Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
File:                     jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json)
Hash identifier:          hZFVpmhWJUl4d46XyEjSlpoboAf+Byu1ECLcRPb2lic=
Subject key identifier:   83:80:38:0C:9D:60:72:E0:73:03:4F:15:2C:CB:08:21:2E:4B:A2:20
Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
Certificate issuer:       /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
Manifest number:          014D
Signing time:             Thu 11 Jun 2026 07:29:39 +0000
Manifest this update:     Thu 11 Jun 2026 07:29:39 +0000
Manifest next update:     Thu 18 Jun 2026 07:29:39 +0000
Files and hashes:         1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: whbyP5QnjQ/8y1BiN3QJzeSVkckGGQ5EqfFrFFOunD0=)
                          2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
        Validity
            Not Before: Jun 11 07:29:39 2026 GMT
            Not After : Jun 18 07:29:39 2026 GMT
        Subject: CN=6a2a63e3-0850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:82:42:e2:35:41:8a:64:f6:2a:16:6f:fd:
                    8d:9a:35:c2:16:4d:96:cd:ff:2d:ef:2c:64:ce:23:
                    85:3c:68:72:16:3c:21:65:1d:f0:f2:ea:86:75:35:
                    06:51:3c:9f:41:a8:a4:e3:ce:69:73:2c:ae:00:d4:
                    0f:da:4e:73:0d:6e:b1:df:28:3e:7b:bd:6b:b0:d9:
                    ac:05:69:06:d5:ab:73:fc:3e:06:7a:2e:59:b3:4b:
                    78:a4:53:df:97:bc:dc:a3:08:42:5d:c2:35:93:13:
                    86:31:63:79:82:b4:b1:4d:a3:57:04:34:24:fd:83:
                    c4:6f:8a:45:75:78:27:b2:85:7a:70:76:b0:37:ec:
                    3b:6a:5e:78:92:bb:a0:83:b4:67:d9:d1:a1:28:b6:
                    00:c8:8e:9b:a7:fb:3d:aa:3e:86:22:51:b7:23:ae:
                    62:b4:77:94:b7:1d:4b:e1:e3:f1:33:9a:9e:1a:90:
                    6b:28:71:45:15:db:d7:08:ec:c4:df:e2:64:ec:b4:
                    b0:f7:93:ab:03:6c:99:eb:a8:27:31:84:04:53:f2:
                    48:b0:08:56:c3:af:bd:82:58:d7:07:33:9f:2b:ee:
                    60:5c:5b:6b:7d:20:f2:f4:3c:7b:91:e4:84:f8:a8:
                    62:d0:3b:31:56:4b:71:27:e6:1e:4c:c9:f0:48:a9:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:80:38:0C:9D:60:72:E0:73:03:4F:15:2C:CB:08:21:2E:4B:A2:20
            X509v3 Authority Key Identifier:
                keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:60:5d:b6:2e:7e:d0:23:e2:41:f0:1c:e4:6a:f0:4c:c5:
         cb:88:17:54:6f:ba:1e:cf:06:6c:ef:32:e5:29:ca:81:89:2f:
         dd:61:09:43:e9:ca:f8:8c:12:5d:f1:26:31:5a:1c:6b:55:2e:
         ec:f6:fb:6c:d0:e5:12:ae:66:b7:3b:f6:d5:ad:7a:1c:43:9f:
         2b:c0:a2:f2:2b:22:91:f0:70:54:5d:21:af:29:7c:01:c0:79:
         8d:77:9c:56:f5:cd:ec:fc:fb:8a:e5:42:2d:4f:f2:6b:fe:27:
         c1:53:b0:be:6c:10:e1:92:50:73:e3:39:2c:2e:68:1b:93:86:
         a2:58:0d:40:d1:34:14:e1:b7:20:b6:61:ea:12:8d:5a:3a:e0:
         d9:22:d5:54:f1:ac:22:62:0b:aa:73:e5:de:d7:4c:d2:64:a1:
         33:4e:06:a6:41:75:f5:ee:dd:f1:5c:1e:ed:87:94:de:f1:13:
         0e:3d:c5:49:f3:65:80:df:1b:82:10:c0:13:2c:0e:91:38:b0:
         f4:f4:49:48:93:e3:08:43:93:ea:81:73:fe:66:7e:50:12:71:
         5f:53:f5:51:5e:b8:e2:ac:dc:37:7e:09:a1:ac:bb:d2:ee:35:
         8f:17:1e:66:71:74:b4:76:ae:e0:93:9b:f4:07:ea:19:f8:b1:
         85:60:f3:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVDQkExMTAvBgNVBAUTKDhEOEE4MEVDNzIwQUU3RUQ1M0ZEMjEwM0U4RTY5Qzg1
NTVBRDBGODYwHhcNMjYwNjExMDcyOTM5WhcNMjYwNjE4MDcyOTM5WjAYMRYwFAYD
VQQDEw02YTJhNjNlMy0wODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1mCQuI1QYpk9ioWb/2NmjXCFk2Wzf8t7yxkziOFPGhyFjwhZR3w8uqGdTUG
UTyfQaik485pcyyuANQP2k5zDW6x3yg+e71rsNmsBWkG1atz/D4Gei5Zs0t4pFPf
l7zcowhCXcI1kxOGMWN5grSxTaNXBDQk/YPEb4pFdXgnsoV6cHawN+w7al54krug
g7Rn2dGhKLYAyI6bp/s9qj6GIlG3I65itHeUtx1L4ePxM5qeGpBrKHFFFdvXCOzE
3+Jk7LSw95OrA2yZ66gnMYQEU/JIsAhWw6+9gljXBzOfK+5gXFtrfSDy9Dx7keSE
+Khi0DsxVktxJ+YeTMnwSKn/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOAOAyd
YHLgcwNPFSzLCCEuS6IgMB8GA1UdIwQYMBaAFI2KgOxyCuftU/0hA+jmnIVVrQ+G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUNCQS81ODNFMkI5QTZC
NjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUtMVRfU0VENk9hY2hWV3RE
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUNCQS81ODNFMkI5QTZCNjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUt
MVRfU0VENk9hY2hWV3RENFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIOVgXbYuftAj4kHwHORq8EzFy4gXVG+6Hs8GbO8y5SnKgYkv3WEJQ+nK+IwS
XfEmMVoca1Uu7Pb7bNDlEq5mtzv21a16HEOfK8Ci8isikfBwVF0hryl8AcB5jXec
VvXN7Pz7iuVCLU/ya/4nwVOwvmwQ4ZJQc+M5LC5oG5OGolgNQNE0FOG3ILZh6hKN
Wjrg2SLVVPGsImILqnPl3tdM0mShM04GpkF19e7d8Vwe7YeU3vETDj3FSfNlgN8b
ghDAEywOkTiw9PRJSJPjCEOT6oFz/mZ+UBJxX1P1UV644qzcN34Joay70u41jxce
ZnF0tHau4JOb9AfqGfixhWDzIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:29:14 2026 by rpki-client