Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
File:                     R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json)
Hash identifier:          69LabGoJJ5FwzGDkr80GpKM04LNXnDh3+bJ9Qn2wwEo=
Subject key identifier:   9E:E7:F1:63:7B:35:B8:C8:48:24:4E:CC:0B:01:D1:A3:EB:21:2B:99
Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65
Certificate issuer:       /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
Manifest number:          B2
Signing time:             Mon 01 Jun 2026 07:56:29 +0000
Manifest this update:     Mon 01 Jun 2026 07:56:29 +0000
Manifest next update:     Mon 08 Jun 2026 07:56:29 +0000
Files and hashes:         1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: AfqmXOtzoZ9zoC9E8tBI2w/wxYMYZ4O3SnT5F1h7OW4=)
                          2: C92D041297BE11F08D37F648C4F9AE02.roa (hash: 1yGUy+FEcu5CKxFiOOSQ5RewENgHpvN09c5O9/FyM64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
        Validity
            Not Before: Jun  1 07:56:29 2026 GMT
            Not After : Jun  8 07:56:29 2026 GMT
        Subject: CN=6a1d3b2d-497e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:7d:a5:6a:26:71:64:b3:d5:50:bd:8e:d0:
                    c6:3c:19:1f:e1:b9:81:cd:0f:09:83:0a:07:09:67:
                    9e:22:6e:7c:eb:3f:ae:30:83:f6:61:f6:59:4f:02:
                    40:91:53:a4:dc:45:d4:09:1b:07:f4:be:24:70:4c:
                    ad:4f:7a:0d:bf:eb:f4:7c:d6:61:69:dc:21:13:ed:
                    ab:26:69:ee:a0:b3:33:b8:3c:9c:6b:a7:ef:53:85:
                    9e:21:af:1b:ef:76:0c:85:4c:d9:f1:7f:0c:54:10:
                    e4:fe:e1:db:b7:98:b4:e4:b8:7d:ee:1b:62:25:e8:
                    19:31:58:7f:59:e9:57:70:77:1c:5c:fd:f4:63:f3:
                    a9:55:18:8b:2c:d1:59:fd:07:6b:c9:48:65:16:f6:
                    d9:fa:d2:7b:b1:ea:d7:63:4b:03:2f:e0:39:13:c1:
                    97:50:ee:ca:34:b1:94:95:9b:aa:81:92:8f:cd:81:
                    62:89:45:70:7b:bd:b3:d7:75:d9:93:cc:ea:ba:8d:
                    45:31:d8:53:43:c5:4d:f4:f0:b7:b0:aa:04:8d:6c:
                    ae:00:3a:3e:10:c6:de:72:5e:ef:91:7c:6f:ec:26:
                    08:01:f1:26:f0:dd:0f:84:71:c1:7a:68:af:73:b7:
                    8d:1d:ee:3d:9b:fc:98:40:92:48:94:3f:3b:15:1d:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E7:F1:63:7B:35:B8:C8:48:24:4E:CC:0B:01:D1:A3:EB:21:2B:99
            X509v3 Authority Key Identifier:
                keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:5e:6f:80:f0:e2:1e:eb:0a:41:59:dc:a6:0d:b3:49:68:
         de:4b:0e:63:24:6f:a5:1e:77:4a:f2:57:c1:b0:cb:a3:97:32:
         77:78:22:55:b9:6f:81:80:4e:39:a4:3a:b9:14:ab:5f:86:68:
         7b:90:4b:af:41:45:b9:2a:a3:3a:ce:01:24:d7:0a:23:66:fb:
         57:33:f3:79:6d:08:98:40:37:cf:b4:3f:9c:89:e5:ae:d5:61:
         e5:c1:3b:9f:2c:ba:04:74:46:2c:95:32:84:a0:f9:d4:b5:91:
         a6:ae:bf:43:c2:d0:53:77:76:dc:a9:a7:ff:34:6d:dc:bd:0c:
         8b:f3:90:97:19:5c:ab:08:d6:f5:99:dc:e6:7d:95:fd:a6:b6:
         c2:c6:37:8d:cc:55:4e:43:7f:2f:f9:21:04:51:6e:b6:98:69:
         a0:8f:25:8c:3d:c5:43:da:bd:e9:00:2f:3c:10:ad:e3:ad:bc:
         d7:bb:7f:51:eb:a7:8d:84:72:e7:01:28:72:df:7c:ba:c9:40:
         1a:8f:36:df:b9:30:b5:95:84:3d:79:0e:6b:c2:e9:13:50:04:
         bf:5f:a8:d0:60:eb:94:93:cb:89:6c:61:ed:29:80:80:b7:6b:
         26:b8:52:03:a9:36:6b:ed:45:7f:29:58:b1:db:21:5f:5a:cf:
         28:d7:6f:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYyNzkxMTAvBgNVBAUTKDQ3NEJGNzM1RUQyOEYzNTE4QkNFMEFDNDYyOTU4QkVD
NTgyQ0Q3NjUwHhcNMjYwNjAxMDc1NjI5WhcNMjYwNjA4MDc1NjI5WjAYMRYwFAYD
VQQDEw02YTFkM2IyZC00OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDV9pWomcWSz1VC9jtDGPBkf4bmBzQ8JgwoHCWeeIm586z+uMIP2YfZZTwJA
kVOk3EXUCRsH9L4kcEytT3oNv+v0fNZhadwhE+2rJmnuoLMzuDyca6fvU4WeIa8b
73YMhUzZ8X8MVBDk/uHbt5i05Lh97htiJegZMVh/WelXcHccXP30Y/OpVRiLLNFZ
/QdryUhlFvbZ+tJ7serXY0sDL+A5E8GXUO7KNLGUlZuqgZKPzYFiiUVwe72z13XZ
k8zquo1FMdhTQ8VN9PC3sKoEjWyuADo+EMbecl7vkXxv7CYIAfEm8N0PhHHBemiv
c7eNHe49m/yYQJJIlD87FR2RawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7n8WN7
NbjISCROzAsB0aPrISuZMB8GA1UdIwQYMBaAFEdL9zXtKPNRi84KxGKVi+xYLNdl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI3OS8zOEIyQzdCQzU4
Q0QxMUYwQUQxMDA4NzdDNEY5QUUwMi9SMHYzTmUwbzgxR0x6Z3JFWXBXTDdGZ3Mx
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1IwdjNOZTBvODFHTHpnckVZcFdMN0ZnczEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjI3OS8zOEIyQzdCQzU4Q0QxMUYwQUQxMDA4NzdDNEY5QUUwMi9SMHYzTmUwbzgx
R0x6Z3JFWXBXTDdGZ3MxMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXeNeb4Dw4h7rCkFZ3KYNs0lo3ksOYyRvpR53SvJXwbDLo5cyd3giVblvgYBO
OaQ6uRSrX4Zoe5BLr0FFuSqjOs4BJNcKI2b7VzPzeW0ImEA3z7Q/nInlrtVh5cE7
nyy6BHRGLJUyhKD51LWRpq6/Q8LQU3d23Kmn/zRt3L0Mi/OQlxlcqwjW9Znc5n2V
/aa2wsY3jcxVTkN/L/khBFFutphpoI8ljD3FQ9q96QAvPBCt462817t/UeunjYRy
5wEoct98uslAGo8237kwtZWEPXkOa8LpE1AEv1+o0GDrlJPLiWxh7SmAgLdrJrhS
A6k2a+1FfylYsdshX1rPKNdvog==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:34 2026 by rpki-client