Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
File:                     IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json)
Hash identifier:          PblWUm1Q8VPd7y16EuC0eXvz/EF9GOUJ6HydqJhfUbQ=
Subject key identifier:   CA:D8:9F:27:BF:42:3F:C0:C4:69:C6:D9:D2:D4:7A:9E:B1:BF:9D:57
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Certificate issuer:       /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial:       05C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
Manifest number:          05B3
Signing time:             Sun 14 Jun 2026 23:12:14 +0000
Manifest this update:     Sun 14 Jun 2026 23:12:13 +0000
Manifest next update:     Sun 21 Jun 2026 23:12:13 +0000
Files and hashes:         1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: 7RSo6u7D1Z+dEecubzWKuE9t0YBN79Jz5Z4IGoaO6L0=)
                          2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
                          rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 23:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
        Validity
            Not Before: Jun 14 23:12:13 2026 GMT
            Not After : Jun 21 23:12:13 2026 GMT
        Subject: CN=6a2f354e-9870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:35:84:de:43:47:fe:bd:3a:78:bf:03:25:3a:
                    d7:47:7b:5f:05:3a:22:8d:17:4f:23:55:df:ae:3f:
                    ab:35:6b:5e:78:4e:46:82:b4:4a:b1:1f:bd:ac:00:
                    5d:40:8d:22:aa:05:57:16:33:30:2d:6e:24:5c:43:
                    dd:7a:bc:38:f7:2d:95:15:82:5a:67:35:a5:00:25:
                    2e:fd:c7:39:55:23:ef:25:82:af:12:cf:dc:65:81:
                    d1:0b:6a:11:9b:0f:71:c0:8a:8b:04:e4:a1:0f:be:
                    39:88:36:5e:14:68:11:01:87:c4:37:09:dd:12:fc:
                    1f:6c:ab:21:20:35:f9:66:2c:eb:be:d8:0c:83:5d:
                    f0:fb:d2:1b:5a:ec:70:13:2a:01:05:8b:b8:7c:9e:
                    ee:15:9b:b1:e4:50:7f:b4:98:5f:9f:aa:cc:59:7c:
                    5b:c4:46:f5:d9:b6:01:22:66:07:8a:50:8f:59:77:
                    25:a4:3a:c0:b1:f6:5e:a8:83:95:18:a6:f3:67:1e:
                    01:fa:48:cc:4c:9b:72:90:75:a8:a7:76:a8:e3:76:
                    50:8b:18:b0:6d:5a:b8:bd:a1:2e:38:81:26:e8:50:
                    20:1b:eb:15:53:fc:6f:47:c4:8e:e3:f5:3b:45:5a:
                    ee:a0:05:ae:dc:3c:19:d3:cd:df:0e:c2:d7:4c:59:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:9F:27:BF:42:3F:C0:C4:69:C6:D9:D2:D4:7A:9E:B1:BF:9D:57
            X509v3 Authority Key Identifier:
                keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:77:2f:a8:f0:d2:97:b2:1f:4d:6d:16:89:40:03:b6:30:56:
         28:17:10:38:09:40:04:80:fa:2f:b6:f5:d0:3e:bf:a0:0c:ad:
         fc:60:90:a3:05:83:50:a2:e1:a2:06:b6:29:c3:3d:96:bf:66:
         20:ee:01:48:06:e5:e9:ed:45:74:f5:5d:09:dd:37:38:dd:b5:
         a1:5f:90:4e:9d:c3:0a:a0:70:22:dc:eb:fa:0d:d0:0e:73:76:
         66:26:6f:78:7a:43:9a:42:04:29:ee:64:1a:7a:dc:e2:f6:33:
         e3:1b:95:99:81:38:08:55:9f:34:2d:a7:da:08:b0:9a:26:6d:
         bb:f6:86:38:ef:d1:95:69:25:d8:9d:a5:96:ea:da:8d:ee:a8:
         ee:da:14:20:ad:97:a7:c6:27:5a:b8:82:ac:a3:ef:63:65:f8:
         ea:c2:cf:7f:9c:fe:d6:15:e3:c9:76:96:ca:55:4f:8d:02:a0:
         e5:a9:99:b7:34:82:5d:84:19:56:c3:1e:cb:7e:93:59:82:86:
         52:f6:da:eb:f7:c7:96:c0:5f:64:21:e9:bf:87:d7:2e:86:d4:
         2a:f4:56:98:9e:d8:83:ea:31:55:ca:30:10:e5:d0:84:39:9d:
         fb:c7:a7:6e:03:a7:9e:3e:ef:39:61:25:ce:aa:8f:f2:9d:01:
         26:55:28:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1
NURCMzFDRTgwHhcNMjYwNjE0MjMxMjEzWhcNMjYwNjIxMjMxMjEzWjAYMRYwFAYD
VQQDEw02YTJmMzU0ZS05ODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9TWE3kNH/r06eL8DJTrXR3tfBToijRdPI1Xfrj+rNWteeE5GgrRKsR+9rABd
QI0iqgVXFjMwLW4kXEPderw49y2VFYJaZzWlACUu/cc5VSPvJYKvEs/cZYHRC2oR
mw9xwIqLBOShD745iDZeFGgRAYfENwndEvwfbKshIDX5ZizrvtgMg13w+9IbWuxw
EyoBBYu4fJ7uFZux5FB/tJhfn6rMWXxbxEb12bYBImYHilCPWXclpDrAsfZeqIOV
GKbzZx4B+kjMTJtykHWop3ao43ZQixiwbVq4vaEuOIEm6FAgG+sVU/xvR8SO4/U7
RVruoAWu3DwZ083fDsLXTFmEZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrYnye/
Qj/AxGnG2dLUep6xv51XMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB
ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN
VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFXcvqPDSl7IfTW0WiUADtjBWKBcQOAlABID6L7b10D6/oAyt/GCQowWDUKLh
oga2KcM9lr9mIO4BSAbl6e1FdPVdCd03ON21oV+QTp3DCqBwItzr+g3QDnN2ZiZv
eHpDmkIEKe5kGnrc4vYz4xuVmYE4CFWfNC2n2giwmiZtu/aGOO/RlWkl2J2llura
je6o7toUIK2Xp8YnWriCrKPvY2X46sLPf5z+1hXjyXaWylVPjQKg5amZtzSCXYQZ
VsMey36TWYKGUvba6/fHlsBfZCHpv4fXLobUKvRWmJ7Yg+oxVcowEOXQhDmd+8en
bgOnnj7vOWElzqqP8p0BJlUoEA==
-----END CERTIFICATE-----
Generated at Mon Jun 15 16:07:10 2026 by rpki-client