Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File:                     izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier:          rmQaXf8AbJp69Mc+E3vOm11H/Vj0fbGvvubTG3eoMVA=
Subject key identifier:   E8:5E:8A:B7:C2:A3:F8:72:08:E3:69:B1:1B:22:57:82:C3:9D:D6:AE
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer:       /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number:          010C
Signing time:             Mon 01 Jun 2026 06:48:02 +0000
Manifest this update:     Mon 01 Jun 2026 06:48:02 +0000
Manifest next update:     Mon 08 Jun 2026 06:48:02 +0000
Files and hashes:         1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: FNaxmCTgeAbA844r/aYCIkrqu9sWPVnScA/ryBY56YM=)
                          2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: 9RAPwgPmDHz4AiSmQ6kh7IGZ3ghd3v7puVNtDWxpvZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
                          rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
        Validity
            Not Before: Jun  1 06:48:02 2026 GMT
            Not After : Jun  8 06:48:02 2026 GMT
        Subject: CN=6a1d2b22-6d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:26:54:1b:63:a7:1e:49:3f:8c:d3:38:a5:
                    53:6b:95:e3:7b:cb:86:32:3a:73:ef:48:74:c6:47:
                    53:29:4a:7b:72:06:1c:c5:a5:b8:ec:e9:4e:e4:27:
                    06:ab:c6:1a:88:87:f6:85:a1:f5:22:91:c8:3c:0b:
                    1e:6b:e7:59:e8:35:08:2f:f5:9c:9e:66:84:1e:a1:
                    a4:55:ab:bc:f8:e4:85:df:99:22:cb:68:de:25:28:
                    a6:73:68:b2:b9:f4:f5:75:46:99:b1:f9:50:3d:f0:
                    e7:54:83:05:da:9d:62:75:0c:48:7c:0a:a1:e1:c4:
                    c9:15:d3:de:9e:5e:24:d5:e5:f0:fe:1b:83:ed:f0:
                    db:89:da:91:f7:71:48:e1:4d:fe:d3:0e:d2:77:29:
                    1a:17:06:5b:ab:c2:df:43:47:34:ad:bd:09:39:62:
                    1a:1b:d5:c0:99:31:bf:cc:79:ba:a1:f8:71:ac:85:
                    0a:e3:cb:13:ce:00:0d:cf:04:e6:80:ef:25:42:c0:
                    26:c0:6b:cc:22:a5:db:e4:ea:da:7c:05:7f:17:71:
                    fc:1e:4d:f1:39:7e:25:68:c3:36:18:7b:5f:f5:ce:
                    07:95:86:97:fc:d6:2a:0b:25:af:83:b3:8e:8b:f0:
                    68:34:c8:66:b7:aa:b0:43:92:9f:65:dc:95:db:8a:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:8A:B7:C2:A3:F8:72:08:E3:69:B1:1B:22:57:82:C3:9D:D6:AE
            X509v3 Authority Key Identifier:
                keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:15:59:09:74:bc:65:23:e8:34:2d:56:dd:95:68:67:37:
         57:76:9c:ba:53:2f:14:19:37:22:ce:79:42:03:6c:fe:88:37:
         bc:c9:e8:ae:60:7c:dd:64:41:17:19:6c:cc:dd:21:52:c2:6e:
         75:f4:6e:20:c0:03:bb:c7:82:bc:9f:16:04:67:c3:7c:cf:32:
         b6:d5:a7:dd:d7:f9:70:9a:0e:9b:5a:3b:6c:36:0f:90:2b:ec:
         c5:f4:db:3b:6d:7a:58:b4:9c:45:df:f5:ae:d9:fd:a2:9b:27:
         df:0b:7a:9c:7a:3e:74:72:56:bc:fd:16:e1:1e:8e:1c:1d:04:
         cf:c3:9c:63:60:7c:97:81:fd:3f:9e:de:49:cb:4a:e1:e5:4f:
         a2:42:0a:1e:61:15:ba:8c:8d:e5:e9:cd:a0:89:1a:a7:c3:9d:
         98:d4:80:5e:fa:6d:d3:42:9f:a6:0a:4e:7d:af:d4:e2:23:ae:
         0d:de:bf:03:0d:d1:c4:3e:4f:32:59:85:51:d3:84:da:6e:ff:
         30:70:65:ec:c8:75:8b:7c:19:41:f5:02:97:76:10:bc:4b:4c:
         3f:70:fa:b6:41:f2:35:c2:04:29:32:76:ec:3a:81:06:99:40:
         a8:5a:ee:65:9e:d3:7d:7b:28:96:1d:a3:01:7b:c7:85:24:6b:
         da:b9:ba:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4NTQxMTAvBgNVBAUTKDhCMzQ3MUI5MEI3QTVCQzc2Q0UzRkMwOUFDQUM4OTI4
RUI0RDgxNzkwHhcNMjYwNjAxMDY0ODAyWhcNMjYwNjA4MDY0ODAyWjAYMRYwFAYD
VQQDEw02YTFkMmIyMi02ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvN0mVBtjpx5JP4zTOKVTa5Xje8uGMjpz70h0xkdTKUp7cgYcxaW47OlO5CcG
q8YaiIf2haH1IpHIPAsea+dZ6DUIL/WcnmaEHqGkVau8+OSF35kiy2jeJSimc2iy
ufT1dUaZsflQPfDnVIMF2p1idQxIfAqh4cTJFdPenl4k1eXw/huD7fDbidqR93FI
4U3+0w7SdykaFwZbq8LfQ0c0rb0JOWIaG9XAmTG/zHm6ofhxrIUK48sTzgANzwTm
gO8lQsAmwGvMIqXb5OrafAV/F3H8Hk3xOX4laMM2GHtf9c4HlYaX/NYqCyWvg7OO
i/BoNMhmt6qwQ5KfZdyV24qhewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOheirfC
o/hyCONpsRsiV4LDndauMB8GA1UdIwQYMBaAFIs0cbkLelvHbOP8CaysiSjrTYF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ENTNFMUI2RUNC
MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4ZHM0X3dKckt5SktPdE5n
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njg1NC9ENTNFMUI2RUNCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4
ZHM0X3dKckt5SktPdE5nWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhLoVWQl0vGUj6DQtVt2VaGc3V3aculMvFBk3Is55QgNs/og3vMnormB83WRB
FxlszN0hUsJudfRuIMADu8eCvJ8WBGfDfM8yttWn3df5cJoOm1o7bDYPkCvsxfTb
O216WLScRd/1rtn9opsn3wt6nHo+dHJWvP0W4R6OHB0Ez8OcY2B8l4H9P57eSctK
4eVPokIKHmEVuoyN5enNoIkap8OdmNSAXvpt00KfpgpOfa/U4iOuDd6/Aw3RxD5P
MlmFUdOE2m7/MHBl7Mh1i3wZQfUCl3YQvEtMP3D6tkHyNcIEKTJ27DqBBplAqFru
ZZ7TfXsolh2jAXvHhSRr2rm6Hw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client