Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
File:                     _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json)
Hash identifier:          NfpwM6JW/sWzrWEoQqOGC8LJgh7wIyf9DxhiV8c81e0=
Subject key identifier:   4C:CA:10:E0:93:DC:56:2E:96:DF:4B:C8:3A:8E:55:64:7E:20:4A:CE
Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Certificate issuer:       /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Certificate serial:       21BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
Manifest number:          219A
Signing time:             Tue 02 Jun 2026 15:54:46 +0000
Manifest this update:     Tue 02 Jun 2026 15:54:46 +0000
Manifest next update:     Tue 09 Jun 2026 15:54:46 +0000
Files and hashes:         1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: NS/aXD0hVPRdIBSvYrGC7L6mbO3FihN8Zgy4jY+VTQQ=)
                          2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: Vr+OkUJiOpOJbbcgen6Edgd3bJ5gBqJRbgUPVMaT334=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
                          rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8635 (0x21bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
        Validity
            Not Before: Jun  2 15:54:46 2026 GMT
            Not After : Jun  9 15:54:46 2026 GMT
        Subject: CN=6a1efcc6-8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b7:83:ff:4a:38:c8:93:05:a5:eb:f9:c4:15:
                    f7:a6:29:cf:ca:a6:a4:3d:ee:e4:35:d1:18:04:22:
                    c7:8a:0e:ad:e8:8b:92:33:fb:1b:f7:bb:3d:60:df:
                    2a:47:35:10:d8:bc:ad:85:8b:a0:c6:1a:85:30:9f:
                    d4:85:10:09:12:64:4d:14:3f:22:bf:5d:df:e5:fe:
                    dc:ec:2f:eb:ee:01:70:09:8d:56:7d:fc:18:f9:d0:
                    04:81:6f:b0:5f:df:31:59:43:0f:15:34:df:85:40:
                    3f:5c:84:c1:6e:21:b5:7e:b2:38:59:00:c7:62:8b:
                    d8:ce:42:7d:12:ce:cd:58:93:c9:ee:54:f6:33:ff:
                    73:c1:4e:97:42:d5:77:2d:3e:dc:f8:f5:ae:dd:4f:
                    c7:f6:a8:8c:72:5d:cb:5c:a8:e6:db:3f:1f:00:f5:
                    cc:80:a3:d1:d1:37:d1:8b:d9:d2:76:5c:8f:85:6a:
                    50:f1:75:e1:a3:1e:86:26:0f:ad:80:5f:3a:3e:15:
                    dc:b3:3f:06:d8:53:9d:7c:0d:19:7e:11:df:00:37:
                    93:ae:d0:68:6a:12:a4:9e:db:5c:21:ac:fe:4e:f6:
                    4c:30:71:96:eb:ee:7e:7b:e8:97:64:68:00:06:79:
                    c6:52:5d:85:ae:90:58:fa:94:0a:28:db:3b:fd:90:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CA:10:E0:93:DC:56:2E:96:DF:4B:C8:3A:8E:55:64:7E:20:4A:CE
            X509v3 Authority Key Identifier:
                keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fb:c4:19:fb:a1:24:a0:2e:e4:8b:12:3e:a8:9c:69:b6:b9:
         25:e1:3d:64:0f:3f:aa:ab:9e:2c:98:30:06:61:4b:4e:14:ba:
         81:32:f7:7e:e6:8c:ce:8e:c5:f2:f7:3b:43:e0:53:60:e7:ea:
         85:38:8e:67:76:98:c0:85:20:b8:c3:f9:ed:8d:79:a1:22:fc:
         51:68:04:4e:43:40:56:e2:8d:c9:01:77:79:bd:c6:e1:2a:79:
         4d:17:85:d9:66:d9:29:9e:66:2b:b6:f9:97:66:e7:8a:4a:48:
         ba:f9:88:c2:d5:22:c7:15:40:d1:9f:02:0d:c2:61:ac:14:cb:
         f9:18:69:40:7f:58:2f:b1:22:3d:7f:a3:14:eb:6d:98:b7:b3:
         5b:bd:b3:08:d9:75:47:3d:6e:16:a9:6b:d1:38:d5:ab:ac:34:
         15:24:f6:b2:29:2f:d4:6a:77:b1:f2:04:88:bc:78:76:c8:a1:
         5b:62:51:c6:4b:61:c5:83:34:35:f9:d8:01:59:e2:ed:41:a9:
         91:38:35:af:09:f8:41:44:3f:ca:fd:f7:50:fb:18:80:6f:21:
         a0:74:c7:8a:61:20:13:a6:9f:fc:aa:ec:7d:43:a6:26:04:80:
         e0:7c:8a:68:f7:de:38:50:44:87:5a:50:62:14:4e:5a:ff:c6:
         ad:8c:dd:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE
RkQyQkI2NEYwHhcNMjYwNjAyMTU1NDQ2WhcNMjYwNjA5MTU1NDQ2WjAYMRYwFAYD
VQQDEw02YTFlZmNjNi04NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA77eD/0o4yJMFpev5xBX3pinPyqakPe7kNdEYBCLHig6t6IuSM/sb97s9YN8q
RzUQ2LythYugxhqFMJ/UhRAJEmRNFD8iv13f5f7c7C/r7gFwCY1WffwY+dAEgW+w
X98xWUMPFTTfhUA/XITBbiG1frI4WQDHYovYzkJ9Es7NWJPJ7lT2M/9zwU6XQtV3
LT7c+PWu3U/H9qiMcl3LXKjm2z8fAPXMgKPR0TfRi9nSdlyPhWpQ8XXhox6GJg+t
gF86PhXcsz8G2FOdfA0ZfhHfADeTrtBoahKknttcIaz+TvZMMHGW6+5+e+iXZGgA
BnnGUl2FrpBY+pQKKNs7/ZBNWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzKEOCT
3FYult9LyDqOVWR+IErOMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF
REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT
MS1DMTZZRFBrZHZmMHJ0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWfvEGfuhJKAu5IsSPqicaba5JeE9ZA8/qqueLJgwBmFLThS6gTL3fuaMzo7F
8vc7Q+BTYOfqhTiOZ3aYwIUguMP57Y15oSL8UWgETkNAVuKNyQF3eb3G4Sp5TReF
2WbZKZ5mK7b5l2bnikpIuvmIwtUixxVA0Z8CDcJhrBTL+RhpQH9YL7EiPX+jFOtt
mLezW72zCNl1Rz1uFqlr0TjVq6w0FST2sikv1Gp3sfIEiLx4dsihW2JRxkthxYM0
NfnYAVni7UGpkTg1rwn4QUQ/yv33UPsYgG8hoHTHimEgE6af/KrsfUOmJgSA4HyK
aPfeOFBEh1pQYhROWv/GrYzdIg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:14 2026 by rpki-client