Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File:                     bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier:          KpAAnCQ2eL0nLLbXdRumy25JhSQtWwTJVQEQxGnmjog=
Subject key identifier:   A1:4F:35:00:F6:E7:A7:D3:F2:CC:A7:13:AA:B0:5E:79:9A:6B:CE:B1
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer:       /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial:       0A60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number:          0A50
Signing time:             Wed 10 Jun 2026 19:43:47 +0000
Manifest this update:     Wed 10 Jun 2026 19:43:47 +0000
Manifest next update:     Wed 17 Jun 2026 19:43:47 +0000
Files and hashes:         1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: faHZ1E/CvOsAPB8KDAx2Qe5E6OP6w9lVgAzFcXjP3eg=)
                          2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: 1mRV89mqNc+nLOCZGSyR4uuy7wclwLlHSJ3xFNf7VPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
                          rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2656 (0xa60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
        Validity
            Not Before: Jun 10 19:43:47 2026 GMT
            Not After : Jun 17 19:43:47 2026 GMT
        Subject: CN=6a29be73-a6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:b0:53:3f:e8:25:b8:cf:fe:21:ec:01:1d:
                    42:6e:77:14:a6:ec:85:d6:f7:3e:9b:e5:a9:53:fd:
                    d7:10:cc:0b:fe:5f:10:d8:ad:e4:c7:88:b6:14:17:
                    97:bb:5a:89:37:af:72:c3:6a:59:d3:21:12:2f:34:
                    80:be:37:b2:e9:cd:6e:82:e9:aa:86:ce:a4:9e:c9:
                    2b:c1:c6:5a:5a:b4:df:db:fe:11:f7:e9:c6:95:88:
                    81:e6:8f:d9:fe:c3:d9:9d:9e:6a:67:0c:55:69:ac:
                    44:97:50:2c:ab:d2:27:be:dc:03:a2:f4:d3:f7:fc:
                    2e:9c:fa:c3:6a:c7:64:fd:f7:43:f4:6e:c4:67:97:
                    8e:96:01:96:ce:74:34:7f:18:d6:3f:b6:ca:8c:32:
                    69:8b:23:89:df:f2:3a:7f:76:d4:07:57:8c:5d:c2:
                    21:ff:c3:da:8d:b1:fa:2b:3d:92:c9:99:f2:e7:71:
                    31:dd:6d:ea:81:8b:f9:57:67:12:47:d6:16:2d:c5:
                    a3:97:8e:8a:84:a0:72:00:42:ca:b2:95:8e:2e:30:
                    17:49:5a:bd:ee:cd:65:04:32:4e:d9:1c:29:e0:0d:
                    12:39:5e:dc:74:3c:19:8d:4c:f8:d6:68:00:77:67:
                    a8:e6:3f:54:ff:ca:9a:bd:3a:a9:19:38:1e:5d:e5:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:35:00:F6:E7:A7:D3:F2:CC:A7:13:AA:B0:5E:79:9A:6B:CE:B1
            X509v3 Authority Key Identifier:
                keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:75:7c:32:e4:32:8a:5f:0c:0d:5e:67:77:2d:df:92:35:
         fb:65:81:eb:92:68:d0:0b:da:3d:46:55:4a:de:f4:11:d7:5d:
         a4:da:d3:da:a1:bd:9a:9f:77:34:a1:c1:b0:51:5e:6a:49:e3:
         92:d8:82:f9:a8:fc:0f:38:5f:ab:24:a7:5a:39:9e:58:68:ac:
         68:82:7b:8b:ca:bb:74:17:d1:c6:3a:a8:9b:13:0b:e5:09:1a:
         58:15:9a:7a:ea:10:26:8f:aa:2f:1f:5f:fc:f6:6a:21:e8:ff:
         81:ce:40:e0:5e:29:17:13:f8:5f:6f:ce:be:39:d4:52:e8:4e:
         40:22:da:b3:e8:e0:8f:21:95:7e:73:50:81:a5:84:4a:db:57:
         ad:94:4d:4b:dc:bf:ab:fb:88:d3:d1:61:07:b6:f9:df:ca:87:
         72:69:ef:e2:dd:29:fd:0a:d6:10:c1:1b:eb:e2:1b:c5:3d:81:
         a9:cd:39:50:3f:be:91:12:be:36:8e:50:cb:09:33:02:3c:dd:
         dd:94:cb:09:86:33:b6:49:8d:5c:04:de:15:70:01:a5:96:f1:
         02:47:2d:ee:89:37:44:8d:d9:a3:cc:40:1d:7c:0d:c4:92:67:
         47:c4:a8:e4:99:86:64:6d:6e:16:2a:87:d5:4b:c9:d8:3d:93:
         56:27:a1:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB
NjNDRUYwNkMwHhcNMjYwNjEwMTk0MzQ3WhcNMjYwNjE3MTk0MzQ3WjAYMRYwFAYD
VQQDEw02YTI5YmU3My1hNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTiwUz/oJbjP/iHsAR1CbncUpuyF1vc+m+WpU/3XEMwL/l8Q2K3kx4i2FBeX
u1qJN69yw2pZ0yESLzSAvjey6c1ugumqhs6knskrwcZaWrTf2/4R9+nGlYiB5o/Z
/sPZnZ5qZwxVaaxEl1Asq9InvtwDovTT9/wunPrDasdk/fdD9G7EZ5eOlgGWznQ0
fxjWP7bKjDJpiyOJ3/I6f3bUB1eMXcIh/8PajbH6Kz2SyZny53Ex3W3qgYv5V2cS
R9YWLcWjl46KhKByAELKspWOLjAXSVq97s1lBDJO2Rwp4A0SOV7cdDwZjUz41mgA
d2eo5j9U/8qavTqpGTgeXeUlvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFPNQD2
56fT8synE6qwXnmaa86xMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG
NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT
NkxudGtqbS1jUWFtUE84R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABOh1fDLkMopfDA1eZ3ct35I1+2WB65Jo0AvaPUZVSt70EdddpNrT2qG9mp93
NKHBsFFeaknjktiC+aj8DzhfqySnWjmeWGisaIJ7i8q7dBfRxjqomxML5QkaWBWa
euoQJo+qLx9f/PZqIej/gc5A4F4pFxP4X2/OvjnUUuhOQCLas+jgjyGVfnNQgaWE
SttXrZRNS9y/q/uI09FhB7b538qHcmnv4t0p/QrWEMEb6+IbxT2Bqc05UD++kRK+
No5QywkzAjzd3ZTLCYYztkmNXATeFXABpZbxAkct7ok3RI3Zo8xAHXwNxJJnR8So
5JmGZG1uFiqH1UvJ2D2TViehmw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:20:06 2026 by rpki-client