Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File:                     JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier:          66K/RC+i2I/+B4f1qWzEfbOdvBDfwhsF9pIpVEAHM0k=
Subject key identifier:   5C:34:DF:4E:E5:CA:05:50:E8:59:DA:80:8B:29:21:61:FA:D9:31:FB
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer:       /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial:       085A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number:          0830
Signing time:             Thu 04 Jun 2026 21:11:50 +0000
Manifest this update:     Thu 04 Jun 2026 21:11:50 +0000
Manifest next update:     Thu 11 Jun 2026 21:11:50 +0000
Files and hashes:         1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: MyOu4+cCH9Wtcup0djVoOlCscmQjdW8Ahe3qxXrgggg=)
                          2: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=)
                          3: 7C76080E08D611EE82522448C4F9AE02.roa (hash: RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=)
                          4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=)
                          5: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
        Validity
            Not Before: Jun  4 21:11:50 2026 GMT
            Not After : Jun 11 21:11:50 2026 GMT
        Subject: CN=6a21ea16-3fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:b0:16:96:79:ba:85:88:20:5f:c5:4a:09:
                    9e:a3:2c:e3:c4:b5:90:4c:25:eb:e9:5d:0c:81:74:
                    ab:c3:46:59:a6:b5:a0:90:ce:b7:32:25:a8:69:a5:
                    0d:8e:3a:43:f3:20:38:8e:cd:3b:6b:43:9b:1c:d9:
                    24:7e:b3:de:9c:4d:e5:b3:0b:3f:d5:dc:d6:d2:d6:
                    f0:79:c6:aa:71:84:37:e9:9f:10:a8:fb:2f:4a:3e:
                    c5:a5:2c:4c:2d:fa:b3:ed:e2:4f:e3:09:21:34:a4:
                    76:a0:15:e9:cb:46:2f:58:5a:de:1a:9c:ef:d3:77:
                    0b:10:bc:71:85:5a:4f:8d:a7:45:13:9e:3f:25:3b:
                    4e:c6:f0:a3:8b:8b:bd:37:19:7e:76:6c:10:7d:2c:
                    af:e1:99:59:73:6f:fc:88:18:c7:ef:c2:de:e2:ac:
                    b2:82:db:7f:cc:a8:b7:23:75:73:b7:b9:52:a0:b7:
                    aa:eb:c5:e5:35:96:b3:ce:09:35:b0:24:e6:cc:36:
                    2a:de:80:d6:fa:9b:9d:83:89:62:46:9c:a4:d8:a6:
                    eb:cd:86:4d:d6:2a:40:43:6e:53:79:bf:79:a4:62:
                    89:e3:fb:fc:7f:46:9b:3b:70:bb:57:98:4b:a4:d2:
                    a5:2d:01:a1:3a:b7:21:2f:95:01:c0:ee:cb:52:b3:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:34:DF:4E:E5:CA:05:50:E8:59:DA:80:8B:29:21:61:FA:D9:31:FB
            X509v3 Authority Key Identifier:
                keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d6:c6:8c:fa:ce:e3:f8:d7:da:d7:92:b2:05:d0:7d:97:12:
         d9:85:48:23:70:44:81:c0:d2:e3:4e:fe:a8:17:eb:52:f0:31:
         24:04:f0:b3:4c:1f:33:fc:c1:55:dc:6c:d9:a2:d4:41:0a:c8:
         94:fe:f2:26:37:26:31:66:90:71:5e:3d:5c:b6:54:da:41:79:
         bf:8b:2a:a7:5f:67:59:08:a3:58:72:75:e2:c4:c1:6e:8e:ad:
         ce:a4:24:48:6f:1f:ea:b3:ae:a8:b3:cf:80:39:34:30:16:7c:
         36:c5:ad:16:5c:c1:85:5b:70:3e:f3:ba:96:89:69:15:e2:dc:
         47:2e:bb:1e:56:74:81:f0:46:30:3c:22:2f:88:36:4a:8f:da:
         76:14:e4:89:7d:db:f7:6a:e5:09:d1:27:5a:b6:7d:e8:e6:fa:
         0a:5e:d0:7e:18:40:48:1f:58:96:ff:95:66:4a:93:86:cb:07:
         2d:31:f3:ef:f3:85:ae:e3:7a:a7:f6:37:28:aa:ed:a9:8f:c3:
         a8:a8:c2:56:33:02:2a:b7:56:b8:95:08:53:14:4c:73:8f:8a:
         99:51:84:a0:15:d0:74:96:09:7c:ab:2e:8a:f3:b2:b2:27:56:
         09:8c:4a:da:e4:b1:7b:db:0c:35:1c:21:d2:bd:00:9f:c9:12:
         66:bf:a1:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5
MzU0MkE3RjIwHhcNMjYwNjA0MjExMTUwWhcNMjYwNjExMjExMTUwWjAYMRYwFAYD
VQQDEw02YTIxZWExNi0zZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyb2wFpZ5uoWIIF/FSgmeoyzjxLWQTCXr6V0MgXSrw0ZZprWgkM63MiWoaaUN
jjpD8yA4js07a0ObHNkkfrPenE3lsws/1dzW0tbwecaqcYQ36Z8QqPsvSj7FpSxM
Lfqz7eJP4wkhNKR2oBXpy0YvWFreGpzv03cLELxxhVpPjadFE54/JTtOxvCji4u9
Nxl+dmwQfSyv4ZlZc2/8iBjH78Le4qyygtt/zKi3I3Vzt7lSoLeq68XlNZazzgk1
sCTmzDYq3oDW+pudg4liRpyk2KbrzYZN1ipAQ25Teb95pGKJ4/v8f0abO3C7V5hL
pNKlLQGhOrchL5UBwO7LUrN70QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFw0307l
ygVQ6FnagIspIWH62TH7MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0
R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQtbGjPrO4/jX2teSsgXQfZcS2YVII3BEgcDS407+qBfrUvAxJATws0wfM/zB
Vdxs2aLUQQrIlP7yJjcmMWaQcV49XLZU2kF5v4sqp19nWQijWHJ14sTBbo6tzqQk
SG8f6rOuqLPPgDk0MBZ8NsWtFlzBhVtwPvO6lolpFeLcRy67HlZ0gfBGMDwiL4g2
So/adhTkiX3b92rlCdEnWrZ96Ob6Cl7QfhhASB9Ylv+VZkqThssHLTHz7/OFruN6
p/Y3KKrtqY/DqKjCVjMCKrdWuJUIUxRMc4+KmVGEoBXQdJYJfKsuivOysidWCYxK
2uSxe9sMNRwh0r0An8kSZr+h8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:00 2026 by rpki-client