Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
File:                     SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json)
Hash identifier:          au3/EHJM5w9H6vG7D2S1Lls/Xa0MZ7aMOpYlx0ZEs94=
Subject key identifier:   8A:32:FE:65:0E:FF:7E:76:2A:B4:6A:43:71:A0:75:6F:81:85:69:13
Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
Certificate issuer:       /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
Manifest number:          0252
Signing time:             Mon 01 Jun 2026 03:04:47 +0000
Manifest this update:     Mon 01 Jun 2026 03:04:47 +0000
Manifest next update:     Mon 08 Jun 2026 03:04:47 +0000
Files and hashes:         1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: 3hsXvDNyicO95iKas/g1tHMQQuIsT+fAwzdjhQBTOCE=)
                          2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: h5AorI3QkOoBAwObfVPrh+bfy5EutI9s6EKcaVcQGYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
                          rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
        Validity
            Not Before: Jun  1 03:04:47 2026 GMT
            Not After : Jun  8 03:04:47 2026 GMT
        Subject: CN=6a1cf6cf-b74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:8a:08:3b:de:d4:02:10:9d:74:7f:fd:ec:
                    a9:e3:1b:76:eb:fe:ed:56:dd:aa:6e:56:93:5f:95:
                    9a:ed:94:d6:82:a1:01:96:ad:b6:53:74:cb:61:29:
                    d3:3d:c0:67:a9:6c:69:f9:56:87:1e:a4:d0:b4:8f:
                    d8:46:c1:23:9d:8e:42:7d:8b:d2:69:95:74:81:e1:
                    24:be:36:c5:89:5f:c9:94:64:a8:74:6f:8a:fa:1e:
                    ba:a8:34:fe:59:6f:a7:18:ea:93:35:29:7a:f7:4e:
                    01:b9:58:cf:36:d5:8b:d6:c3:b7:dd:c6:7e:17:2b:
                    88:04:02:f7:4c:74:71:82:85:ba:12:17:10:ef:7d:
                    4b:71:d3:8a:34:fc:20:12:b9:75:ab:d3:9c:9d:29:
                    a1:00:cb:e7:69:c5:78:ad:d4:f3:65:30:a3:4d:b7:
                    5a:b3:e1:0c:e3:1d:6c:9e:51:59:1f:19:78:e6:64:
                    a0:92:41:9a:48:20:a9:13:2b:73:bd:3b:66:fb:32:
                    4f:ca:95:55:df:3f:af:6d:4b:c2:bc:d2:1e:0d:dd:
                    38:d7:6e:82:64:7b:3d:86:a4:80:bd:10:0f:8b:c7:
                    56:5b:5a:8b:7b:c6:f3:65:b8:b0:97:cb:e3:92:6f:
                    39:f8:aa:71:00:8a:93:62:6a:f2:59:25:2f:80:8f:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:32:FE:65:0E:FF:7E:76:2A:B4:6A:43:71:A0:75:6F:81:85:69:13
            X509v3 Authority Key Identifier:
                keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:45:ab:e2:19:ec:1c:52:93:da:05:64:6b:09:a6:4b:64:f1:
         2a:0a:8e:60:fd:48:66:8f:7f:81:e2:5f:f2:f1:9b:88:96:70:
         8a:78:5a:9e:2d:65:87:ce:2e:e2:90:48:73:e3:77:e9:12:b7:
         25:de:dd:2c:3f:14:c9:e9:fa:e1:39:9c:dc:cb:b1:b1:14:e0:
         80:e2:de:da:09:b5:12:a1:33:1f:f9:ef:4c:5b:30:88:92:da:
         21:ab:d1:42:19:9b:7c:92:94:54:34:5a:ab:c6:16:52:57:78:
         21:b6:8f:c0:75:14:b1:24:02:56:4d:55:34:24:5e:9a:41:af:
         59:ac:ec:b3:8e:b0:e3:c6:e8:34:3a:6c:fb:ee:53:df:01:a1:
         af:f1:34:3b:6f:da:35:91:11:67:1d:21:29:61:09:ee:56:b8:
         c4:4e:24:c5:e1:29:d3:0b:6f:6b:45:35:97:b5:6a:e7:2f:69:
         ae:9f:f2:6a:06:77:b6:ab:8f:f5:81:d0:cf:37:93:62:99:32:
         a0:3f:1f:b5:9c:e3:52:86:f1:3b:80:00:7a:59:eb:7d:7c:8a:
         e6:79:af:65:eb:f8:fa:9c:34:ae:62:fd:ac:06:3f:cb:f1:20:
         d3:81:f2:aa:de:a8:a8:25:92:0b:31:22:25:a5:99:38:b5:3a:
         a8:c0:29:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEzODkxMTAvBgNVBAUTKDQ4RjUwRTE2QjgzMDVBQTJDNzU2RDIxQzhGMEZENTA5
MzM4QTVDMjkwHhcNMjYwNjAxMDMwNDQ3WhcNMjYwNjA4MDMwNDQ3WjAYMRYwFAYD
VQQDEw02YTFjZjZjZi1iNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkmKCDve1AIQnXR//eyp4xt26/7tVt2qblaTX5Wa7ZTWgqEBlq22U3TLYSnT
PcBnqWxp+VaHHqTQtI/YRsEjnY5CfYvSaZV0geEkvjbFiV/JlGSodG+K+h66qDT+
WW+nGOqTNSl6904BuVjPNtWL1sO33cZ+FyuIBAL3THRxgoW6EhcQ731LcdOKNPwg
Erl1q9OcnSmhAMvnacV4rdTzZTCjTbdas+EM4x1snlFZHxl45mSgkkGaSCCpEytz
vTtm+zJPypVV3z+vbUvCvNIeDd04126CZHs9hqSAvRAPi8dWW1qLe8bzZbiwl8vj
km85+KpxAIqTYmryWSUvgI/L0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoy/mUO
/352KrRqQ3GgdW+BhWkTMB8GA1UdIwQYMBaAFEj1Dha4MFqix1bSHI8P1Qkzilwp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTM4OS9CMjE3MEI3NEQz
QTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dxTEhWdEljandfVkNUT0tY
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NQVU9Gcmd3V3FMSFZ0SWNqd19WQ1RPS1hDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTM4OS9CMjE3MEI3NEQzQTMxMUVEODgwNkFDMTFDNEY5QUUwMi9TUFVPRnJnd1dx
TEhWdEljandfVkNUT0tYQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR0Wr4hnsHFKT2gVkawmmS2TxKgqOYP1IZo9/geJf8vGbiJZwinhani1lh84u
4pBIc+N36RK3Jd7dLD8Uyen64Tmc3MuxsRTggOLe2gm1EqEzH/nvTFswiJLaIavR
QhmbfJKUVDRaq8YWUld4IbaPwHUUsSQCVk1VNCRemkGvWazss46w48boNDps++5T
3wGhr/E0O2/aNZERZx0hKWEJ7la4xE4kxeEp0wtva0U1l7Vq5y9prp/yagZ3tquP
9YHQzzeTYpkyoD8ftZzjUobxO4AAelnrfXyK5nmvZev4+pw0rmL9rAY/y/Eg04Hy
qt6oqCWSCzEiJaWZOLU6qMAp8g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:45 2026 by rpki-client