Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
File:                     F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json)
Hash identifier:          yRdpwMuYAJMKwA8U4Ykb22kwlT9KeFJ1qIB4FxGe5Yc=
Subject key identifier:   71:D9:6B:B2:33:48:B8:82:73:12:98:D6:75:F2:B5:76:F9:24:FD:88
Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
Certificate issuer:       /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
Manifest number:          0122
Signing time:             Mon 01 Jun 2026 06:31:35 +0000
Manifest this update:     Mon 01 Jun 2026 06:31:34 +0000
Manifest next update:     Mon 08 Jun 2026 06:31:34 +0000
Files and hashes:         1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: +jQctNuudFF4giXRCEphGWlkl46qsNAqyiIFIahJ7Tg=)
                          2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: 3O6VgxIYZQg0/gXdPfFmHtQWn2JCLPxmlmgCbxUiuck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl
                          rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
        Validity
            Not Before: Jun  1 06:31:34 2026 GMT
            Not After : Jun  8 06:31:34 2026 GMT
        Subject: CN=6a1d2747-38a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:cc:15:a0:62:47:3f:48:0f:d1:b0:e6:f9:
                    da:30:99:ec:8c:c1:66:09:c4:28:b3:22:33:cc:2a:
                    66:dd:b2:f1:30:db:c7:d5:76:af:f5:06:0b:2b:31:
                    30:51:51:3c:59:2f:3d:e4:94:a0:17:34:6f:b5:28:
                    31:2c:2c:4f:2a:b4:ef:cf:5a:f9:fb:04:04:99:5b:
                    e8:d5:5d:7a:41:4a:4b:06:9b:1b:ee:9a:3c:87:41:
                    46:03:64:dc:2f:cf:fa:14:b0:5f:58:60:8e:b1:04:
                    5e:8b:c6:9b:33:c3:73:dc:5b:6a:dc:df:78:b4:b6:
                    d1:53:7f:56:b9:41:7e:b2:f2:d7:ce:5b:2f:b6:8e:
                    88:fe:0f:17:51:3d:e4:ee:88:c3:d9:7e:33:8e:32:
                    60:34:9a:9e:e4:8a:ed:53:c3:3e:59:45:1f:d2:24:
                    4a:d7:85:fc:f9:0f:b6:f8:e5:df:a5:f5:76:c9:ef:
                    cc:d4:72:c4:f6:b6:d6:d4:86:2b:01:0b:59:e7:1a:
                    cb:42:3d:74:99:f4:f9:49:e2:b2:04:7f:84:06:7d:
                    e1:f7:53:26:39:03:77:60:b4:6a:ae:e5:0f:3f:f9:
                    70:af:30:c2:61:1b:c1:38:98:de:ca:21:9c:6e:30:
                    a9:f2:61:e2:83:61:aa:57:7a:48:c2:d9:5e:04:b4:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:6B:B2:33:48:B8:82:73:12:98:D6:75:F2:B5:76:F9:24:FD:88
            X509v3 Authority Key Identifier:
                keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:fd:98:56:97:cb:e7:d8:de:b9:b7:06:51:c7:64:f9:ca:
         73:21:a5:df:f5:0a:a1:60:a1:d5:41:f0:19:0d:c1:fc:66:e3:
         5a:73:ab:b4:08:5f:c9:ac:c1:9c:e7:f6:09:7f:83:62:b9:eb:
         a3:dd:d5:6e:c9:e6:3a:60:b8:9a:33:36:05:6e:40:da:59:0d:
         70:d5:ae:b0:b0:f0:3a:d7:c8:ee:14:60:81:1c:f3:72:72:2c:
         a8:74:12:29:ff:8f:62:99:e9:44:62:40:86:ac:10:d9:ac:d8:
         df:13:2e:fd:c1:84:95:d4:fc:af:b5:71:d1:71:47:93:6a:2d:
         97:ff:8d:be:63:61:38:98:01:ff:8e:2b:e5:d2:b9:3e:d5:d9:
         d1:ad:47:fb:3b:78:98:56:27:6f:ab:03:d7:a4:a6:55:60:cb:
         7e:ad:51:c3:5f:6e:13:80:c8:e8:63:43:a2:7c:47:f1:7c:fc:
         3f:3d:c6:f0:2d:2a:f4:eb:13:6f:94:c7:20:7f:3d:66:4c:85:
         4d:2f:45:c3:bb:ad:56:9e:c5:dd:25:7c:02:f5:c8:68:e7:d1:
         be:a5:e7:ec:8a:5d:4c:9c:e8:02:53:6f:90:02:31:c2:6f:14:
         2e:cb:19:94:1a:3f:a4:4e:9f:81:01:eb:46:fe:0a:cd:c9:0b:
         45:1d:d5:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE
NUM0OTNCODEwHhcNMjYwNjAxMDYzMTM0WhcNMjYwNjA4MDYzMTM0WjAYMRYwFAYD
VQQDEw02YTFkMjc0Ny0zOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOzMFaBiRz9ID9Gw5vnaMJnsjMFmCcQosyIzzCpm3bLxMNvH1Xav9QYLKzEw
UVE8WS895JSgFzRvtSgxLCxPKrTvz1r5+wQEmVvo1V16QUpLBpsb7po8h0FGA2Tc
L8/6FLBfWGCOsQRei8abM8Nz3Ftq3N94tLbRU39WuUF+svLXzlsvto6I/g8XUT3k
7ojD2X4zjjJgNJqe5IrtU8M+WUUf0iRK14X8+Q+2+OXfpfV2ye/M1HLE9rbW1IYr
AQtZ5xrLQj10mfT5SeKyBH+EBn3h91MmOQN3YLRqruUPP/lwrzDCYRvBOJjeyiGc
bjCp8mHig2GqV3pIwtleBLQ/oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHZa7Iz
SLiCcxKY1nXytXb5JP2IMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2
ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI
dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAorX9mFaXy+fY3rm3BlHHZPnKcyGl3/UKoWCh1UHwGQ3B/GbjWnOrtAhfyazB
nOf2CX+DYrnro93VbsnmOmC4mjM2BW5A2lkNcNWusLDwOtfI7hRggRzzcnIsqHQS
Kf+PYpnpRGJAhqwQ2azY3xMu/cGEldT8r7Vx0XFHk2otl/+NvmNhOJgB/44r5dK5
PtXZ0a1H+zt4mFYnb6sD16SmVWDLfq1Rw19uE4DI6GNDonxH8Xz8Pz3G8C0q9OsT
b5THIH89ZkyFTS9Fw7utVp7F3SV8AvXIaOfRvqXn7IpdTJzoAlNvkAIxwm8ULssZ
lBo/pE6fgQHrRv4KzckLRR3VSQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:57 2026 by rpki-client