Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
File:                     jpwcZNAr9AP0GtScU0AD52h3NPw.mft (raw, json)
Hash identifier:          RbDVN/7CNdLQjH5MW4h81oK3xLgYs0V9tVQiqLCuyYE=
Subject key identifier:   EB:AF:1F:4F:3A:27:23:5B:06:99:E0:30:C2:A4:30:3D:B2:DD:C0:76
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Certificate issuer:       /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
Manifest number:          34
Signing time:             Fri 05 Jun 2026 09:03:45 +0000
Manifest this update:     Fri 05 Jun 2026 09:03:45 +0000
Manifest next update:     Fri 12 Jun 2026 09:03:45 +0000
Files and hashes:         1: jpwcZNAr9AP0GtScU0AD52h3NPw.crl (hash: FSySl0QcDAqsRQq9eneEt9f5LYzXXZvZEoFGIkzTWVM=)
                          2: 2804E38A1C9C11F1AD8EA332233D8C67.roa (hash: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
        Validity
            Not Before: Jun  5 09:03:45 2026 GMT
            Not After : Jun 12 09:03:45 2026 GMT
        Subject: CN=6a2290f1-2bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:d6:04:90:f8:46:3e:60:c7:a5:8f:c5:3c:
                    0d:c1:b6:d2:a9:6d:b2:84:43:b0:b5:55:24:0b:8c:
                    0f:44:1f:e1:51:83:fd:48:bd:f7:73:d5:44:ed:21:
                    79:2c:c2:ad:cc:fe:aa:93:fc:85:08:1c:90:a4:de:
                    d2:81:cb:96:fb:89:d0:48:f0:94:4c:7f:30:03:67:
                    85:66:b1:92:b0:89:f5:37:cb:da:57:45:76:26:0e:
                    ca:a1:11:20:b2:42:41:ba:f1:18:41:dc:d0:0a:1b:
                    a2:72:b6:93:83:8f:eb:bd:b2:10:c5:54:8f:a1:b1:
                    51:c3:bf:fa:d1:1e:a6:81:db:27:1f:cd:b9:3c:00:
                    27:53:3f:ba:a9:69:fb:a5:d3:98:4f:0d:8d:3d:e2:
                    58:b4:71:4d:7e:53:39:4d:c0:be:7c:87:d2:b1:68:
                    77:78:c7:e5:cb:d7:41:df:22:55:ec:01:15:f9:72:
                    94:17:67:5c:f5:65:9a:5b:99:ef:9e:8a:bc:d5:5d:
                    6f:75:10:b3:d0:81:f2:62:07:13:c5:4f:18:99:0d:
                    a9:e4:0f:ba:7b:8a:28:68:d9:c9:6f:11:b1:21:cb:
                    7f:d5:57:19:ea:f6:5c:51:aa:20:88:e7:72:92:0e:
                    cd:18:8e:51:7f:86:12:8c:73:ba:af:98:33:29:2e:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:1F:4F:3A:27:23:5B:06:99:E0:30:C2:A4:30:3D:B2:DD:C0:76
            X509v3 Authority Key Identifier:
                keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ab:1d:9e:33:02:72:ab:c5:e3:17:24:1f:e7:fd:8e:bc:90:
         d1:2b:a2:92:55:33:9d:2e:7e:c9:b4:11:62:9f:71:34:33:7f:
         00:9a:c0:5a:54:57:46:c7:9b:a7:61:84:79:1e:a2:f5:bc:40:
         cd:b7:1f:71:ac:cb:fe:39:25:00:05:e6:36:1c:64:d7:71:d3:
         9a:53:1e:cb:53:8c:19:62:b4:6f:90:e7:9e:a3:be:1f:8b:3a:
         50:96:ca:60:20:fe:fc:80:b1:d1:59:35:8e:ad:80:c1:d1:6e:
         9f:f3:5d:d5:92:f3:ed:c2:be:e2:58:b4:fd:25:ac:93:a5:36:
         a5:3e:d5:a6:e5:78:9b:74:98:73:17:ee:22:2f:09:41:93:e0:
         c3:d6:0b:dd:af:c8:d6:b4:fd:74:fe:30:64:fb:ef:31:c2:02:
         9a:51:99:fb:59:2b:f9:40:6a:88:69:2c:63:39:77:12:98:42:
         a6:c4:63:81:56:0a:49:e2:b7:25:4c:16:28:72:09:52:76:1a:
         4e:19:7b:db:72:27:7c:bb:55:62:22:96:9a:8d:7a:ff:91:c2:
         12:2f:26:3e:ad:f3:8e:ef:8c:79:1a:50:65:db:6f:69:ac:16:
         92:1b:41:6d:db:73:72:f8:1d:64:0c:e1:e3:c8:61:34:05:9f:
         df:ee:5c:8a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NzJENjExMC8GA1UEBRMoOEU5QzFDNjREMDJCRjQwM0Y0MUFENDlDNTM0MDAzRTc2
ODc3MzRGQzAeFw0yNjA2MDUwOTAzNDVaFw0yNjA2MTIwOTAzNDVaMBgxFjAUBgNV
BAMTDTZhMjI5MGYxLTJiZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6QdYEkPhGPmDHpY/FPA3BttKpbbKEQ7C1VSQLjA9EH+FRg/1Ivfdz1UTtIXks
wq3M/qqT/IUIHJCk3tKBy5b7idBI8JRMfzADZ4VmsZKwifU3y9pXRXYmDsqhESCy
QkG68RhB3NAKG6JytpODj+u9shDFVI+hsVHDv/rRHqaB2ycfzbk8ACdTP7qpaful
05hPDY094li0cU1+UzlNwL58h9KxaHd4x+XL10HfIlXsARX5cpQXZ1z1ZZpbme+e
irzVXW91ELPQgfJiBxPFTxiZDankD7p7iiho2clvEbEhy3/VVxnq9lxRqiCI53KS
Ds0YjlF/hhKMc7qvmDMpLjNNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU668fTzon
I1sGmeAwwqQwPbLdwHYwHwYDVR0jBBgwFoAUjpwcZNAr9AP0GtScU0AD52h3NPww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MkQ2L0IyNEJGMTZFMTcx
RjExRjFBM0E4RjJGQjA5M0Q4QzY3L2pwd2NaTkFyOUFQMEd0U2NVMEFENTJoM05Q
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvanB3Y1pOQXI5QVAwR3RTY1UwQUQ1MmgzTlB3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3
MkQ2L0IyNEJGMTZFMTcxRjExRjFBM0E4RjJGQjA5M0Q4QzY3L2pwd2NaTkFyOUFQ
MEd0U2NVMEFENTJoM05Qdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC0qx2eMwJyq8XjFyQf5/2OvJDRK6KSVTOdLn7JtBFin3E0M38AmsBaVFdGx5un
YYR5HqL1vEDNtx9xrMv+OSUABeY2HGTXcdOaUx7LU4wZYrRvkOeeo74fizpQlspg
IP78gLHRWTWOrYDB0W6f813VkvPtwr7iWLT9JayTpTalPtWm5XibdJhzF+4iLwlB
k+DD1gvdr8jWtP10/jBk++8xwgKaUZn7WSv5QGqIaSxjOXcSmEKmxGOBVgpJ4rcl
TBYocglSdhpOGXvbcid8u1ViIpaajXr/kcISLyY+rfOO74x5GlBl229prBaSG0Ft
23Ny+B1kDOHjyGE0BZ/f7lyK
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:18 2026 by rpki-client