Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File:                     rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier:          4RWRKeTNGUYvaFv5B4/gcnOmUPOOINAb8ZEjhJA+/kk=
Subject key identifier:   82:50:B0:DB:CF:E1:10:90:55:89:9B:A1:BD:E9:A1:D6:BE:C9:37:DC
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer:       /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number:          B4
Signing time:             Mon 01 Jun 2026 07:54:18 +0000
Manifest this update:     Mon 01 Jun 2026 07:54:18 +0000
Manifest next update:     Mon 08 Jun 2026 07:54:18 +0000
Files and hashes:         1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: qeyQPFtD4APjI/wlyouOgX3KCKP485PaTHzQ4gbdhPc=)
                          2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: keWoR6Hyq0x5/4XbMYXw5aujAnOEsemIs8ZNPQolFKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
        Validity
            Not Before: Jun  1 07:54:18 2026 GMT
            Not After : Jun  8 07:54:18 2026 GMT
        Subject: CN=6a1d3aaa-d9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:de:1a:b2:0e:40:f0:8b:8a:97:09:1e:57:
                    c4:6e:37:86:ff:a0:26:11:40:98:91:32:3c:5d:86:
                    d7:ab:1d:12:4b:80:8f:76:53:93:bf:e8:87:a1:79:
                    4b:85:81:c6:00:bd:e8:a4:fc:dc:93:35:aa:82:d7:
                    ce:16:7c:39:14:63:4e:37:b0:4b:96:76:52:19:24:
                    67:c9:b6:83:41:6f:f5:25:5a:f6:be:41:73:a1:91:
                    f6:f8:16:aa:36:d1:ef:ed:2f:59:22:a1:69:09:c6:
                    b2:66:e9:ce:48:8c:50:a5:45:98:18:25:bf:05:c3:
                    8b:5f:14:b2:94:1a:cf:b4:a8:d0:a8:fb:ec:d2:59:
                    d7:87:e5:0d:eb:ad:df:25:ac:c5:b0:db:b2:db:f9:
                    2a:d4:9c:88:e3:df:80:92:a0:86:32:f8:af:e1:fd:
                    75:68:16:dd:9a:bd:88:fd:9d:1b:4b:c0:64:cb:b8:
                    b8:ce:b8:d1:70:c5:24:04:88:f2:62:46:5c:7c:c8:
                    24:55:bf:d7:7b:08:b7:df:59:48:56:2a:e2:b2:bd:
                    54:a9:d9:ef:2a:d0:7c:73:cc:2b:67:e3:71:72:6c:
                    ab:ce:cd:8e:ee:07:9f:55:d8:ad:1d:7c:47:5c:1f:
                    a9:b4:53:5c:13:c2:6e:c7:a3:61:c5:d8:3d:43:b2:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:50:B0:DB:CF:E1:10:90:55:89:9B:A1:BD:E9:A1:D6:BE:C9:37:DC
            X509v3 Authority Key Identifier:
                keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:29:9a:93:69:5f:8b:cd:d2:55:f9:a5:dd:69:ea:35:94:
         01:db:80:eb:75:2a:02:76:8e:ab:63:de:02:0e:4c:54:e1:6f:
         30:28:9c:4a:6e:30:f3:7c:98:e9:20:c9:52:0c:5a:f0:44:8d:
         fb:aa:f3:1d:70:a3:d3:72:b8:f2:4d:cc:f7:bc:29:1f:81:6f:
         b6:88:32:9f:22:94:06:ea:57:6e:1c:c1:89:b1:64:8e:e5:0e:
         a3:a3:7a:e2:3b:21:52:43:fb:e6:13:71:8b:13:52:10:98:d4:
         5a:2d:f5:ad:27:a7:43:b0:6b:86:3e:0d:d9:76:8f:ae:d7:31:
         a4:df:6d:a7:9a:a1:13:63:f4:71:10:c0:40:f7:f6:ef:84:e5:
         34:82:54:b2:19:9e:cb:11:af:34:00:92:13:3c:37:38:5e:60:
         53:26:93:61:f1:4f:94:31:4f:82:9a:1f:1b:c4:de:01:51:72:
         d1:b5:74:80:e5:bd:13:3c:21:e7:f8:cc:18:5e:ec:4a:4e:a6:
         3d:ae:a4:1d:8e:5b:75:ea:b5:ce:10:e6:15:24:d0:ae:c5:ea:
         d1:a9:98:0f:30:0c:4b:22:bc:34:4d:ae:f3:c8:8f:eb:c3:4e:
         a5:5a:22:53:45:95:74:d5:40:82:77:ae:de:98:b7:9d:89:1d:
         49:fa:7a:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc5OUMxMTAvBgNVBAUTKEFEMDcwMjQwMjkzQUNEQzUyNENBMTMzNjU4MkQ3MEMy
MTlGQ0M3RTAwHhcNMjYwNjAxMDc1NDE4WhcNMjYwNjA4MDc1NDE4WjAYMRYwFAYD
VQQDEw02YTFkM2FhYS1kOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkzDeGrIOQPCLipcJHlfEbjeG/6AmEUCYkTI8XYbXqx0SS4CPdlOTv+iHoXlL
hYHGAL3opPzckzWqgtfOFnw5FGNON7BLlnZSGSRnybaDQW/1JVr2vkFzoZH2+Baq
NtHv7S9ZIqFpCcayZunOSIxQpUWYGCW/BcOLXxSylBrPtKjQqPvs0lnXh+UN663f
JazFsNuy2/kq1JyI49+AkqCGMviv4f11aBbdmr2I/Z0bS8Bky7i4zrjRcMUkBIjy
YkZcfMgkVb/Xewi331lIVirisr1UqdnvKtB8c8wrZ+Nxcmyrzs2O7gefVditHXxH
XB+ptFNcE8Jux6Nhxdg9Q7LyZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJQsNvP
4RCQVYmbob3poda+yTfcMB8GA1UdIwQYMBaAFK0HAkApOs3FJMoTNlgtcMIZ/Mfg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzk5Qy8yRDMzNUU2QTU1
NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9yUWNDUUNrNnpjVWt5aE0yV0Mxd3dobjh4
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JRY0NRQ2s2emNVa3loTTJXQzF3d2huOHgtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Nzk5Qy8yRDMzNUU2QTU1NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9yUWNDUUNrNnpj
VWt5aE0yV0Mxd3dobjh4LUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMcEpmpNpX4vN0lX5pd1p6jWUAduA63UqAnaOq2PeAg5MVOFvMCicSm4w83yY
6SDJUgxa8ESN+6rzHXCj03K48k3M97wpH4FvtogynyKUBupXbhzBibFkjuUOo6N6
4jshUkP75hNxixNSEJjUWi31rSenQ7Brhj4N2XaPrtcxpN9tp5qhE2P0cRDAQPf2
74TlNIJUshmeyxGvNACSEzw3OF5gUyaTYfFPlDFPgpofG8TeAVFy0bV0gOW9Ezwh
5/jMGF7sSk6mPa6kHY5bdeq1zhDmFSTQrsXq0amYDzAMSyK8NE2u88iP68NOpVoi
U0WVdNVAgneu3pi3nYkdSfp6Sg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:08 2026 by rpki-client