Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File:                     SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier:          xStlrdJcGZLqqorJfsFJCGCrPsY0eDadQLsZ8rIcFEQ=
Subject key identifier:   7F:CF:DF:D1:1F:2E:FF:B6:81:E3:16:C4:0F:AA:A7:28:B2:A9:B6:2B
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer:       /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number:          0263
Signing time:             Tue 23 Jun 2026 02:18:00 +0000
Manifest this update:     Tue 23 Jun 2026 02:17:59 +0000
Manifest next update:     Tue 30 Jun 2026 02:17:59 +0000
Files and hashes:         1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: wbsBK+PSGc5lb2t0/M6svdaQT+tmzySAoj22gqNXsTw=)
                          2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
                          rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
        Validity
            Not Before: Jun 23 02:17:59 2026 GMT
            Not After : Jun 30 02:17:59 2026 GMT
        Subject: CN=6a39ecd8-fb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:15:73:59:02:94:2c:2e:81:22:6f:03:6e:
                    77:6b:30:9d:44:d2:90:03:4e:ce:4a:f3:62:e7:f1:
                    0f:24:24:db:d5:07:5a:a7:c6:5c:dc:bd:1a:fe:55:
                    9e:e7:27:23:03:96:cd:b9:c8:84:d1:a7:94:56:4a:
                    b5:db:fd:25:48:92:82:c5:b8:77:3c:b4:8e:b7:a9:
                    b6:86:4c:72:1d:8f:19:4c:f2:e3:cf:0e:41:03:c8:
                    3d:3c:e9:2a:04:0a:f0:fd:bf:88:48:e5:52:45:92:
                    f8:7f:93:58:4d:fa:2c:73:2b:7b:aa:f4:9c:25:b7:
                    e0:89:8f:5c:2d:4c:e9:6c:50:8f:21:20:cc:c1:0f:
                    27:1f:02:70:31:e8:33:8d:6f:95:ee:dc:1c:1a:12:
                    7b:c6:16:dd:da:c5:90:4b:21:15:2c:be:9d:6f:40:
                    d1:5e:ee:e7:2c:7d:4c:2d:12:4d:28:a7:a0:d6:80:
                    7a:ec:09:8d:7c:07:4a:86:7d:c7:51:88:55:5d:92:
                    bb:eb:07:a0:dc:4d:ac:bd:02:8b:76:f3:95:21:77:
                    be:23:70:e1:43:25:bd:07:5f:b7:fa:7a:31:64:16:
                    a5:b1:b6:bb:45:87:f8:12:bf:04:f5:72:fe:17:07:
                    2b:bb:18:3e:b2:ea:3c:d8:d4:5c:9f:64:63:c1:56:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:DF:D1:1F:2E:FF:B6:81:E3:16:C4:0F:AA:A7:28:B2:A9:B6:2B
            X509v3 Authority Key Identifier:
                keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:d8:45:04:5b:34:78:84:61:7d:05:ca:b6:fc:09:d5:24:
         63:1d:b3:18:9c:db:87:4f:ab:b6:04:44:51:d1:b5:50:6e:f8:
         70:80:86:e3:2d:de:1f:96:08:e8:32:37:f9:22:d5:11:27:0b:
         96:10:4d:a3:2f:9f:57:7c:67:58:b9:82:bf:8b:10:77:78:fa:
         a2:51:50:b1:f2:9e:3c:7b:d4:7b:9f:80:c5:dc:37:33:99:98:
         b4:11:88:2b:c3:8a:1e:4e:c2:1f:13:76:a5:0d:84:3a:61:15:
         2a:f2:3d:9d:5d:dd:9f:a7:67:c9:d9:fd:61:3e:b5:a7:6d:6b:
         80:09:7b:07:5c:a5:2c:4c:d2:2c:c0:3a:12:f7:f0:45:9f:a1:
         e0:97:05:d6:72:f2:99:97:0f:9c:3a:4e:a2:c2:01:bb:f7:d4:
         4e:f6:40:ef:ee:61:8c:f5:ed:72:a4:1c:51:c3:77:35:8c:db:
         09:ab:67:6e:75:0d:95:4f:46:46:70:e5:fd:9c:56:12:c2:e4:
         d0:e3:fb:92:2e:7c:c7:05:3e:7c:e0:82:8a:53:72:d1:45:2c:
         3e:21:2e:0c:dc:c2:8e:c4:30:32:24:74:7e:69:29:5a:3b:1e:
         64:0d:d2:a5:37:8b:d6:11:40:65:cc:9e:08:ae:46:d5:50:33:
         48:4c:14:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2
OTY1NTg2MEEwHhcNMjYwNjIzMDIxNzU5WhcNMjYwNjMwMDIxNzU5WjAYMRYwFAYD
VQQDEw02YTM5ZWNkOC1mYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIMVc1kClCwugSJvA253azCdRNKQA07OSvNi5/EPJCTb1Qdap8Zc3L0a/lWe
5ycjA5bNuciE0aeUVkq12/0lSJKCxbh3PLSOt6m2hkxyHY8ZTPLjzw5BA8g9POkq
BArw/b+ISOVSRZL4f5NYTfoscyt7qvScJbfgiY9cLUzpbFCPISDMwQ8nHwJwMegz
jW+V7twcGhJ7xhbd2sWQSyEVLL6db0DRXu7nLH1MLRJNKKeg1oB67AmNfAdKhn3H
UYhVXZK76weg3E2svQKLdvOVIXe+I3DhQyW9B1+3+noxZBalsba7RYf4Er8E9XL+
Fwcruxg+suo82NRcn2RjwVbQmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/P39Ef
Lv+2geMWxA+qpyiyqbYrMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5
RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk
ODRyTHRxMGUySzVwWlZoZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhn/YRQRbNHiEYX0Fyrb8CdUkYx2zGJzbh0+rtgREUdG1UG74cICG4y3eH5YI
6DI3+SLVEScLlhBNoy+fV3xnWLmCv4sQd3j6olFQsfKePHvUe5+Axdw3M5mYtBGI
K8OKHk7CHxN2pQ2EOmEVKvI9nV3dn6dnydn9YT61p21rgAl7B1ylLEzSLMA6Evfw
RZ+h4JcF1nLymZcPnDpOosIBu/fUTvZA7+5hjPXtcqQcUcN3NYzbCatnbnUNlU9G
RnDl/ZxWEsLk0OP7ki58xwU+fOCCilNy0UUsPiEuDNzCjsQwMiR0fmkpWjseZA3S
pTeL1hFAZcyeCK5G1VAzSEwUWA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:28 2026 by rpki-client