Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
File:                     gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft (raw, json)
Hash identifier:          nDvZcnx8zQ6dUxvUskrzZyz2ECT7ac+KEijnczz4XwQ=
Subject key identifier:   1C:9C:F8:A1:65:9E:60:F2:53:8D:4A:56:94:DF:FE:5B:30:4B:0A:15
Authority key identifier: 81:14:55:F1:7C:BF:12:74:1C:C3:CF:EE:30:20:9C:EF:C6:39:4F:8C
Certificate issuer:       /CN=A917BEA1/serialNumber=811455F17CBF12741CC3CFEE30209CEFC6394F8C
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
Manifest number:          12
Signing time:             Tue 23 Jun 2026 09:19:08 +0000
Manifest this update:     Tue 23 Jun 2026 09:19:07 +0000
Manifest next update:     Tue 30 Jun 2026 09:19:07 +0000
Files and hashes:         1: gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl (hash: 4PMrfW641kpinEedJlLwG9OrZ/2IqsE22hUyTLhIMu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA1, serialNumber=811455F17CBF12741CC3CFEE30209CEFC6394F8C
        Validity
            Not Before: Jun 23 09:19:07 2026 GMT
            Not After : Jun 30 09:19:07 2026 GMT
        Subject: CN=6a3a4f8c-3176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:b5:32:0c:69:50:28:15:04:ce:05:f3:65:
                    b9:71:a2:ea:df:dd:13:a3:ca:3d:40:b4:3a:e1:90:
                    f1:64:da:79:28:f3:18:c9:02:d9:b5:b6:f3:d8:cb:
                    73:bd:ef:3a:72:37:b8:26:f2:fe:ba:8e:f0:84:76:
                    9b:78:cc:ef:4e:fd:82:fb:9f:87:b2:45:2b:b8:e8:
                    b4:e1:91:e4:53:1a:6d:e4:56:5e:2c:c9:41:17:5f:
                    f1:de:00:22:97:07:a5:09:59:3c:7a:0e:5e:8c:ef:
                    4f:c7:51:48:ce:28:57:57:da:2f:fd:e7:90:02:d3:
                    44:b1:f6:6c:65:85:42:f0:ec:cd:ab:a4:39:3b:36:
                    5c:5a:e9:01:e1:ad:5b:62:df:8e:27:e0:69:97:a7:
                    01:65:49:cf:eb:3e:b9:b2:b5:b2:94:b6:de:da:1e:
                    71:61:de:7f:9c:bc:fb:92:f4:5d:d5:b7:7c:5e:07:
                    cc:08:1a:d2:3a:41:de:79:ca:b9:b7:95:02:64:2f:
                    b7:22:d6:19:b9:fb:72:46:2f:b3:00:e9:98:6d:b9:
                    50:8b:cf:86:0c:6d:07:7d:20:91:fe:e9:71:c4:3d:
                    c6:ce:1a:00:d4:a0:a4:6f:fd:4b:74:30:7c:06:fb:
                    38:8f:cb:c3:37:c8:0d:7f:38:bc:3f:7b:4c:20:a4:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9C:F8:A1:65:9E:60:F2:53:8D:4A:56:94:DF:FE:5B:30:4B:0A:15
            X509v3 Authority Key Identifier:
