Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
File:                     mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json)
Hash identifier:          3c7IYu7Q+pmPNrkuwrRi1W+5HhSsTOw4Hh4pQ1bqrtQ=
Subject key identifier:   7C:8D:09:50:3E:7A:26:2B:F4:14:2E:0B:EC:A9:CD:F2:8C:3C:D4:CC
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Certificate issuer:       /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
Manifest number:          41
Signing time:             Fri 05 Jun 2026 08:59:16 +0000
Manifest this update:     Fri 05 Jun 2026 08:59:16 +0000
Manifest next update:     Fri 12 Jun 2026 08:59:16 +0000
Files and hashes:         1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: 9gqXvGLd+oRNRiMNLW3tkHUnch4Y7K8VIjL3BnutMI4=)
                          2: 198EDB1034E511F1828F838E91833773.roa (hash: vfUkhhZvC+GnQyu1JxTO9mkMqnpFyY7JrCSKN7gLZzM=)
                          3: 4CCA7C1E34E511F1AF14078F91833773.roa (hash: IjUm+BH6SUivx0UO20wJhS2k8Pz3XHEgptYkjotxwWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
        Validity
            Not Before: Jun  5 08:59:16 2026 GMT
            Not After : Jun 12 08:59:16 2026 GMT
        Subject: CN=6a228fe4-9274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:24:e8:a6:fb:c8:de:19:cf:11:76:bb:a1:
                    10:15:94:3d:25:b7:aa:ca:d5:72:0a:1f:3b:3d:9b:
                    97:a6:0c:db:fb:eb:be:97:11:6e:4a:a0:7c:f6:37:
                    4d:52:50:20:f3:3e:38:73:01:3c:41:05:11:73:5f:
                    f2:9a:83:2d:20:0d:91:c1:dd:bb:f8:86:bd:d2:b3:
                    b2:92:f7:3e:54:10:24:48:1e:af:3b:e4:3a:b9:7b:
                    90:12:0d:ce:94:c3:29:5e:ca:41:d6:19:4f:c9:af:
                    ac:08:52:f7:0a:6b:1c:d9:b5:bd:61:2e:69:db:53:
                    06:64:4d:f1:2d:11:6c:2b:59:fb:37:e7:46:53:8e:
                    ab:df:00:32:cd:dd:44:04:68:fd:de:a2:7c:53:4d:
                    83:f5:e3:54:ec:03:96:35:ed:30:d7:35:fb:fb:df:
                    18:d0:af:d5:d9:2a:32:73:1c:f9:9e:59:9f:5d:90:
                    5c:0b:05:18:15:5c:fe:60:47:1d:e7:1a:52:76:11:
                    24:a5:b3:6b:20:16:15:92:93:d4:2d:c6:b0:3a:ad:
                    e2:25:6c:ea:c4:59:13:7d:a3:7c:88:3a:0f:c1:46:
                    25:d9:4c:d8:09:e0:29:d2:10:73:63:79:e5:8e:e9:
                    82:86:f2:19:bc:0f:db:f5:32:74:00:b4:9e:56:06:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:09:50:3E:7A:26:2B:F4:14:2E:0B:EC:A9:CD:F2:8C:3C:D4:CC
            X509v3 Authority Key Identifier:
                keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:7b:73:e8:98:00:64:7c:d6:24:3e:22:68:3f:e3:c6:c9:
         79:bc:44:2b:f7:58:34:45:01:ee:8e:10:3d:2a:5a:fd:22:cd:
         d9:45:6b:46:7a:00:d8:85:b9:3c:55:04:d5:78:c7:b5:91:72:
         25:ae:6f:9b:a0:01:57:71:d9:5d:d3:1a:d8:bb:4a:76:f8:8f:
         0c:08:d1:42:78:df:33:7b:de:3a:4d:6a:ff:82:12:1c:09:38:
         8c:51:69:4e:3b:9c:fc:4d:07:48:1d:22:a6:36:e7:ac:f8:68:
         8a:a9:fc:59:6f:24:67:31:6f:37:1f:f2:bc:aa:0d:28:32:bc:
         57:8e:35:23:fe:f9:43:6f:82:0d:3e:de:a7:88:20:6f:8d:71:
         ff:ff:ff:b8:35:80:5e:67:c6:8d:b4:99:12:73:3d:16:c9:c4:
         82:73:b6:96:26:62:8f:ed:2b:b4:2a:6c:39:00:c0:65:04:fd:
         47:b0:d4:49:d2:fc:57:ec:c9:f3:0a:8a:5d:1e:e0:1b:ff:3f:
         5c:63:b5:0d:6a:e4:4b:ea:82:4b:11:e3:d5:46:38:ee:fb:81:
         ba:c4:b4:9e:df:ef:02:1a:c2:70:6f:52:11:7a:b8:03:22:48:
         09:7d:82:5f:84:69:d4:b7:d2:f0:ee:47:b0:15:b7:fa:de:c8:
         25:36:37:cf
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QkM5RjExMC8GA1UEBRMoOUE5MjVFODY4QzI2QUUzQ0U3RTA4Q0VENkZDMzExMkY2
NDBGMkNDRjAeFw0yNjA2MDUwODU5MTZaFw0yNjA2MTIwODU5MTZaMBgxFjAUBgNV
BAMTDTZhMjI4ZmU0LTkyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUJyTopvvI3hnPEXa7oRAVlD0lt6rK1XIKHzs9m5emDNv7676XEW5KoHz2N01S
UCDzPjhzATxBBRFzX/Kagy0gDZHB3bv4hr3Ss7KS9z5UECRIHq875Dq5e5ASDc6U
wyleykHWGU/Jr6wIUvcKaxzZtb1hLmnbUwZkTfEtEWwrWfs350ZTjqvfADLN3UQE
aP3eonxTTYP141TsA5Y17TDXNfv73xjQr9XZKjJzHPmeWZ9dkFwLBRgVXP5gRx3n
GlJ2ESSls2sgFhWSk9QtxrA6reIlbOrEWRN9o3yIOg/BRiXZTNgJ4CnSEHNjeeWO
6YKG8hm8D9v1MnQAtJ5WBpjbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfI0JUD56
Jiv0FC4L7KnN8ow81MwwHwYDVR0jBBgwFoAUmpJehowmrjzn4Iztb8MRL2QPLM8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzlGLzdGRDk2QkY2MEQ4
MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6bjRJenRiOE1STDJRUExN
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbXBKZWhvd21yanpuNEl6dGI4TVJMMlFQTE04LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC
QzlGLzdGRDk2QkY2MEQ4MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6
bjRJenRiOE1STDJRUExNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQARxntz6JgAZHzWJD4iaD/jxsl5vEQr91g0RQHujhA9Klr9Is3ZRWtGegDYhbk8
VQTVeMe1kXIlrm+boAFXcdld0xrYu0p2+I8MCNFCeN8ze946TWr/ghIcCTiMUWlO
O5z8TQdIHSKmNues+GiKqfxZbyRnMW83H/K8qg0oMrxXjjUj/vlDb4INPt6niCBv
jXH///+4NYBeZ8aNtJkScz0WycSCc7aWJmKP7Su0Kmw5AMBlBP1HsNRJ0vxX7Mnz
CopdHuAb/z9cY7UNauRL6oJLEePVRjju+4G6xLSe3+8CGsJwb1IRergDIkgJfYJf
hGnUt9Lw7kewFbf63sglNjfP
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:46 2026 by rpki-client