Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File:                     _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier:          OATLZkphUbhiMpkG0L4dvnWJSpRQ/GVsVq5+miMadtI=
Subject key identifier:   36:1D:D4:95:05:FF:64:12:BD:93:98:48:82:4C:56:B6:5C:22:87:64
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer:       /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial:       0E3C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number:          0D94
Signing time:             Wed 10 Jun 2026 16:48:22 +0000
Manifest this update:     Wed 10 Jun 2026 16:48:22 +0000
Manifest next update:     Wed 17 Jun 2026 16:48:22 +0000
Files and hashes:         1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: e/8JFGXI76XFqbbf9Mi2APngqqrrxzhzKnOtvuo3fc0=)
                          2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=)
                          3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=)
                          4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3644 (0xe3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Validity
            Not Before: Jun 10 16:48:22 2026 GMT
            Not After : Jun 17 16:48:22 2026 GMT
        Subject: CN=6a299556-a413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:34:00:33:d6:d2:ac:5b:d3:fd:26:5c:fb:
                    5f:d4:b6:86:81:e9:d8:bc:ea:8f:67:1a:80:0b:2a:
                    df:45:05:05:97:25:d1:62:93:85:78:bf:af:1d:39:
                    d2:e2:df:95:e4:61:46:46:77:ec:2c:6c:59:a0:ec:
                    af:6d:31:6a:ed:48:13:ff:c8:da:95:c6:3d:6d:0c:
                    89:15:da:47:1d:22:7d:fe:cb:9f:66:2c:84:0e:97:
                    db:2d:ae:e6:2e:2c:96:38:49:7f:f4:65:89:96:eb:
                    8e:d4:0e:52:0c:58:2f:8b:3a:6d:3b:b2:78:b8:0a:
                    5b:a0:05:d9:78:b7:90:d8:ab:68:19:5f:fc:65:44:
                    dc:79:c7:f4:fc:c9:eb:c8:0b:f4:7e:21:70:b1:5d:
                    c6:0f:d2:19:fc:9e:a4:a1:2c:96:1a:21:ff:19:d9:
                    21:50:0b:29:19:6d:37:c1:bc:74:67:f0:d4:e5:2c:
                    ff:19:18:94:e8:20:c5:89:be:9e:fa:70:d0:cc:00:
                    61:e5:93:3c:b1:6e:96:d1:22:dd:af:44:fa:23:9c:
                    99:96:85:fc:21:30:df:fa:f0:33:c4:49:d9:b0:a7:
                    14:bf:d2:c7:65:fb:b7:d4:3b:37:2d:48:fd:97:9d:
                    96:e1:b2:7c:71:cc:51:f2:28:1a:d7:93:b6:28:f0:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:D4:95:05:FF:64:12:BD:93:98:48:82:4C:56:B6:5C:22:87:64
            X509v3 Authority Key Identifier:
                keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:73:ff:ca:db:e9:ad:ac:ed:59:4e:41:c0:8b:6d:fe:69:bf:
         4a:0b:f4:f3:49:e7:db:fa:2c:87:06:87:61:3a:6f:b1:57:db:
         80:ab:86:ed:70:49:10:d6:9d:7c:5e:33:f0:64:b3:81:f6:e7:
         e0:c3:c7:9c:b7:95:ea:15:e3:54:74:cb:6c:8b:6e:bb:04:fe:
         9f:10:fc:a3:03:23:f9:26:69:05:01:51:b4:38:71:1f:fa:57:
         69:68:9b:e1:00:e9:ec:82:3c:0f:c3:da:44:e5:94:e3:73:ae:
         da:76:2d:bb:d6:71:c7:49:fe:38:60:0b:49:21:03:83:5b:00:
         7c:fd:5e:ab:f0:a3:8c:80:15:25:7e:a7:56:a6:00:d0:6e:c7:
         38:f7:85:69:14:18:72:c3:16:7d:22:bc:f7:96:0a:28:91:8a:
         1d:61:24:3f:4b:b4:f7:0c:7f:73:75:8c:e4:bd:5a:68:38:93:
         ec:57:4f:d4:2c:6f:be:e1:de:ce:3d:e2:f1:5b:e1:d0:2e:6e:
         3a:98:a3:cc:ea:c1:16:a1:09:a1:ef:f1:80:5f:31:4a:a0:20:
         e9:91:f6:2a:8f:33:e4:ab:66:41:44:03:fc:1f:a6:ca:ac:7c:
         da:95:86:55:1b:8f:6b:f2:fb:fa:1b:64:9a:ca:72:0c:e1:fb:
         b1:e6:44:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5
MjUyOEFFQjYwHhcNMjYwNjEwMTY0ODIyWhcNMjYwNjE3MTY0ODIyWjAYMRYwFAYD
VQQDEw02YTI5OTU1Ni1hNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9E0ADPW0qxb0/0mXPtf1LaGgenYvOqPZxqACyrfRQUFlyXRYpOFeL+vHTnS
4t+V5GFGRnfsLGxZoOyvbTFq7UgT/8jalcY9bQyJFdpHHSJ9/sufZiyEDpfbLa7m
LiyWOEl/9GWJluuO1A5SDFgvizptO7J4uApboAXZeLeQ2KtoGV/8ZUTcecf0/Mnr
yAv0fiFwsV3GD9IZ/J6koSyWGiH/GdkhUAspGW03wbx0Z/DU5Sz/GRiU6CDFib6e
+nDQzABh5ZM8sW6W0SLdr0T6I5yZloX8ITDf+vAzxEnZsKcUv9LHZfu31Ds3LUj9
l52W4bJ8ccxR8iga15O2KPCRowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYd1JUF
/2QSvZOYSIJMVrZcIodkMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy
NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m
YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABHP/ytvpraztWU5BwItt/mm/Sgv080nn2/oshwaHYTpvsVfbgKuG7XBJENad
fF4z8GSzgfbn4MPHnLeV6hXjVHTLbItuuwT+nxD8owMj+SZpBQFRtDhxH/pXaWib
4QDp7II8D8PaROWU43Ou2nYtu9Zxx0n+OGALSSEDg1sAfP1eq/CjjIAVJX6nVqYA
0G7HOPeFaRQYcsMWfSK895YKKJGKHWEkP0u09wx/c3WM5L1aaDiT7FdP1CxvvuHe
zj3i8Vvh0C5uOpijzOrBFqEJoe/xgF8xSqAg6ZH2Ko8z5KtmQUQD/B+myqx82pWG
VRuPa/L7+htkmspyDOH7seZEGg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:46 2026 by rpki-client