Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
File:                     z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json)
Hash identifier:          6OOh5kk50XEYzP0IdckIqXvMVMpQCspjx3ZS1l29a7c=
Subject key identifier:   8D:1C:EC:2F:93:BE:E7:45:39:4D:4A:A5:5C:84:C2:A2:DE:DE:E5:69
Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6
Certificate issuer:       /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
Manifest number:          0125
Signing time:             Mon 01 Jun 2026 06:29:09 +0000
Manifest this update:     Mon 01 Jun 2026 06:29:08 +0000
Manifest next update:     Mon 08 Jun 2026 06:29:08 +0000
Files and hashes:         1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: H3KskcTAfNjG5jnQWah6FK5PgVTdZ03HKw2WLU/+EuE=)
                          2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: HouHZa5vGgcIa83LrMGT7+XMplAnXagri+kcUGhALfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
        Validity
            Not Before: Jun  1 06:29:08 2026 GMT
            Not After : Jun  8 06:29:08 2026 GMT
        Subject: CN=6a1d26b5-d80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:db:07:ce:6c:a6:8e:eb:53:fa:34:44:f5:
                    0d:99:fb:e3:3b:ff:89:42:9d:73:bb:0f:77:dc:3c:
                    a4:25:b7:cf:28:e7:2e:f3:da:e1:19:33:55:73:40:
                    12:6a:6f:1a:37:cd:09:e8:cf:88:cf:6f:e1:0e:87:
                    d7:0a:12:8b:9b:f8:88:90:a5:92:e1:06:18:9b:89:
                    f1:df:73:f3:7b:67:16:f7:07:bd:de:f1:4a:bc:87:
                    38:01:49:86:25:73:1a:39:c3:dc:e5:e8:06:a4:ee:
                    31:64:5d:82:e8:f3:a2:2c:44:93:6b:68:19:a2:ec:
                    38:50:cc:22:63:28:a9:e9:3c:44:0e:ad:c7:60:48:
                    40:92:6a:95:07:91:c8:bb:f0:eb:85:41:e0:0d:85:
                    a5:98:91:ca:e4:9a:71:cb:c8:c7:f0:d7:d7:50:bd:
                    65:d3:14:18:af:9f:94:26:bd:27:f3:c3:a9:fa:cf:
                    32:a2:15:6f:a5:e2:6c:de:98:7e:07:f9:cc:92:62:
                    c2:7f:fa:72:6a:6a:34:bc:34:50:44:f9:ff:72:a5:
                    35:fe:4d:e2:1f:a1:8b:3a:a8:80:dc:7f:4c:4c:cc:
                    c1:b7:8e:c7:b4:19:94:63:1d:41:0c:8b:1c:2f:75:
                    f1:5b:05:88:c4:93:d7:ac:56:e3:ce:6a:64:5a:08:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1C:EC:2F:93:BE:E7:45:39:4D:4A:A5:5C:84:C2:A2:DE:DE:E5:69
            X509v3 Authority Key Identifier:
                keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:86:8a:b3:8b:0d:e3:b5:4f:13:c8:6a:da:c9:ac:b7:d9:
         0f:3b:ae:a1:9e:58:c7:08:9e:5e:7a:10:f1:89:84:ba:bc:de:
         63:1b:f3:d0:68:c8:bd:ad:a5:fd:e0:8d:24:f9:80:7f:05:d1:
         4c:21:52:9f:59:36:58:f8:98:8b:b9:e9:78:40:6e:e9:e5:8b:
         e4:f0:24:2a:e2:6b:5b:11:8b:b4:49:b1:e8:82:53:2e:a5:66:
         7d:91:f4:15:cf:06:31:53:d6:af:a0:53:4d:7d:9c:06:70:58:
         f4:12:a0:b2:6b:13:92:b6:18:b2:7b:51:b7:b2:0b:e7:07:1c:
         a5:d4:7d:8b:b3:44:8b:9d:fa:7d:6e:8d:36:65:46:16:d4:ef:
         c6:12:fd:c7:9c:ca:da:ad:5d:43:1e:1d:de:90:ba:9c:e0:23:
         0f:ab:4c:44:82:92:79:35:6c:ad:5f:04:5a:ba:e1:cc:27:0b:
         f8:28:a6:80:49:e2:ea:91:a7:92:4e:8c:52:fa:09:55:92:b4:
         1d:b1:73:b2:08:68:98:48:fa:cc:7a:58:9f:6a:47:33:43:50:
         fb:a1:0e:4f:e8:55:37:9a:73:7f:52:0e:99:48:e6:55:3b:db:
         ac:49:69:02:7b:b8:be:7b:f5:d5:33:92:30:a4:2c:0c:0e:97:
         a2:11:ff:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0
MEFCM0UzQTYwHhcNMjYwNjAxMDYyOTA4WhcNMjYwNjA4MDYyOTA4WjAYMRYwFAYD
VQQDEw02YTFkMjZiNS1kODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh9rbB85spo7rU/o0RPUNmfvjO/+JQp1zuw933DykJbfPKOcu89rhGTNVc0AS
am8aN80J6M+Iz2/hDofXChKLm/iIkKWS4QYYm4nx33Pze2cW9we93vFKvIc4AUmG
JXMaOcPc5egGpO4xZF2C6POiLESTa2gZouw4UMwiYyip6TxEDq3HYEhAkmqVB5HI
u/DrhUHgDYWlmJHK5Jpxy8jH8NfXUL1l0xQYr5+UJr0n88Op+s8yohVvpeJs3ph+
B/nMkmLCf/pyamo0vDRQRPn/cqU1/k3iH6GLOqiA3H9MTMzBt47HtBmUYx1BDIsc
L3XxWwWIxJPXrFbjzmpkWgi7FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0c7C+T
vudFOU1KpVyEwqLe3uVpMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy
MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL
Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPEeGirOLDeO1TxPIatrJrLfZDzuuoZ5YxwieXnoQ8YmEurzeYxvz0GjIva2l
/eCNJPmAfwXRTCFSn1k2WPiYi7npeEBu6eWL5PAkKuJrWxGLtEmx6IJTLqVmfZH0
Fc8GMVPWr6BTTX2cBnBY9BKgsmsTkrYYsntRt7IL5wccpdR9i7NEi536fW6NNmVG
FtTvxhL9x5zK2q1dQx4d3pC6nOAjD6tMRIKSeTVsrV8EWrrhzCcL+CimgEni6pGn
kk6MUvoJVZK0HbFzsghomEj6zHpYn2pHM0NQ+6EOT+hVN5pzf1IOmUjmVTvbrElp
Anu4vnv11TOSMKQsDA6XohH/uA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:37 2026 by rpki-client