:e5:da:51:3b:08:77:c4:d8:d4:35:70:
                    51:25:1f:dd:7d:8d:b4:aa:ed:c2:81:22:ad:22:4a:
                    19:bf:ce:b6:92:f0:77:e6:98:67:24:0a:cb:82:ed:
                    5a:ea:b4:a7:f2:64:bd:c7:a3:ef:bd:54:ee:38:0a:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:85:E7:6A:21:B8:9C:A7:AE:C2:6C:5E:FD:3B:88:E0:2C:1D:32
            X509v3 Authority Key Identifier:
                keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:47:90:a5:3b:78:cb:f7:78:ce:2d:77:39:90:ea:17:79:
         69:78:04:ea:ce:56:19:a2:9f:f3:47:76:03:e9:96:43:7e:30:
         4f:4c:0d:ce:6d:7d:93:27:1a:1f:ce:81:d1:4c:7a:fe:48:a5:
         ea:8f:8c:16:e7:8d:0a:02:76:6a:12:12:16:4b:9b:00:9a:3e:
         69:b6:e7:fd:4f:dc:25:2a:02:9a:96:86:6c:83:6a:57:b3:f1:
         31:b5:c4:a8:98:58:91:04:75:a7:35:19:d2:38:ad:ec:f2:e5:
         89:10:e4:55:d2:3b:98:4f:05:7e:4e:a0:ee:42:d2:71:34:2e:
         dd:78:27:08:19:15:03:7b:17:56:d2:8a:60:01:13:d2:60:8e:
         32:f3:3a:b7:09:2d:e5:c7:34:0b:bc:51:a3:dc:81:d8:10:78:
         53:72:fd:a8:16:fc:e3:48:ce:37:3f:d5:96:e9:d3:c6:e0:9e:
         ed:c3:cb:fc:09:a0:d6:7a:90:4c:1e:08:11:61:50:15:e6:44:
         55:13:76:28:3b:2a:bf:8e:6c:81:bb:15:54:39:73:50:b8:6c:
         9d:34:7a:ca:90:32:89:9b:ec:07:a9:c3:f1:a2:4d:be:a9:b7:
         28:8e:69:6f:18:71:40:37:5b:cb:25:fe:fc:94:0f:14:be:71:
         c7:9b:92:65
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2
QkVGQTM0MTAeFw0yNjA2MDUwOTE1MTBaFw0yNjA2MTIwOTE1MTBaMBgxFjAUBgNV
BAMTDTZhMjI5MzllLTM3MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8/eGD0UoVKOzmTwVfZXO0XBrz2Bfo/kGkk2djigSjKbCL/ltvqQvE5hRG5oJk
xaJ0VT8XUpL0L1fuV9dqWcpuB6nhITua5ZY7EMo83KiAIX/krP3ChF9owCTkWWH3
GUnI3pymEySX4Q/cCQT+Ua3TR7e5TtKIChF9B/eEd/qYRi4Tgyy5dT7/1YaKr0cB
+xfugSj66V1xQlW1I1MubBnejYPqI4ri4bUO7hclTWx/Q/Ba8TadpL2JXRrgT3Bz
/Tex8vVz3ZDl2lE7CHfE2NQ1cFElH919jbSq7cKBIq0iShm/zraS8HfmmGckCsuC
7VrqtKfyZL3Ho++9VO44CuBrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTfaF52oh
uJynrsJsXv07iOAsHTIwHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw
MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ
QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB5o0eQpTt4y/d4zi13OZDqF3lpeATqzlYZop/zR3YD6ZZDfjBPTA3ObX2TJxof
zoHRTHr+SKXqj4wW540KAnZqEhIWS5sAmj5ptuf9T9wlKgKaloZsg2pXs/ExtcSo
mFiRBHWnNRnSOK3s8uWJEORV0juYTwV+TqDuQtJxNC7deCcIGRUDexdW0opgARPS
YI4y8zq3CS3lxzQLvFGj3IHYEHhTcv2oFvzjSM43P9WW6dPG4J7tw8v8CaDWepBM
HggRYVAV5kRVE3YoOyq/jmyBuxVUOXNQuGydNHrKkDKJm+wHqcPxok2+qbcojmlv
GHFAN1vLJf78lA8UvnHHm5Jl
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:23 2026 by rpki-client