Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
File:                     R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json)
Hash identifier:          8/VUoGB4nZD7n/Aj/HhYPvNHvKoEeV74sKuq08/Qt9c=
Subject key identifier:   60:B3:AE:A4:5B:88:3A:C0:DB:DD:8E:79:7A:7E:05:03:9F:5B:6C:2D
Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
Certificate issuer:       /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Certificate serial:       1232
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
Manifest number:          1225
Signing time:             Tue 12 May 2026 14:47:08 +0000
Manifest this update:     Tue 12 May 2026 14:47:07 +0000
Manifest next update:     Tue 19 May 2026 14:47:07 +0000
Files and hashes:         1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: jpRqeEHhLatHjQ6kSM9cNXjXoRciBGPFzaLu76BOpPw=)
                          2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: FFjxfnMou/98tB5BNVIfzefmsUkfNyGwBbqp5Be3Rjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4658 (0x1232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
        Validity
            Not Before: May 12 14:47:07 2026 GMT
            Not After : May 19 14:47:07 2026 GMT
        Subject: CN=6a033d6b-f083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:f7:16:e2:50:b2:e2:37:2d:73:82:72:83:
                    56:b8:6e:4b:75:3c:52:c3:86:aa:31:54:18:76:01:
                    fe:73:98:cc:01:41:d1:19:3f:7a:97:52:62:52:e5:
                    fb:94:0d:b5:50:d0:0f:12:49:e8:b7:5e:97:9c:4c:
                    1e:02:87:ab:b9:af:33:a1:c0:18:a8:15:34:19:ca:
                    d7:ff:4d:06:b2:9b:85:4e:9a:0c:e2:03:ae:71:77:
                    03:cc:cb:37:3d:93:e9:de:95:ff:3b:29:d8:82:15:
                    80:ad:f2:7f:3e:0f:30:a6:b6:92:43:47:f2:65:ed:
                    33:8f:18:0c:4f:21:de:5a:1b:a0:ad:1b:4a:72:4a:
                    f7:4a:8d:12:35:07:40:1d:4e:1d:4c:68:f8:6b:1b:
                    e3:97:e5:45:ca:c9:0b:a1:5a:e6:a5:bf:a6:51:c5:
                    5c:65:37:84:7f:d9:f4:d2:2e:9a:ee:ab:81:57:78:
                    7d:28:cf:fc:18:16:73:81:f8:9b:d7:c6:f5:47:cc:
                    f7:bb:21:15:bf:bf:d7:e3:c8:4d:12:99:68:fa:82:
                    78:b7:18:69:0f:da:39:37:84:7b:d8:97:c8:ca:8b:
                    0f:04:96:77:11:e2:62:8c:cf:a0:38:5c:85:39:19:
                    f0:f3:d2:d3:d6:d9:70:26:c4:8c:67:b9:b4:9f:55:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B3:AE:A4:5B:88:3A:C0:DB:DD:8E:79:7A:7E:05:03:9F:5B:6C:2D
            X509v3 Authority Key Identifier:
                keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:81:1f:9b:41:9c:a0:fa:49:a1:ff:96:1f:69:57:e9:c0:cd:
         14:2a:30:9c:be:9d:b2:9a:f4:05:81:e7:6b:b6:91:ea:a5:87:
         7c:b1:ea:19:01:d0:87:22:3f:f4:0e:f8:81:c0:45:6f:70:7e:
         ac:28:31:43:2e:ff:2f:66:f4:5a:2a:69:bb:95:ce:72:27:80:
         a0:5d:63:4b:78:42:98:ff:b8:a5:c5:18:d1:a5:dd:4e:0c:ff:
         c3:6c:34:6b:7b:59:fa:86:79:2d:a2:aa:5c:86:f1:a5:19:59:
         4c:a7:60:50:fe:7d:a0:5e:f9:fa:98:8e:e8:81:16:b9:d9:9e:
         be:a5:aa:54:9a:11:26:04:f8:6f:27:19:3d:3f:80:c1:c1:88:
         30:df:be:21:ca:1f:ac:99:85:89:8a:81:d9:f2:2d:c6:a2:b8:
         a0:51:58:57:b8:2b:16:51:c4:52:cb:23:55:56:69:54:e0:67:
         da:39:a7:7f:af:9f:b4:58:6e:7b:da:41:fb:f2:73:35:d9:6a:
         7b:92:8c:2d:35:f2:2c:8e:ab:e7:a2:cc:a9:74:62:7b:5b:9a:
         c5:40:0d:54:fe:63:07:ce:d7:5c:00:9b:f3:d5:db:5a:44:d9:
         93:a1:d8:50:16:b8:1e:4b:72:3f:68:a5:35:8b:aa:31:93:64:
         25:c7:43:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx
OTRBQ0ZBNTgwHhcNMjYwNTEyMTQ0NzA3WhcNMjYwNTE5MTQ0NzA3WjAYMRYwFAYD
VQQDEw02YTAzM2Q2Yi1mMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApuT3FuJQsuI3LXOCcoNWuG5LdTxSw4aqMVQYdgH+c5jMAUHRGT96l1JiUuX7
lA21UNAPEknot16XnEweAoerua8zocAYqBU0GcrX/00GspuFTpoM4gOucXcDzMs3
PZPp3pX/OynYghWArfJ/Pg8wpraSQ0fyZe0zjxgMTyHeWhugrRtKckr3So0SNQdA
HU4dTGj4axvjl+VFyskLoVrmpb+mUcVcZTeEf9n00i6a7quBV3h9KM/8GBZzgfib
18b1R8z3uyEVv7/X48hNEplo+oJ4txhpD9o5N4R72JfIyosPBJZ3EeJijM+gOFyF
ORnw89LT1tlwJsSMZ7m0n1W4MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCzrqRb
iDrA292OeXp+BQOfW2wtMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0
MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT
Qk9PdHd0N05iU29aU3MtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJYEfm0GcoPpJof+WH2lX6cDNFCownL6dspr0BYHna7aR6qWHfLHqGQHQhyI/
9A74gcBFb3B+rCgxQy7/L2b0Wippu5XOcieAoF1jS3hCmP+4pcUY0aXdTgz/w2w0
a3tZ+oZ5LaKqXIbxpRlZTKdgUP59oF75+piO6IEWudmevqWqVJoRJgT4bycZPT+A
wcGIMN++IcofrJmFiYqB2fItxqK4oFFYV7grFlHEUssjVVZpVOBn2jmnf6+ftFhu
e9pB+/JzNdlqe5KMLTXyLI6r56LMqXRie1uaxUANVP5jB87XXACb89XbWkTZk6HY
UBa4HktyP2ilNYuqMZNkJcdDKw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:09:54 2026 by rpki-client