Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File:                     f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier:          g1ZYhbzySzpf4/3N06nj0m607RGLe+NvYCp3y3ZK5dM=
Subject key identifier:   3A:25:41:18:FD:6F:BB:F7:16:25:5F:4A:7F:3E:03:1C:70:EB:B4:1F
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number:          0216
Signing time:             Fri 05 Jun 2026 03:03:59 +0000
Manifest this update:     Fri 05 Jun 2026 03:03:58 +0000
Manifest next update:     Fri 12 Jun 2026 03:03:58 +0000
Files and hashes:         1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: TmGsoR8KD2IVuXJoJjnyAebIhuTxlIK06+eex1dHbLE=)
                          2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: eZZ6OFwcrcrXTZgOQDhlIiXfyLs/tMt4GT83cZsLk+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: Jun  5 03:03:58 2026 GMT
            Not After : Jun 12 03:03:58 2026 GMT
        Subject: CN=6a223c9f-f594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:c8:e1:40:9d:f1:6a:fb:6e:fc:20:ca:9c:
                    3d:4e:8d:dd:e3:13:d2:76:c6:cb:b1:cb:4b:6f:02:
                    14:e2:19:dc:c2:26:b2:1a:21:8e:19:49:b4:23:7b:
                    2b:2e:3f:80:33:d1:3f:5a:96:3f:49:d7:d8:ea:9f:
                    01:70:4b:73:c8:2e:25:7b:47:63:aa:71:55:65:ef:
                    70:03:11:52:20:1d:37:c4:ff:ad:33:33:19:ed:84:
                    78:a0:e9:37:54:28:62:77:18:9f:86:a5:bc:e6:c2:
                    be:b3:07:40:f7:51:ef:ff:0d:ae:aa:b4:33:bd:a0:
                    25:24:c8:fa:a4:1a:03:e9:e7:2c:95:a5:b6:5a:ae:
                    5a:ef:7a:73:2d:63:ec:0b:8b:88:67:f1:ca:db:9f:
                    9c:5b:13:ee:47:25:75:2c:e1:02:f3:dc:b1:f9:39:
                    14:ec:b1:fa:eb:da:e0:ff:11:be:5d:e5:bf:62:59:
                    6b:25:4c:e8:5e:3b:db:b6:cc:3e:88:81:95:fb:0e:
                    6f:a5:15:74:ca:c9:a5:f9:bb:dc:50:0e:98:a8:50:
                    df:47:0e:98:79:7a:c6:45:b5:e1:cf:67:99:f2:4c:
                    65:91:e7:c2:9f:76:cb:5b:3b:2b:09:b1:18:33:2c:
                    01:0b:80:ca:d8:bd:37:e4:0a:05:cd:c3:11:16:e9:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:25:41:18:FD:6F:BB:F7:16:25:5F:4A:7F:3E:03:1C:70:EB:B4:1F
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:92:69:ae:e7:ea:33:ee:e5:68:f1:4c:15:a9:75:98:0e:a1:
         93:bb:f0:d6:1d:9c:f5:1f:c7:69:cd:ac:9f:e0:03:d7:8e:19:
         0d:eb:72:7b:ae:f0:a3:b6:0c:98:8d:c5:82:de:fd:5e:a2:6d:
         fc:b9:b0:cf:c1:29:50:58:f8:ab:93:6a:a2:45:08:6b:a1:7c:
         94:06:5c:9a:06:e4:eb:78:73:29:78:54:bd:bd:37:2d:6c:43:
         5a:fd:d9:bc:b4:3b:74:d1:28:93:fa:26:f4:03:65:b2:b7:73:
         52:b8:da:6b:9a:2a:37:ac:13:29:16:fb:44:ca:91:66:5c:ad:
         4e:d2:9c:96:6b:49:3e:70:b4:5c:e9:6e:c6:7a:4c:09:a7:47:
         70:36:c0:0a:d7:a2:91:3e:41:75:32:ee:f0:0f:5e:66:7f:50:
         d1:fc:0e:f5:fd:78:57:b9:27:ba:9f:c4:c4:25:0f:5d:5c:99:
         ab:71:a1:c5:21:cd:f4:4e:fd:f9:67:fc:1b:2a:90:c7:65:bb:
         a5:5c:47:72:8c:4a:fe:9a:82:b4:07:d0:a0:56:27:ab:2b:8c:
         f9:0e:b3:23:47:d9:39:e7:59:89:1f:62:7b:7e:d0:01:b8:a3:
         1a:50:d1:32:c2:a0:74:db:54:21:50:14:f1:a0:31:a0:64:5f:
         37:e4:57:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx
MUYxNTA4MDYwHhcNMjYwNjA1MDMwMzU4WhcNMjYwNjEyMDMwMzU4WjAYMRYwFAYD
VQQDEw02YTIyM2M5Zi1mNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3V/I4UCd8Wr7bvwgypw9To3d4xPSdsbLsctLbwIU4hncwiayGiGOGUm0I3sr
Lj+AM9E/WpY/SdfY6p8BcEtzyC4le0djqnFVZe9wAxFSIB03xP+tMzMZ7YR4oOk3
VChidxifhqW85sK+swdA91Hv/w2uqrQzvaAlJMj6pBoD6ecslaW2Wq5a73pzLWPs
C4uIZ/HK25+cWxPuRyV1LOEC89yx+TkU7LH669rg/xG+XeW/YllrJUzoXjvbtsw+
iIGV+w5vpRV0ysml+bvcUA6YqFDfRw6YeXrGRbXhz2eZ8kxlkefCn3bLWzsrCbEY
MywBC4DK2L035AoFzcMRFumv6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDolQRj9
b7v3FiVfSn8+Axxw67QfMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw
MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE
dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZZJprufqM+7laPFMFal1mA6hk7vw1h2c9R/Hac2sn+AD144ZDetye67wo7YM
mI3Fgt79XqJt/Lmwz8EpUFj4q5NqokUIa6F8lAZcmgbk63hzKXhUvb03LWxDWv3Z
vLQ7dNEok/om9ANlsrdzUrjaa5oqN6wTKRb7RMqRZlytTtKclmtJPnC0XOluxnpM
CadHcDbACteikT5BdTLu8A9eZn9Q0fwO9f14V7knup/ExCUPXVyZq3GhxSHN9E79
+Wf8GyqQx2W7pVxHcoxK/pqCtAfQoFYnqyuM+Q6zI0fZOedZiR9ie37QAbijGlDR
MsKgdNtUIVAU8aAxoGRfN+RXhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:55 2026 by rpki-client