Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File:                     Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier:          yDsLTb4wRsUj8BKHIDvlSOEe4nDZT8zeddJjv0gIVWg=
Subject key identifier:   16:73:61:35:86:58:C0:BA:20:4A:F9:1A:D5:08:A3:6B:F1:85:74:62
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer:       /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number:          4A
Signing time:             Mon 01 Jun 2026 09:10:14 +0000
Manifest this update:     Mon 01 Jun 2026 09:10:14 +0000
Manifest next update:     Mon 08 Jun 2026 09:10:14 +0000
Files and hashes:         1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: T4EBaTYVCTK48jaFFxpV0/2cJaap1XG8FvGDdN/mTpg=)
                          2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
                          rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
        Validity
            Not Before: Jun  1 09:10:14 2026 GMT
            Not After : Jun  8 09:10:14 2026 GMT
        Subject: CN=6a1d4c76-c256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2b:9b:b9:48:5a:c5:66:2b:9c:fa:ff:d9:dd:
                    6d:da:aa:19:8e:8a:f8:63:a2:dd:66:c2:71:b4:fb:
                    95:08:77:d7:d5:f8:f1:e0:ba:2e:a0:89:a4:98:33:
                    0f:db:4d:a3:bb:b5:5a:e2:ef:e8:4d:be:08:d3:a4:
                    dc:e6:17:f9:62:b0:7a:01:fb:fc:a0:60:09:1a:00:
                    3f:f3:89:1e:4e:b6:1d:79:34:79:26:60:93:86:8e:
                    ab:4f:c6:7a:a7:8e:f3:c1:40:17:d4:52:19:00:82:
                    25:1e:bc:c8:cf:5e:14:67:a7:22:08:89:68:1f:d4:
                    4a:7f:c2:bd:87:fd:7f:90:27:fd:5f:47:56:f7:16:
                    ca:42:0f:39:c8:db:0c:49:eb:c6:05:f3:86:1d:75:
                    bb:e7:ed:74:37:20:69:5c:fd:3b:b1:92:ef:d4:21:
                    b6:87:d2:95:82:11:96:27:04:af:bc:e8:1a:a3:44:
                    6c:14:ed:e3:7b:6d:d2:4b:7b:e9:dd:78:d0:07:7c:
                    b0:c5:ae:6c:eb:b9:72:fb:32:1c:1b:f7:78:17:de:
                    5b:d2:67:41:d6:17:14:20:18:e7:c7:cf:c3:5a:5d:
                    c0:91:e9:c6:01:71:87:8d:54:6f:60:a1:61:d6:92:
                    05:ea:d3:56:ed:29:46:2b:ac:52:81:ee:03:4f:d1:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:73:61:35:86:58:C0:BA:20:4A:F9:1A:D5:08:A3:6B:F1:85:74:62
            X509v3 Authority Key Identifier:
                keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:a2:d4:48:bf:86:6c:a7:6f:aa:4f:1a:35:4f:e4:34:84:
         20:9a:4e:88:23:68:b4:5d:69:ae:9e:8a:88:70:8e:99:ea:55:
         3c:07:17:92:78:65:c4:47:b4:e8:5e:4f:b8:33:f5:be:cc:c6:
         71:d1:40:3e:05:8c:05:d2:eb:bc:fc:44:26:c8:be:f7:fb:54:
         cf:21:6c:ed:ed:86:7a:37:06:e5:e1:d3:7d:f1:5f:f2:98:ba:
         a4:6d:04:44:03:54:b3:37:27:48:27:37:5a:e4:51:74:cb:e7:
         38:10:c0:77:d6:4a:f2:80:59:23:41:06:b8:9d:9a:f5:76:b5:
         50:d3:1e:8c:cc:92:cc:01:18:4e:ba:a9:46:ef:4a:e6:7e:b5:
         e2:27:e7:b6:e6:3c:75:e4:b2:e9:dd:87:03:49:67:04:2b:db:
         cb:97:83:e5:b0:85:74:01:0c:f1:8d:12:f0:50:2e:df:bb:e3:
         c2:d9:ba:58:b6:18:40:73:8a:06:82:73:f2:00:6a:d5:fd:b5:
         40:3d:bd:7d:8d:d1:8b:e8:46:94:1b:24:c4:bb:13:bb:83:b5:
         2d:37:ee:b0:7a:6d:4a:83:7c:62:22:cf:54:2a:e8:94:a2:16:
         0f:e0:71:76:ee:ff:ad:80:71:4b:58:be:49:3b:2a:b8:ea:5b:
         c8:78:e2:fd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NTg1QjExMC8GA1UEBRMoMzFDOEU0RDQzODk3NEVERDBFODdBMUM3RUJEOTA5Q0Ex
QzFEMTJBNTAeFw0yNjA2MDEwOTEwMTRaFw0yNjA2MDgwOTEwMTRaMBgxFjAUBgNV
BAMTDTZhMWQ0Yzc2LWMyNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvK5u5SFrFZiuc+v/Z3W3aqhmOivhjot1mwnG0+5UId9fV+PHgui6giaSYMw/b
TaO7tVri7+hNvgjTpNzmF/lisHoB+/ygYAkaAD/ziR5Oth15NHkmYJOGjqtPxnqn
jvPBQBfUUhkAgiUevMjPXhRnpyIIiWgf1Ep/wr2H/X+QJ/1fR1b3FspCDznI2wxJ
68YF84Yddbvn7XQ3IGlc/Tuxku/UIbaH0pWCEZYnBK+86BqjRGwU7eN7bdJLe+nd
eNAHfLDFrmzruXL7Mhwb93gX3lvSZ0HWFxQgGOfHz8NaXcCR6cYBcYeNVG9goWHW
kgXq01btKUYrrFKB7gNP0RurAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFnNhNYZY
wLogSvka1Qija/GFdGIwHwYDVR0jBBgwFoAUMcjk1DiXTt0Oh6HH69kJyhwdEqUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0FGRDFCNTAyRjIw
NTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQwT2g2SEg2OWtKeWh3ZEVx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTWNqazFEaVhUdDBPaDZISDY5a0p5aHdkRXFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
ODVCL0FGRDFCNTAyRjIwNTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQw
T2g2SEg2OWtKeWh3ZEVxVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAt5qLUSL+GbKdvqk8aNU/kNIQgmk6II2i0XWmunoqIcI6Z6lU8BxeSeGXER7To
Xk+4M/W+zMZx0UA+BYwF0uu8/EQmyL73+1TPIWzt7YZ6Nwbl4dN98V/ymLqkbQRE
A1SzNydIJzda5FF0y+c4EMB31krygFkjQQa4nZr1drVQ0x6MzJLMARhOuqlG70rm
frXiJ+e25jx15LLp3YcDSWcEK9vLl4PlsIV0AQzxjRLwUC7fu+PC2bpYthhAc4oG
gnPyAGrV/bVAPb19jdGL6EaUGyTEuxO7g7UtN+6wem1Kg3xiIs9UKuiUohYP4HF2
7v+tgHFLWL5JOyq46lvIeOL9
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:41 2026 by rpki-client