Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          ktHJQxNpC4X+80SjDcMTKdwrXMtw02Lg9KHY8Fkcfy8=
Subject key identifier:   D6:BD:C5:6D:02:24:88:5A:4E:60:14:DA:69:FC:4A:97:5D:2C:F8:E9
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          01F4
Signing time:             Mon 01 Jun 2026 04:02:53 +0000
Manifest this update:     Mon 01 Jun 2026 04:02:53 +0000
Manifest next update:     Mon 08 Jun 2026 04:02:53 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: GOC7VCzFtPqhIQ570fynS+Z87R+Hrg3IEfwnuIVeA54=)
                          2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
                          3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Jun  1 04:02:53 2026 GMT
            Not After : Jun  8 04:02:53 2026 GMT
        Subject: CN=6a1d046d-b43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:99:a6:0e:12:21:f7:7c:9c:49:36:16:8e:
                    28:e5:af:ee:56:42:f6:fb:d2:53:5b:52:4b:2d:99:
                    dc:14:91:3d:c7:5f:71:85:10:22:d0:85:c2:7a:cb:
                    21:84:bf:3e:cf:03:c1:38:dd:fe:b4:d0:3c:8f:ff:
                    28:d8:81:41:f9:97:0d:bf:da:af:3b:b6:d1:a8:b3:
                    82:4e:0a:a0:39:34:9b:12:a2:37:fe:24:ab:1a:3a:
                    3b:c8:82:23:f4:64:5c:b7:09:43:00:98:3b:53:63:
                    9b:1d:1a:c1:95:76:a7:5f:a3:8e:93:06:5a:fa:45:
                    b7:36:9b:e2:2f:fc:46:f6:ab:16:19:19:0a:6e:05:
                    d1:db:6a:57:4f:ec:da:57:bd:65:66:2c:2f:c0:62:
                    62:11:93:bf:ee:98:2c:aa:9e:9c:d3:63:83:95:6a:
                    a9:4e:22:87:2a:b4:15:6e:eb:e0:8b:25:07:c4:f5:
                    2b:cf:aa:9d:1c:9e:c4:e6:65:74:b6:7a:ca:21:52:
                    1f:c6:b8:1f:71:49:4a:91:a0:ad:10:4c:f4:9a:7f:
                    db:42:f9:a4:26:04:64:43:59:1f:3e:50:58:ae:b9:
                    b3:c8:9c:d1:75:97:a9:8e:f0:57:b9:e5:77:ff:4b:
                    b0:ca:7a:21:37:eb:d7:94:6b:18:8c:aa:8d:92:91:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:C5:6D:02:24:88:5A:4E:60:14:DA:69:FC:4A:97:5D:2C:F8:E9
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:a3:4b:e0:ce:dd:da:6a:60:26:4d:93:21:07:b3:28:2d:
         b7:e5:50:e4:6b:2c:b6:26:99:2e:ec:08:e9:6c:a4:e3:2d:d4:
         ea:cd:56:b7:ab:11:e9:9f:02:32:e4:c3:3b:77:bb:24:41:50:
         3d:3c:2f:9a:b5:74:76:7f:de:c1:6f:36:11:e2:62:f6:4b:33:
         7e:18:ab:a0:6d:7f:97:c1:6c:16:20:78:07:b2:e5:42:16:de:
         08:3a:08:65:8f:cd:9c:9b:7e:db:0e:90:a0:e4:c6:ef:e8:50:
         dc:74:98:43:8a:dc:fe:5d:28:62:2a:9c:6c:5e:c7:57:e7:fb:
         1f:b0:c9:fb:cd:76:cd:dd:42:08:fa:b4:15:f7:ee:b6:1d:97:
         2f:38:b3:f2:00:1c:76:69:61:bb:3c:7d:17:e5:74:5b:34:1d:
         0c:57:ea:bd:0a:58:e5:60:3d:ab:a2:42:9d:64:90:19:b4:36:
         c5:21:9e:13:39:14:c1:9a:fc:95:ce:e6:a2:f3:f5:f3:b3:0f:
         39:94:9c:e9:fb:28:bd:4b:54:fc:94:ff:2f:90:9a:bf:d3:ce:
         d1:08:73:9f:14:6d:26:dd:81:f0:21:1e:ed:6b:58:29:7d:c3:
         85:d6:ce:30:f8:39:59:46:63:be:ba:e8:d0:03:95:da:46:ba:
         24:63:4a:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1
QTc0NDA5OUQwHhcNMjYwNjAxMDQwMjUzWhcNMjYwNjA4MDQwMjUzWjAYMRYwFAYD
VQQDEw02YTFkMDQ2ZC1iNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr2SZpg4SIfd8nEk2Fo4o5a/uVkL2+9JTW1JLLZncFJE9x19xhRAi0IXCessh
hL8+zwPBON3+tNA8j/8o2IFB+ZcNv9qvO7bRqLOCTgqgOTSbEqI3/iSrGjo7yIIj
9GRctwlDAJg7U2ObHRrBlXanX6OOkwZa+kW3NpviL/xG9qsWGRkKbgXR22pXT+za
V71lZiwvwGJiEZO/7pgsqp6c02ODlWqpTiKHKrQVbuvgiyUHxPUrz6qdHJ7E5mV0
tnrKIVIfxrgfcUlKkaCtEEz0mn/bQvmkJgRkQ1kfPlBYrrmzyJzRdZepjvBXueV3
/0uwynohN+vXlGsYjKqNkpHQnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNa9xW0C
JIhaTmAU2mn8SpddLPjpMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3
MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu
NUVWVWswbGJScnBhZEVDWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnhqjS+DO3dpqYCZNkyEHsygtt+VQ5GsstiaZLuwI6Wyk4y3U6s1Wt6sR6Z8C
MuTDO3e7JEFQPTwvmrV0dn/ewW82EeJi9kszfhiroG1/l8FsFiB4B7LlQhbeCDoI
ZY/NnJt+2w6QoOTG7+hQ3HSYQ4rc/l0oYiqcbF7HV+f7H7DJ+812zd1CCPq0Fffu
th2XLziz8gAcdmlhuzx9F+V0WzQdDFfqvQpY5WA9q6JCnWSQGbQ2xSGeEzkUwZr8
lc7movP187MPOZSc6fsovUtU/JT/L5Cav9PO0QhznxRtJt2B8CEe7WtYKX3DhdbO
MPg5WUZjvrro0AOV2ka6JGNK0g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:31 2026 by rpki-client