                keyid:81:14:55:F1:7C:BF:12:74:1C:C3:CF:EE:30:20:9C:EF:C6:39:4F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/F4DFD01E54E511F1AEEFDFE69C833773/gRRV8Xy_EnQcw8_uMCCc78Y5T4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:02:c7:14:ef:11:4e:7d:54:64:10:4d:f3:19:b3:3e:80:a2:
         35:20:43:1e:49:31:1c:90:75:73:77:48:8b:4c:7d:04:6d:0a:
         c5:2e:96:e5:4e:1f:9d:7f:29:61:76:87:35:7c:92:99:c9:09:
         9d:cd:2f:6e:0d:89:e2:b3:3c:ff:a4:6b:33:a5:fa:44:09:e7:
         80:a3:ea:ef:13:52:e1:42:30:11:31:d7:fc:97:54:e5:bf:9e:
         86:bd:79:a1:40:ea:2e:01:d9:01:0c:d8:49:77:2f:38:96:3a:
         8d:20:88:7d:6f:95:51:23:44:87:45:a5:8a:b2:be:ed:2c:a8:
         5b:f4:65:60:17:5c:a8:92:90:8f:8b:e6:35:c9:de:3a:72:61:
         47:c1:ba:a0:4f:46:f0:7a:2f:e4:50:38:66:79:2f:f5:84:59:
         13:30:ce:2c:b8:94:5d:29:7b:73:d5:36:eb:6b:2e:55:9a:13:
         50:7b:b9:54:f8:37:e2:e7:32:7b:d4:a3:c2:dd:81:43:2b:a9:
         fc:3a:2d:f6:7d:06:9e:9a:d5:e8:4d:c7:41:9f:ff:d5:5a:8f:
         50:d7:d4:71:0d:43:02:32:47:b4:92:33:a4:70:04:f5:86:f4:
         aa:29:a1:d1:4b:4e:76:aa:83:b7:aa:4f:c8:96:a3:f4:ff:75:
         41:3e:fd:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QkVBMTExMC8GA1UEBRMoODExNDU1RjE3Q0JGMTI3NDFDQzNDRkVFMzAyMDlDRUZD
NjM5NEY4QzAeFw0yNjA2MjMwOTE5MDdaFw0yNjA2MzAwOTE5MDdaMBgxFjAUBgNV
BAMTDTZhM2E0ZjhjLTMxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpz7UyDGlQKBUEzgXzZblxourf3ROjyj1AtDrhkPFk2nko8xjJAtm1tvPYy3O9
7zpyN7gm8v66jvCEdpt4zO9O/YL7n4eyRSu46LThkeRTGm3kVl4syUEXX/HeACKX
B6UJWTx6Dl6M70/HUUjOKFdX2i/955AC00Sx9mxlhULw7M2rpDk7Nlxa6QHhrVti
344n4GmXpwFlSc/rPrmytbKUtt7aHnFh3n+cvPuS9F3Vt3xeB8wIGtI6Qd55yrm3
lQJkL7ci1hm5+3JGL7MA6ZhtuVCLz4YMbQd9IJH+6XHEPcbOGgDUoKRv/Ut0MHwG
+ziPy8M3yA1/OLw/e0wgpFipAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHJz4oWWe
YPJTjUpWlN/+WzBLChUwHwYDVR0jBBgwFoAUgRRV8Xy/EnQcw8/uMCCc78Y5T4ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRUExL0Y0REZEMDFFNTRF
NTExRjFBRUVGREZFNjlDODMzNzczL2dSUlY4WHlfRW5RY3c4X3VNQ0NjNzhZNVQ0
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ1JSVjhYeV9FblFjdzhfdU1DQ2M3OFk1VDR3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC
RUExL0Y0REZEMDFFNTRFNTExRjFBRUVGREZFNjlDODMzNzczL2dSUlY4WHlfRW5R
Y3c4X3VNQ0NjNzhZNVQ0dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3AscU7xFOfVRkEE3zGbM+gKI1IEMeSTEckHVzd0iLTH0EbQrFLpblTh+dfylh
doc1fJKZyQmdzS9uDYniszz/pGszpfpECeeAo+rvE1LhQjARMdf8l1Tlv56GvXmh
QOouAdkBDNhJdy84ljqNIIh9b5VRI0SHRaWKsr7tLKhb9GVgF1yokpCPi+Y1yd46
cmFHwbqgT0bwei/kUDhmeS/1hFkTMM4suJRdKXtz1Tbray5VmhNQe7lU+Dfi5zJ7
1KPC3YFDK6n8Oi32fQaemtXoTcdBn//VWo9Q19RxDUMCMke0kjOkcAT1hvSqKaHR
S052qoO3qk/IlqP0/3VBPv2H
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:17 2026 by rpki-client