Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File:                     rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier:          GNT5Kq64LtItPx2//837OVd4Wl9+t66otCeKdGbi7KE=
Subject key identifier:   C1:1B:57:47:64:AE:F0:17:F3:97:5A:2B:34:6D:47:84:9D:4B:A9:8E
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer:       /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number:          0372
Signing time:             Tue 23 Jun 2026 01:56:44 +0000
Manifest this update:     Tue 23 Jun 2026 01:56:43 +0000
Manifest next update:     Tue 30 Jun 2026 01:56:43 +0000
Files and hashes:         1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: ok8MgFoutKoOjeWj50nEniWX/SmeGm5iLwBSepRO1sQ=)
                          2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
                          rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
        Validity
            Not Before: Jun 23 01:56:43 2026 GMT
            Not After : Jun 30 01:56:43 2026 GMT
        Subject: CN=6a39e7dc-5796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:7d:3e:60:82:1b:d9:fc:61:ff:97:f5:60:
                    5b:49:dc:41:40:75:9e:f0:21:2f:e4:4d:a9:ec:c6:
                    c8:b4:cc:74:62:49:46:2f:17:6a:25:b5:77:65:14:
                    1d:07:fb:f5:92:4b:bb:07:35:03:05:d9:59:c8:33:
                    7f:f8:4a:31:1d:e7:e9:5f:ff:4d:4e:9b:7b:00:92:
                    83:c6:e4:6a:b1:9e:ed:3a:ce:27:fe:18:c9:80:5e:
                    6e:6b:45:34:c2:04:98:41:1e:34:4e:d1:5d:b8:8f:
                    de:b1:11:e5:f3:fd:ea:37:c0:91:3d:64:c2:43:12:
                    64:85:24:f1:86:c7:e1:c4:ab:b1:00:a8:56:d3:f6:
                    a7:71:7f:2a:d0:a3:57:35:b8:8a:49:b7:73:e0:67:
                    0d:d5:24:4e:42:6c:2d:27:48:83:b9:de:0c:f2:b2:
                    49:45:ad:03:16:95:de:26:12:7d:e4:33:39:05:14:
                    af:19:63:3c:c1:14:3a:d8:82:8c:e7:34:06:1a:3c:
                    e1:b9:53:07:da:c5:be:bb:44:85:69:41:22:11:02:
                    96:17:4c:73:1b:16:14:0e:0a:ed:da:d1:6d:47:6f:
                    91:b7:32:b3:4d:dc:0e:73:7a:83:45:be:59:bb:ac:
                    85:65:a8:68:c6:05:21:96:20:3c:61:da:fd:3d:2c:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:57:47:64:AE:F0:17:F3:97:5A:2B:34:6D:47:84:9D:4B:A9:8E
            X509v3 Authority Key Identifier:
                keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:14:2e:12:64:dc:bd:cd:c8:57:4b:5d:ad:ed:d6:40:d6:bc:
         f3:cf:13:08:82:27:58:a2:2a:dd:24:b9:b8:b4:fc:87:af:90:
         58:f7:1d:b5:c8:2d:a5:0b:98:35:96:e1:cd:26:3b:0f:00:f1:
         18:76:ca:a8:05:e0:a2:df:17:41:a1:bf:2b:ec:3b:50:5e:cf:
         69:27:7b:32:0f:95:d8:c7:29:0c:30:f4:4a:da:bf:72:0f:a4:
         9f:8e:56:24:c1:55:05:1e:03:7c:b5:a8:98:21:d5:53:ba:a4:
         b3:e7:f5:f6:4f:9f:94:58:96:6e:d3:7a:59:c5:25:5f:49:34:
         a8:12:5e:50:11:f1:ba:01:b3:d5:0b:0a:76:a4:d1:c3:7d:64:
         55:75:9a:31:eb:05:85:45:87:32:05:29:23:cb:e3:20:68:b4:
         fa:6d:a3:e5:fd:a1:f7:f0:51:10:15:64:99:5f:c5:4c:87:64:
         a4:65:f0:e5:10:61:c8:b9:2d:29:4e:3c:fc:74:cf:e5:bf:25:
         84:88:ea:6d:0b:c2:ee:7a:08:c4:43:a7:cd:b2:a6:a3:f7:0c:
         3f:de:be:a2:f7:47:a4:d8:44:1d:29:55:b9:1b:1b:0b:62:44:
         2d:f5:65:20:ed:3f:76:f8:a0:b5:29:94:44:c1:f5:93:82:1c:
         ab:e0:85:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5QzgxMTAvBgNVBAUTKEFEREIyQkYzQzQxODI2RDZEMEZCRThEMkJGMkYwNTJE
OThBNUQ5NDkwHhcNMjYwNjIzMDE1NjQzWhcNMjYwNjMwMDE1NjQzWjAYMRYwFAYD
VQQDEw02YTM5ZTdkYy01Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7d9PmCCG9n8Yf+X9WBbSdxBQHWe8CEv5E2p7MbItMx0YklGLxdqJbV3ZRQd
B/v1kku7BzUDBdlZyDN/+EoxHefpX/9NTpt7AJKDxuRqsZ7tOs4n/hjJgF5ua0U0
wgSYQR40TtFduI/esRHl8/3qN8CRPWTCQxJkhSTxhsfhxKuxAKhW0/ancX8q0KNX
NbiKSbdz4GcN1SROQmwtJ0iDud4M8rJJRa0DFpXeJhJ95DM5BRSvGWM8wRQ62IKM
5zQGGjzhuVMH2sW+u0SFaUEiEQKWF0xzGxYUDgrt2tFtR2+RtzKzTdwOc3qDRb5Z
u6yFZahoxgUhliA8Ydr9PSxAqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEbV0dk
rvAX85daKzRtR4SdS6mOMB8GA1UdIwQYMBaAFK3bK/PEGCbW0Pvo0r8vBS2YpdlJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE
RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0YlEtLWpTdnk4RkxaaWwy
VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJVay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0
YlEtLWpTdnk4RkxaaWwyVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzxQuEmTcvc3IV0tdre3WQNa8888TCIInWKIq3SS5uLT8h6+QWPcdtcgtpQuY
NZbhzSY7DwDxGHbKqAXgot8XQaG/K+w7UF7PaSd7Mg+V2McpDDD0Stq/cg+kn45W
JMFVBR4DfLWomCHVU7qks+f19k+flFiWbtN6WcUlX0k0qBJeUBHxugGz1QsKdqTR
w31kVXWaMesFhUWHMgUpI8vjIGi0+m2j5f2h9/BREBVkmV/FTIdkpGXw5RBhyLkt
KU48/HTP5b8lhIjqbQvC7noIxEOnzbKmo/cMP96+ovdHpNhEHSlVuRsbC2JELfVl
IO0/dvigtSmURMH1k4Icq+CFUw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:58 2026 by rpki-client