Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File:                     hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier:          XNsY+4nzBQiNjV07PMy13GqgsN6ttwX9d/O2AGxN0pE=
Subject key identifier:   84:46:58:9A:73:84:00:96:D5:02:33:55:67:AB:59:BE:1B:59:FB:21
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer:       /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial:       0B53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number:          0B46
Signing time:             Mon 22 Jun 2026 19:14:12 +0000
Manifest this update:     Mon 22 Jun 2026 19:14:11 +0000
Manifest next update:     Mon 29 Jun 2026 19:14:11 +0000
Files and hashes:         1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: bo8g0KlolYPMjsU6gVtmnMAyMugQAQD89LcFnw3ebTg=)
                          2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
                          rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2899 (0xb53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
        Validity
            Not Before: Jun 22 19:14:11 2026 GMT
            Not After : Jun 29 19:14:11 2026 GMT
        Subject: CN=6a398984-fa36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:e2:3e:ae:aa:58:fa:3f:74:d8:26:2f:2b:
                    d5:9b:72:71:4a:ed:fd:62:99:dd:54:c7:0d:b0:83:
                    4a:55:27:e5:09:ef:b6:d5:4f:74:1e:2e:01:28:4a:
                    70:2c:b2:4e:10:7c:15:d8:f5:7f:7a:33:0e:40:84:
                    72:e3:33:a8:a5:a7:cd:61:4e:e4:91:3a:e9:30:a5:
                    70:55:4e:58:ad:ae:dd:00:f5:f5:19:c9:e3:4d:00:
                    47:d7:51:4d:9d:b4:f4:df:be:79:e7:0d:01:38:db:
                    70:0c:4b:59:65:d4:fa:0d:8d:38:73:76:c2:3d:7f:
                    1a:1d:12:b7:b4:52:6c:c6:0c:96:9e:ae:75:15:94:
                    9a:c4:a0:81:18:70:c0:69:e3:a8:e7:15:18:a5:78:
                    5a:36:34:f3:6c:ce:e2:c8:9a:e8:67:ce:e1:cf:5e:
                    0c:03:16:92:c1:59:d4:53:91:34:6d:ad:cb:22:23:
                    93:1b:e7:80:91:12:64:71:27:d5:81:17:eb:c2:b7:
                    20:87:9b:57:c6:23:0a:35:fd:48:0a:da:d8:45:af:
                    b5:03:d1:72:a5:8f:4b:44:88:80:0b:95:c2:04:d6:
                    fb:fc:35:78:a1:a6:13:30:99:79:b8:bf:d2:1e:88:
                    a1:85:03:fa:af:10:0e:b0:b8:59:1b:05:d9:5d:2a:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:58:9A:73:84:00:96:D5:02:33:55:67:AB:59:BE:1B:59:FB:21
            X509v3 Authority Key Identifier:
                keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:a0:74:b3:de:25:cf:d8:15:b9:b9:02:6c:78:56:ca:c3:
         9d:78:ef:7b:54:a1:0f:d7:e0:26:b1:61:d3:44:a0:83:cd:c7:
         35:b7:ac:e5:49:77:bd:56:e2:07:28:57:0f:c2:9b:36:fe:31:
         0b:96:c4:fd:fb:ce:6e:6c:08:3a:8b:6d:d8:44:9a:f2:18:db:
         8b:d9:75:54:07:f1:b9:cb:8b:1d:c5:2c:c7:68:00:54:e5:03:
         aa:4e:e4:f0:64:2c:d7:80:0d:5f:5d:b7:ae:d2:4b:e5:2d:7f:
         d7:90:d1:53:53:15:28:4e:93:2c:4c:fe:c7:86:96:37:e4:1f:
         17:29:91:ca:80:5b:bc:41:2a:20:7d:94:d5:67:fa:44:dc:ef:
         72:d5:14:18:e4:a4:a7:4b:ec:5b:2b:3d:56:04:02:14:28:02:
         1c:cc:cc:79:50:5a:4d:13:b9:86:6a:21:c9:1d:29:31:44:cc:
         fc:2c:af:6d:26:36:3c:0c:04:b2:c9:47:ec:a4:ce:39:bc:44:
         d1:08:47:ea:29:33:b7:a7:3c:f0:68:34:31:7f:62:fe:8b:fa:
         1b:75:16:85:f9:6c:84:97:0e:f8:c8:70:0e:71:30:78:90:16:
         ad:18:60:09:a1:3a:87:02:89:d8:9b:20:50:e5:1c:ff:45:87:
         19:9e:50:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVDNzgxMTAvBgNVBAUTKDg0OEE3OUFCNTA0MUU3MUNFNjIyNTBCNTdGQzFFMEY1
NDk3OEM5M0EwHhcNMjYwNjIyMTkxNDExWhcNMjYwNjI5MTkxNDExWjAYMRYwFAYD
VQQDEw02YTM5ODk4NC1mYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jbiPq6qWPo/dNgmLyvVm3JxSu39YpndVMcNsINKVSflCe+21U90Hi4BKEpw
LLJOEHwV2PV/ejMOQIRy4zOopafNYU7kkTrpMKVwVU5Yra7dAPX1GcnjTQBH11FN
nbT037555w0BONtwDEtZZdT6DY04c3bCPX8aHRK3tFJsxgyWnq51FZSaxKCBGHDA
aeOo5xUYpXhaNjTzbM7iyJroZ87hz14MAxaSwVnUU5E0ba3LIiOTG+eAkRJkcSfV
gRfrwrcgh5tXxiMKNf1ICtrYRa+1A9FypY9LRIiAC5XCBNb7/DV4oaYTMJl5uL/S
HoihhQP6rxAOsLhZGwXZXSqaJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRGWJpz
hACW1QIzVWerWb4bWfshMB8GA1UdIwQYMBaAFISKeatQQecc5iJQtX/B4PVJeMk6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM3OC8xOTJFRkYwODVE
Q0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4em1JbEMxZjhIZzlVbDR5
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJcDVxMUJCNXh6bUlsQzFmOEhnOVVsNHlUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUM3OC8xOTJFRkYwODVEQ0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4
em1JbEMxZjhIZzlVbDR5VG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKa6gdLPeJc/YFbm5Amx4VsrDnXjve1ShD9fgJrFh00Sgg83HNbes5Ul3vVbi
ByhXD8KbNv4xC5bE/fvObmwIOott2ESa8hjbi9l1VAfxucuLHcUsx2gAVOUDqk7k
8GQs14ANX123rtJL5S1/15DRU1MVKE6TLEz+x4aWN+QfFymRyoBbvEEqIH2U1Wf6
RNzvctUUGOSkp0vsWys9VgQCFCgCHMzMeVBaTRO5hmohyR0pMUTM/CyvbSY2PAwE
sslH7KTOObxE0QhH6ikzt6c88Gg0MX9i/ov6G3UWhflshJcO+MhwDnEweJAWrRhg
CaE6hwKJ2JsgUOUc/0WHGZ5QhA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:40 2026 by rpki-client