Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          3R4lSztWKU+RAUa+DSe5sPDOugHB2xNmvt3pso1imc4=
Subject key identifier:   7B:52:B0:23:18:9A:CB:6A:A6:FB:98:4D:25:3D:E9:1C:73:57:DA:39
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0AD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0AC4
Signing time:             Wed 10 Jun 2026 19:28:54 +0000
Manifest this update:     Wed 10 Jun 2026 19:28:53 +0000
Manifest next update:     Wed 17 Jun 2026 19:28:53 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: 1TEdHgX5jh8AmUjIgIGsukuqxTwQzjUSCD4WwmCri+Q=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: MCzUyxnTRehmJMjRKUltJb5xp2lunuQcTMASQVMB0GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Jun 10 19:28:53 2026 GMT
            Not After : Jun 17 19:28:53 2026 GMT
        Subject: CN=6a29baf5-e74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:93:37:71:ab:38:ad:c9:18:1f:6f:3d:75:
                    b8:82:92:12:72:e6:8b:6a:b6:6f:7c:a0:ee:d2:44:
                    5a:9f:db:4c:a3:59:50:bd:28:2f:1f:bd:18:6a:29:
                    ac:44:aa:64:78:d1:92:42:e0:70:de:9a:2a:d7:f4:
                    05:2c:a4:59:d1:b2:df:28:9a:9b:56:1d:c4:ff:7f:
                    66:c5:62:4f:a3:8e:b5:2c:50:d1:d5:b7:2f:73:69:
                    1e:e2:de:1a:40:cc:4d:6b:41:39:98:4d:45:24:61:
                    36:7b:25:8a:f2:1a:e1:d8:e4:5e:46:24:bb:1c:82:
                    2f:fe:db:10:29:4e:76:03:9f:c7:c9:40:19:06:98:
                    0e:1b:2e:7a:f3:28:5c:bd:14:fc:ea:86:3f:30:5c:
                    f7:bd:cf:6d:8f:b5:e0:89:20:ed:e5:dd:31:4b:ac:
                    ba:5b:c9:84:f5:55:6a:c5:db:8c:51:6f:68:4e:e2:
                    24:7f:74:e4:41:72:80:7a:cc:67:d0:f4:a6:a4:8e:
                    ab:b7:7f:04:57:71:34:aa:3d:15:d0:27:80:43:e2:
                    50:f3:a5:5a:61:ad:67:f0:d7:ba:27:bb:21:24:4f:
                    63:96:a3:dd:00:d2:13:1a:2e:c2:a7:11:27:da:f3:
                    59:05:ca:06:db:d1:76:2d:27:57:4a:45:09:be:f3:
                    fd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:B0:23:18:9A:CB:6A:A6:FB:98:4D:25:3D:E9:1C:73:57:DA:39
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9d:df:7d:62:10:cd:b0:f5:a8:8f:0e:fa:27:02:0b:d7:68:
         89:d7:04:77:7a:98:20:a1:bf:27:c0:69:31:3b:f8:9b:df:b0:
         00:fc:de:7d:bc:50:46:79:f4:1b:f5:76:1c:91:a9:1e:a1:6f:
         a5:f9:2c:65:52:00:a2:a6:9a:fa:d4:eb:f6:7d:59:e9:f3:76:
         13:12:de:e8:dd:ca:2a:35:3e:5c:05:4a:40:06:04:35:4b:58:
         8f:42:34:5d:20:39:6a:a0:95:76:29:ea:86:6b:1f:e0:d4:58:
         a4:6c:de:04:4a:e2:56:5e:66:44:8d:91:cb:fc:7c:5f:03:2f:
         98:56:23:0b:72:36:2c:8d:72:c5:ba:22:cb:58:f6:32:d7:d8:
         c8:9a:cc:e5:d4:9e:a6:39:9c:8b:6b:d7:d8:e7:28:18:b1:25:
         d0:5b:72:3f:27:97:2d:22:d7:81:3c:99:05:62:0d:d1:19:e3:
         b9:d4:e0:0d:6c:e7:25:68:64:5c:d1:b5:c6:fc:8d:71:b1:3c:
         00:8a:fa:8a:96:77:b7:d6:6b:9c:97:c6:48:29:46:af:cf:58:
         78:23:bc:aa:35:72:f5:8f:0d:f2:12:69:ba:06:dc:68:f5:3f:
         bb:f0:9e:bf:7b:bc:16:af:a5:89:ff:0b:3e:5d:26:b2:31:a6:
         d0:d7:dc:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY2QzUxMTAvBgNVBAUTKEZFRjEzQUI4NTJCODkyQUJBMjhCN0Y0QjI1MjU3MDg5
OTY0RDc2NkIwHhcNMjYwNjEwMTkyODUzWhcNMjYwNjE3MTkyODUzWjAYMRYwFAYD
VQQDEw02YTI5YmFmNS1lNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35yTN3GrOK3JGB9vPXW4gpIScuaLarZvfKDu0kRan9tMo1lQvSgvH70Yaims
RKpkeNGSQuBw3poq1/QFLKRZ0bLfKJqbVh3E/39mxWJPo461LFDR1bcvc2ke4t4a
QMxNa0E5mE1FJGE2eyWK8hrh2OReRiS7HIIv/tsQKU52A5/HyUAZBpgOGy568yhc
vRT86oY/MFz3vc9tj7XgiSDt5d0xS6y6W8mE9VVqxduMUW9oTuIkf3TkQXKAesxn
0PSmpI6rt38EV3E0qj0V0CeAQ+JQ86VaYa1n8Ne6J7shJE9jlqPdANITGi7CpxEn
2vNZBcoG29F2LSdXSkUJvvP9fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtSsCMY
mstqpvuYTSU96RxzV9o5MB8GA1UdIwQYMBaAFP7xOrhSuJKroot/SyUlcImWTXZr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjZDNS9BMkNEMzU0RTc3
RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtxdWlpMzlMSlNWd2laWk5k
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192RTZ1Rks0a3F1aWkzOUxKU1Z3aVpaTmRtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjZDNS9BMkNEMzU0RTc3RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtx
dWlpMzlMSlNWd2laWk5kbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiZ3ffWIQzbD1qI8O+icCC9doidcEd3qYIKG/J8BpMTv4m9+wAPzefbxQRnn0
G/V2HJGpHqFvpfksZVIAoqaa+tTr9n1Z6fN2ExLe6N3KKjU+XAVKQAYENUtYj0I0
XSA5aqCVdinqhmsf4NRYpGzeBEriVl5mRI2Ry/x8XwMvmFYjC3I2LI1yxboiy1j2
MtfYyJrM5dSepjmci2vX2OcoGLEl0FtyPyeXLSLXgTyZBWIN0RnjudTgDWznJWhk
XNG1xvyNcbE8AIr6ipZ3t9ZrnJfGSClGr89YeCO8qjVy9Y8N8hJpugbcaPU/u/Ce
v3u8Fq+lif8LPl0msjGm0Nfczg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:24 2026 by rpki-client