Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
File:                     6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json)
Hash identifier:          Io1bfoWeY/ZRHT2zYkMxPN9gWkRfujFuFYRLxgf7hyI=
Subject key identifier:   6C:DA:4A:8D:E7:F9:B4:63:2B:0D:09:B5:32:F8:FC:CB:CD:69:0A:7C
Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
Certificate issuer:       /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
Manifest number:          0309
Signing time:             Mon 11 May 2026 02:17:15 +0000
Manifest this update:     Mon 11 May 2026 02:17:14 +0000
Manifest next update:     Mon 18 May 2026 02:17:14 +0000
Files and hashes:         1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: mE96PpB+1PhZCy4FV2+1iyleMUF0ZXsPBZtARt7CBJo=)
                          2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: TFmcQAcfne/kujXnOSIqvHGLVj2LAWcXYB93wCfwF/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
                          rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
        Validity
            Not Before: May 11 02:17:14 2026 GMT
            Not After : May 18 02:17:14 2026 GMT
        Subject: CN=6a013c2a-4b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:bb:f1:66:2d:4f:bc:8a:91:78:a5:86:2c:
                    37:85:a3:23:29:76:b2:63:e2:d6:b4:b7:a6:27:96:
                    35:e4:21:a3:d3:43:3d:7b:b1:02:ad:46:36:8c:f8:
                    eb:5f:82:08:59:71:a8:33:88:4b:e5:bc:ea:ce:8b:
                    7a:62:23:d9:1e:5c:7e:21:24:e4:39:d3:c3:c2:d8:
                    0a:c6:6b:d5:28:bf:97:cc:e9:2b:73:31:ae:88:03:
                    9f:21:c1:a7:12:63:d8:e7:0a:ce:d2:ab:13:e3:20:
                    33:42:a2:53:59:a3:f1:8e:4f:8f:0e:eb:fa:da:9f:
                    37:f6:6d:0e:4e:d1:e7:af:06:66:90:58:91:42:2b:
                    57:fa:0e:61:f2:0a:6f:8e:1b:8d:e6:7a:7f:b7:69:
                    c0:7c:e7:35:ec:60:5d:a2:30:78:13:33:18:cd:ab:
                    3a:04:bd:80:bb:4d:a5:45:f8:a6:1c:ff:61:77:d6:
                    d5:51:15:15:b5:10:1a:03:bb:08:54:54:ac:56:50:
                    2a:fc:e9:7b:31:9f:a9:cd:bf:4c:7c:a7:00:72:ab:
                    04:94:22:f5:ea:57:eb:d8:3d:02:cb:7c:38:e0:05:
                    7d:7e:69:41:19:bc:29:0d:36:43:3c:01:65:29:78:
                    c7:af:c8:4c:35:92:2c:ea:cb:10:15:3c:0e:fa:a4:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:4A:8D:E7:F9:B4:63:2B:0D:09:B5:32:F8:FC:CB:CD:69:0A:7C
            X509v3 Authority Key Identifier:
                keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:03:39:00:27:e1:66:5c:40:24:ef:e3:a9:c8:75:fc:38:
         85:56:15:3f:99:bc:5c:93:c0:a0:fe:aa:d0:ad:9f:27:0f:fc:
         f8:68:27:89:08:56:30:ee:ba:c2:92:ce:1c:42:77:9f:e9:28:
         72:20:e1:c2:95:c7:f1:36:66:64:b0:73:87:cc:5b:25:4a:04:
         f4:43:9a:0d:ab:68:93:e0:12:c8:56:a3:ef:12:f0:a6:5d:e5:
         08:a7:10:62:e7:b2:71:22:d6:b0:5e:c9:bd:c8:a6:e6:b0:93:
         b5:c3:d6:e7:0a:5c:f9:ef:aa:b2:44:d2:7b:6f:78:71:5f:8b:
         78:4c:75:de:97:30:7b:4e:a1:ce:62:7a:fb:4c:c5:00:e5:d3:
         dc:d3:5b:c1:ac:2f:9b:b6:02:ff:6e:f3:f2:e8:d3:c4:5a:bb:
         3e:c4:50:fa:eb:88:84:e6:71:38:38:15:f5:3d:5c:29:36:b3:
         65:bb:39:57:d0:cc:4d:10:8f:0e:45:90:1c:d5:6c:54:5c:1f:
         c9:aa:ed:9c:7e:40:f1:87:2a:30:2f:17:40:9a:2f:50:d1:f0:
         71:bc:43:fc:e4:d5:d3:58:77:49:8d:b2:a9:be:12:19:7d:f2:
         4e:f3:29:87:97:4b:b3:73:4d:5c:f0:06:97:f4:91:19:f9:49:
         e9:fb:6b:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyQUYxMTAvBgNVBAUTKEU4NDg2Mzc0NDQ5QURFNTU4MUVCNzhDMzk4MkYxREUx
MkE0QTYwMDMwHhcNMjYwNTExMDIxNzE0WhcNMjYwNTE4MDIxNzE0WjAYMRYwFAYD
VQQDEw02YTAxM2MyYS00YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfS78WYtT7yKkXilhiw3haMjKXayY+LWtLemJ5Y15CGj00M9e7ECrUY2jPjr
X4IIWXGoM4hL5bzqzot6YiPZHlx+ISTkOdPDwtgKxmvVKL+XzOkrczGuiAOfIcGn
EmPY5wrO0qsT4yAzQqJTWaPxjk+PDuv62p839m0OTtHnrwZmkFiRQitX+g5h8gpv
jhuN5np/t2nAfOc17GBdojB4EzMYzas6BL2Au02lRfimHP9hd9bVURUVtRAaA7sI
VFSsVlAq/Ol7MZ+pzb9MfKcAcqsElCL16lfr2D0Cy3w44AV9fmlBGbwpDTZDPAFl
KXjHr8hMNZIs6ssQFTwO+qSt9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzaSo3n
+bRjKw0JtTL4/MvNaQp8MB8GA1UdIwQYMBaAFOhIY3REmt5Vget4w5gvHeEqSmAD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD
QkExMUVEOUM5QUZBMjVDNEY5QUUwMi82RWhqZEVTYTNsV0I2M2pEbUM4ZDRTcEtZ
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi82RWhqZEVTYTNs
V0I2M2pEbUM4ZDRTcEtZQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXzIDOQAn4WZcQCTv46nIdfw4hVYVP5m8XJPAoP6q0K2fJw/8+GgniQhWMO66
wpLOHEJ3n+kociDhwpXH8TZmZLBzh8xbJUoE9EOaDatok+ASyFaj7xLwpl3lCKcQ
YueycSLWsF7Jvcim5rCTtcPW5wpc+e+qskTSe294cV+LeEx13pcwe06hzmJ6+0zF
AOXT3NNbwawvm7YC/27z8ujTxFq7PsRQ+uuIhOZxODgV9T1cKTazZbs5V9DMTRCP
DkWQHNVsVFwfyartnH5A8YcqMC8XQJovUNHwcbxD/OTV01h3SY2yqb4SGX3yTvMp
h5dLs3NNXPAGl/SRGflJ6ftr1Q==
-----END CERTIFICATE-----
Generated at Tue May 12 22:44:11 2026 by rpki-client