Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
File:                     q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft (raw, json)
Hash identifier:          2Q3TwYq8orR5e1BhfVMPWTsfAEYvUPIzN73Y9JhfM0M=
Subject key identifier:   88:12:31:55:3E:6E:77:A0:F6:C5:76:06:DD:E4:B6:31:D9:ED:C6:2E
Authority key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Certificate issuer:       /CN=A914E1BD/serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
Manifest number:          3F
Signing time:             Tue 19 May 2026 08:22:25 +0000
Manifest this update:     Tue 19 May 2026 08:22:25 +0000
Manifest next update:     Tue 26 May 2026 08:22:25 +0000
Files and hashes:         1: q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl (hash: vTVzZUUFzwDuVytaWs2Y6vUbzXOm4+CVBv5sZLVlbuA=)
                          2: FC4E4156FB3411F0841666933D6F56BC.roa (hash: EB7Zu5vP9pgptqSutxDmsy3gmbeSeQdiZ2X1SMg8Qf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
                          rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
        Validity
            Not Before: May 19 08:22:25 2026 GMT
            Not After : May 26 08:22:25 2026 GMT
        Subject: CN=6a0c1dc1-b444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:a2:84:71:f8:1d:97:14:eb:03:e0:20:25:
                    7c:6c:01:24:ad:7e:c8:e1:b9:84:c6:1a:3d:4a:67:
                    d3:4f:9f:e4:5c:67:6b:5c:1d:28:59:53:54:61:fe:
                    a4:93:97:83:0d:04:d7:32:85:c1:e5:74:42:01:f6:
                    13:f2:aa:4b:2f:b3:63:b4:56:bf:e8:7d:de:96:52:
                    66:b7:4d:70:90:fa:ac:a9:9a:77:e4:b0:e0:7c:22:
                    79:b6:c0:56:9d:d5:1f:7f:9c:a8:40:d2:68:34:1c:
                    b2:be:c7:cf:16:ba:50:ce:4b:2c:fb:46:86:b4:02:
                    e8:27:8f:f5:2a:46:eb:cb:25:e8:1a:60:a7:fd:c2:
                    ff:c2:39:76:61:9d:e2:c1:66:0d:2d:a8:60:93:2d:
                    43:68:da:bf:4c:c7:6e:a2:e6:e7:a1:f4:4c:18:e6:
                    9b:52:96:a8:99:48:e5:46:e7:07:49:86:74:02:ea:
                    31:56:f6:cb:0a:cf:0d:4f:98:7d:60:82:8c:03:21:
                    74:6f:a7:a4:b5:32:35:2a:a1:71:03:18:63:a6:e7:
                    9b:5c:e0:5f:7f:08:32:87:4e:cd:2d:3f:d0:27:a9:
                    74:ca:f0:2d:f6:b4:7d:1d:73:96:92:cc:3e:c2:c3:
                    4d:e4:2e:4f:76:4c:35:d6:a9:7f:72:93:43:f8:f0:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:31:55:3E:6E:77:A0:F6:C5:76:06:DD:E4:B6:31:D9:ED:C6:2E
            X509v3 Authority Key Identifier:
                keyid:AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:dd:5b:cd:a8:14:e8:29:95:d9:ff:d7:ad:15:38:d6:cc:
         fa:ad:49:46:25:d6:94:64:4c:9e:c2:57:bb:6d:92:4f:2f:73:
         d5:18:22:21:99:1d:c8:bb:7b:0e:62:34:5f:32:e2:fe:5c:7c:
         53:e9:2a:0e:49:ab:f0:70:c4:39:a0:4c:80:d7:31:e4:e5:7f:
         eb:97:af:c0:5a:68:4b:95:9e:8c:2b:9d:71:22:19:25:f6:79:
         1e:52:54:1f:3b:7a:32:02:1c:61:99:71:c1:54:da:16:b3:33:
         b4:59:7d:ff:8f:8f:a6:2c:41:45:ad:ae:e2:c1:08:e0:b4:ad:
         b3:8a:05:bb:10:d0:43:fa:f3:3e:df:06:02:e4:ca:69:f1:56:
         c9:28:1c:d4:d1:f6:ab:08:5b:bf:67:88:69:b4:2f:1c:86:13:
         e3:69:d8:09:23:e9:9c:9a:e2:d2:c0:6c:b7:01:95:67:59:6d:
         08:5e:87:82:63:8c:3b:49:57:07:50:fa:92:a2:17:7d:2d:a5:
         e6:f9:90:45:71:10:12:38:bb:68:6d:16:91:07:c5:76:f5:f0:
         02:01:08:8d:d9:2f:b4:45:9d:ea:49:9e:61:bd:18:21:92:4b:
         96:8c:06:4c:a5:dc:e7:ee:96:e9:65:04:f9:f0:a7:11:ed:e7:
         6f:04:a2:3c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTFCRDExMC8GA1UEBRMoQUJBMjZDN0I3NTAxNTU5QUM0MTA5QjhGNUFGRjJERjQz
MzcxNTNGQzAeFw0yNjA1MTkwODIyMjVaFw0yNjA1MjYwODIyMjVaMBgxFjAUBgNV
BAMTDTZhMGMxZGMxLWI0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1/KKEcfgdlxTrA+AgJXxsASStfsjhuYTGGj1KZ9NPn+RcZ2tcHShZU1Rh/qST
l4MNBNcyhcHldEIB9hPyqksvs2O0Vr/ofd6WUma3TXCQ+qypmnfksOB8Inm2wFad
1R9/nKhA0mg0HLK+x88WulDOSyz7Roa0Augnj/UqRuvLJegaYKf9wv/COXZhneLB
Zg0tqGCTLUNo2r9Mx26i5ueh9EwY5ptSlqiZSOVG5wdJhnQC6jFW9ssKzw1PmH1g
gowDIXRvp6S1MjUqoXEDGGOm55tc4F9/CDKHTs0tP9AnqXTK8C32tH0dc5aSzD7C
w03kLk92TDXWqX9yk0P48IIVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiBIxVT5u
d6D2xXYG3eS2Mdntxi4wHwYDVR0jBBgwFoAUq6Jse3UBVZrEEJuPWv8t9DNxU/ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUJELzY0NjhGREEwRkIx
MDExRjA5NDdEQjg1Njc0NkY1NkJDL3E2SnNlM1VCVlpyRUVKdVBXdjh0OUROeFVf
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTZKc2UzVUJWWnJFRUp1UFd2OHQ5RE54VV93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
MUJELzY0NjhGREEwRkIxMDExRjA5NDdEQjg1Njc0NkY1NkJDL3E2SnNlM1VCVlpy
RUVKdVBXdjh0OUROeFVfdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBItN1bzagU6CmV2f/XrRU41sz6rUlGJdaUZEyewle7bZJPL3PVGCIhmR3Iu3sO
YjRfMuL+XHxT6SoOSavwcMQ5oEyA1zHk5X/rl6/AWmhLlZ6MK51xIhkl9nkeUlQf
O3oyAhxhmXHBVNoWszO0WX3/j4+mLEFFra7iwQjgtK2zigW7ENBD+vM+3wYC5Mpp
8VbJKBzU0farCFu/Z4hptC8chhPjadgJI+mcmuLSwGy3AZVnWW0IXoeCY4w7SVcH
UPqSohd9LaXm+ZBFcRASOLtobRaRB8V29fACAQiN2S+0RZ3qSZ5hvRghkkuWjAZM
pdzn7pbpZQT58KcR7edvBKI8
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:53 2026 by rpki-client