Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          wr2hOBUE+PrRpgx+MlGFTp4P1Xhlhwz3jJIW4RN/OJc=
Subject key identifier:   FB:DA:59:D7:F7:CF:9F:F1:18:53:FB:0B:A7:1F:34:3E:64:F5:A0:79
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       11E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          11DD
Signing time:             Mon 22 Jun 2026 17:08:33 +0000
Manifest this update:     Mon 22 Jun 2026 17:08:32 +0000
Manifest next update:     Mon 29 Jun 2026 17:08:32 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: UXwea0MSK5MYEBSD6b5QMjR3vYwui/7eSYpHEd8fkYk=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4585 (0x11e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Jun 22 17:08:32 2026 GMT
            Not After : Jun 29 17:08:32 2026 GMT
        Subject: CN=6a396c11-d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:3f:a3:60:96:a1:3d:ff:6c:1e:7f:1c:38:
                    29:6d:4e:a2:65:4c:63:29:4c:60:8d:09:e7:35:d1:
                    13:96:b9:fd:fc:93:12:4d:28:12:b2:fc:68:af:ff:
                    0c:98:4a:9a:e0:7e:2e:f9:56:c6:93:23:99:6c:32:
                    f9:cc:10:0c:12:54:81:2f:46:ec:26:ec:ca:20:61:
                    57:64:1c:1c:67:67:b9:e4:2b:b4:a0:82:f9:d0:d6:
                    f6:e3:32:7f:33:45:e6:08:38:59:e9:06:30:d6:18:
                    b9:49:97:67:01:82:fb:bc:e4:92:d6:76:d6:b2:a0:
                    04:62:d4:be:b6:e7:2f:fa:5e:73:13:7c:b9:99:63:
                    ef:ef:57:6a:66:5f:66:99:65:fe:4a:5e:f5:6c:2a:
                    37:89:13:ea:5d:1c:63:f1:b1:86:93:d4:cc:5f:33:
                    c3:0c:b3:44:7e:c0:66:a1:81:18:41:04:19:9b:c5:
                    bf:71:6b:92:28:f7:d4:a5:97:62:5b:5b:e9:82:4f:
                    7d:8d:b8:9e:88:cb:9c:1e:2d:cd:70:61:10:41:2b:
                    ea:b4:03:2b:de:43:0e:2a:61:56:63:79:31:d9:aa:
                    b9:fa:3b:13:1b:5c:09:34:f1:9a:20:61:c0:a9:f7:
                    da:40:a3:32:5e:13:0c:ec:64:88:48:28:f4:b1:5c:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DA:59:D7:F7:CF:9F:F1:18:53:FB:0B:A7:1F:34:3E:64:F5:A0:79
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:f4:fe:20:f2:1d:b1:e7:3c:be:4c:cf:6d:2f:72:e1:c2:
         64:7e:b6:2f:da:e5:2c:dc:5c:50:d8:e2:71:cc:60:11:b5:44:
         5d:69:ce:4e:10:af:39:ab:62:ac:0e:93:78:0c:c9:e2:36:bc:
         df:fc:f4:c5:07:cc:b3:a5:44:1c:bd:5b:3d:a1:de:55:2d:ff:
         02:a0:f8:d5:c3:ef:57:d9:3a:16:cb:1f:88:bb:b1:5d:e9:1d:
         4a:c0:d2:d9:86:98:5d:e4:bf:2b:66:2b:60:db:b1:22:c1:8d:
         7c:1a:55:0e:8d:82:b1:f2:f6:3c:77:97:57:f3:50:e7:51:c8:
         e3:cc:0f:3f:11:14:99:d3:05:b4:a1:77:43:5e:e6:66:6a:a7:
         f7:b6:98:ae:4c:59:46:14:51:8e:87:bf:d1:68:a0:36:c9:00:
         42:b6:64:d8:de:9b:7f:57:16:fa:b8:e5:74:ba:90:28:f2:d3:
         22:64:24:b8:6f:60:a2:ae:f1:6d:7b:22:95:9a:43:52:37:80:
         48:f9:3f:b3:66:bc:70:27:57:86:93:8f:d6:67:3e:14:d2:0d:
         d5:55:98:2b:3a:a2:52:d7:e2:5e:ca:bc:52:0b:d5:5a:d9:82:
         21:d8:64:54:f8:f7:f7:32:fe:e1:d7:c6:fe:75:ee:fb:24:1e:
         28:30:2b:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4
RjI4MjA0OEIwHhcNMjYwNjIyMTcwODMyWhcNMjYwNjI5MTcwODMyWjAYMRYwFAYD
VQQDEw02YTM5NmMxMS1kOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVQ/o2CWoT3/bB5/HDgpbU6iZUxjKUxgjQnnNdETlrn9/JMSTSgSsvxor/8M
mEqa4H4u+VbGkyOZbDL5zBAMElSBL0bsJuzKIGFXZBwcZ2e55Cu0oIL50Nb24zJ/
M0XmCDhZ6QYw1hi5SZdnAYL7vOSS1nbWsqAEYtS+tucv+l5zE3y5mWPv71dqZl9m
mWX+Sl71bCo3iRPqXRxj8bGGk9TMXzPDDLNEfsBmoYEYQQQZm8W/cWuSKPfUpZdi
W1vpgk99jbieiMucHi3NcGEQQSvqtAMr3kMOKmFWY3kx2aq5+jsTG1wJNPGaIGHA
qffaQKMyXhMM7GSISCj0sVycfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvaWdf3
z5/xGFP7C6cfND5k9aB5MB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz
NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy
OElncDNGTEM3VHFQS0NCSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArDL0/iDyHbHnPL5Mz20vcuHCZH62L9rlLNxcUNjiccxgEbVEXWnOThCvOati
rA6TeAzJ4ja83/z0xQfMs6VEHL1bPaHeVS3/AqD41cPvV9k6FssfiLuxXekdSsDS
2YaYXeS/K2YrYNuxIsGNfBpVDo2CsfL2PHeXV/NQ51HI48wPPxEUmdMFtKF3Q17m
Zmqn97aYrkxZRhRRjoe/0WigNskAQrZk2N6bf1cW+rjldLqQKPLTImQkuG9goq7x
bXsilZpDUjeASPk/s2a8cCdXhpOP1mc+FNIN1VWYKzqiUtfiXsq8UgvVWtmCIdhk
VPj39zL+4dfG/nXu+yQeKDArgw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:31 2026 by rpki-client