Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          bxRT/T47El1c5VR/0QzF7YIPI3Oup4BXmc6gnWLggYQ=
Subject key identifier:   DF:65:B4:14:1E:3A:1C:70:76:30:9C:18:65:E9:AB:FD:56:96:6D:A1
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       0874
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          086B
Signing time:             Thu 04 Jun 2026 20:48:35 +0000
Manifest this update:     Thu 04 Jun 2026 20:48:34 +0000
Manifest next update:     Thu 11 Jun 2026 20:48:34 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: W+B5/Y+gbBz6puLQy8QJlLc3djUrAGAAqo9rRMYTuoA=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Jun  4 20:48:34 2026 GMT
            Not After : Jun 11 20:48:34 2026 GMT
        Subject: CN=6a21e4a3-d146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:79:c0:14:db:1d:7d:80:06:dd:4c:c4:08:50:
                    e0:68:ee:cb:3f:13:6a:c7:ae:1f:7f:cb:63:bc:b5:
                    af:d4:fa:51:d1:27:69:e6:7e:70:8e:ea:fd:8e:b5:
                    12:3a:8a:91:90:43:de:65:28:48:9f:c2:c7:88:2c:
                    5b:63:8b:32:31:e4:a2:a8:cf:d2:b0:b6:ca:a2:48:
                    df:93:dc:5e:97:69:20:81:5d:3b:9d:04:30:b7:72:
                    3b:42:69:b2:0d:df:5b:93:80:1f:02:c7:e0:c5:fe:
                    91:e8:7e:f5:08:0f:b6:9f:dc:0a:9f:4b:3a:5f:83:
                    0f:96:e1:34:5a:da:39:8e:10:cc:1e:10:17:aa:3a:
                    48:1f:e6:9c:43:93:a6:a5:af:b3:63:34:5b:67:07:
                    09:2f:a6:ee:69:4f:69:a6:b1:a7:7b:cc:c1:17:c3:
                    5b:15:4c:4f:9a:03:7f:95:f9:51:f1:a4:2a:90:f0:
                    1c:bd:ab:17:81:a8:84:3f:09:5f:b0:62:0e:e9:3d:
                    97:9e:9e:28:46:07:97:6e:93:e6:3e:13:96:8a:30:
                    b1:1c:30:bb:7b:1a:a1:dd:9a:c8:c3:68:71:7a:4c:
                    21:ef:71:21:9e:1b:71:10:2d:a0:68:cd:ec:a5:59:
                    0f:75:de:90:c6:be:1f:db:5e:bc:21:4b:bc:cc:17:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:B4:14:1E:3A:1C:70:76:30:9C:18:65:E9:AB:FD:56:96:6D:A1
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:88:80:32:29:14:cb:3f:3b:ad:3b:81:32:f8:44:6a:47:42:
         96:49:91:1a:0c:b1:65:16:cb:95:58:f5:3f:11:10:6b:49:c4:
         1a:11:c9:1c:12:76:c7:69:2f:b2:40:b0:0b:89:4b:c1:82:3c:
         d1:49:d1:da:c8:c7:6c:38:42:7d:f1:58:73:68:ed:d3:47:13:
         f8:0b:c6:8f:f6:eb:44:b0:7d:d1:93:2f:d5:da:73:29:2c:4f:
         31:c2:90:25:31:47:c6:db:f9:58:b1:55:92:55:1b:d8:65:c6:
         ad:29:a1:57:f0:de:cd:a4:3f:2f:62:9f:5f:4a:35:1c:4d:10:
         df:c5:72:7c:40:eb:1d:0b:f3:e7:9a:f8:50:b0:a7:ab:b1:f4:
         f4:3e:4b:2d:80:3c:58:28:8e:58:a2:08:58:7e:96:15:93:14:
         79:8c:8d:46:95:e4:94:e6:55:c1:1d:82:a2:ac:df:c4:2b:70:
         84:03:32:bb:16:a6:94:f1:f6:3e:68:9f:e3:65:9a:37:79:6d:
         ec:39:2d:0c:82:69:7e:03:c1:69:a2:01:55:7a:c9:ec:49:da:
         7b:f5:73:82:79:cf:13:a0:6f:c5:ed:f6:7d:87:41:34:15:72:
         88:fd:79:bf:8f:7b:76:36:4f:33:4f:30:bb:fd:31:9c:e8:1e:
         00:6f:6f:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx
OUIwNjI1MEQwHhcNMjYwNjA0MjA0ODM0WhcNMjYwNjExMjA0ODM0WjAYMRYwFAYD
VQQDEw02YTIxZTRhMy1kMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi3nAFNsdfYAG3UzECFDgaO7LPxNqx64ff8tjvLWv1PpR0Sdp5n5wjur9jrUS
OoqRkEPeZShIn8LHiCxbY4syMeSiqM/SsLbKokjfk9xel2kggV07nQQwt3I7Qmmy
Dd9bk4AfAsfgxf6R6H71CA+2n9wKn0s6X4MPluE0Wto5jhDMHhAXqjpIH+acQ5Om
pa+zYzRbZwcJL6buaU9pprGne8zBF8NbFUxPmgN/lflR8aQqkPAcvasXgaiEPwlf
sGIO6T2Xnp4oRgeXbpPmPhOWijCxHDC7exqh3ZrIw2hxekwh73EhnhtxEC2gaM3s
pVkPdd6Qxr4f2168IUu8zBcT5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9ltBQe
OhxwdjCcGGXpq/1Wlm2hMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy
RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK
Z19VeXBNMjdMTThac0dKUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4iAMikUyz87rTuBMvhEakdClkmRGgyxZRbLlVj1PxEQa0nEGhHJHBJ2x2kv
skCwC4lLwYI80UnR2sjHbDhCffFYc2jt00cT+AvGj/brRLB90ZMv1dpzKSxPMcKQ
JTFHxtv5WLFVklUb2GXGrSmhV/DezaQ/L2KfX0o1HE0Q38VyfEDrHQvz55r4ULCn
q7H09D5LLYA8WCiOWKIIWH6WFZMUeYyNRpXklOZVwR2CoqzfxCtwhAMyuxamlPH2
Pmif42WaN3lt7DktDIJpfgPBaaIBVXrJ7Enae/VzgnnPE6Bvxe32fYdBNBVyiP15
v497djZPM08wu/0xnOgeAG9vgA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:41 2026 by rpki-client