Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File:                     6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier:          Sv+Tn2nTVs2VV79ebeCoy9NEfgxjY4XhAaSS/bTH6Fc=
Subject key identifier:   F5:B2:AB:2C:13:25:28:A6:90:57:D9:E4:70:4B:B7:AE:BE:13:3C:85
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number:          02C7
Signing time:             Sat 05 Sep 2026 01:05:22 +0000
Manifest this update:     Sat 05 Sep 2026 01:05:21 +0000
Manifest next update:     Sat 12 Sep 2026 01:05:21 +0000
Files and hashes:         1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: BO+CXwkyYfj/KHNsiHAnnxnSG3BOCm+w9y+Gyqera9U=)
                          2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: Ebcz0szc+qJ7hYkDqsXxSwbk8Yhl04m2PX1xj7QFIzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Sep  5 01:05:21 2026 GMT
            Not After : Sep 12 01:05:21 2026 GMT
        Subject: CN=6a9b6ad2-cfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:be:4c:32:b1:f3:3e:47:24:64:62:53:f2:
                    b4:ba:d7:06:66:53:a1:bc:99:4e:24:96:42:99:8b:
                    78:88:3b:b4:b9:93:d5:c6:75:2f:94:34:bf:fd:77:
                    20:9e:07:50:1c:93:33:9c:de:19:fc:48:0a:43:de:
                    8d:4a:eb:8f:d2:fd:c7:62:26:82:83:45:e4:ee:c1:
                    5a:9b:26:a6:a1:2b:05:81:30:86:7b:93:a7:a2:f0:
                    3a:ab:fd:ee:70:f2:33:a4:ff:c2:db:2b:f3:cc:bb:
                    ce:c2:b3:cd:0f:33:05:fb:a8:08:3b:ce:74:10:dd:
                    8f:f5:14:59:ac:03:16:eb:d5:b5:c5:bc:76:08:29:
                    fd:2b:79:68:4d:20:e8:f6:a2:d5:1e:74:fc:47:53:
                    0e:57:36:0c:96:da:8b:43:a7:97:cb:8f:4c:e0:4c:
                    c8:fe:72:0d:16:34:5c:9a:be:02:06:61:89:bd:e7:
                    8f:7c:b5:d4:c4:15:a5:73:da:2f:7f:74:63:3a:20:
                    b9:c0:a0:4b:ef:c5:8e:ad:cc:9f:ea:28:05:a0:f0:
                    6d:1e:4d:5b:d4:45:2f:d1:31:3e:94:28:f5:e5:17:
                    fd:2b:b9:87:60:cd:58:5e:7e:5a:ed:94:da:57:e5:
                    b7:3b:c8:97:cb:48:e0:39:0d:48:76:e3:7f:b0:0a:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B2:AB:2C:13:25:28:A6:90:57:D9:E4:70:4B:B7:AE:BE:13:3C:85
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:0a:85:da:00:18:2d:1c:e1:ec:43:47:81:c7:59:2c:46:
         49:34:0d:23:bf:a9:c6:65:55:2e:f1:36:80:96:5b:60:20:1e:
         63:5a:2c:88:a0:19:39:bc:6e:8a:ec:0c:98:6a:7d:b6:21:1e:
         3b:27:3f:a9:ad:50:09:96:ef:c4:8c:d2:f0:d0:3b:e6:8d:2b:
         d2:36:b6:01:f7:bb:13:3c:b8:e6:58:5d:81:6c:d8:fc:60:f9:
         20:38:3f:ed:1d:77:8b:64:34:48:98:60:bd:33:0e:ef:7e:2a:
         22:2f:65:ca:8e:0d:73:f1:b3:ed:9a:d3:f1:e3:bd:a2:8e:6a:
         d7:cb:ea:c6:e6:0f:8b:45:fb:15:e8:3c:a2:2e:49:d3:92:33:
         70:de:32:da:ab:3c:99:14:a8:42:d7:bd:b5:04:bc:f9:8a:8e:
         63:8f:ed:76:4c:a9:4b:6c:70:d7:2b:59:a4:39:ca:cd:51:b8:
         13:87:c9:b9:87:73:76:49:0e:2a:87:6d:ac:b2:4b:26:94:e8:
         a4:64:19:ad:9f:3d:7b:d0:b7:e6:fe:f3:f3:bd:5a:cd:d2:1f:
         87:93:d3:8c:8a:d3:f5:56:a8:65:f2:a6:79:18:d5:be:f8:ea:
         9e:11:f0:6a:ef:0f:72:35:19:40:1b:19:dd:cb:86:0a:7c:97:
         6c:9e:71:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz
RkQyNUI5QzEwHhcNMjYwOTA1MDEwNTIxWhcNMjYwOTEyMDEwNTIxWjAYMRYwFAYD
VQQDEw02YTliNmFkMi1jZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAut++TDKx8z5HJGRiU/K0utcGZlOhvJlOJJZCmYt4iDu0uZPVxnUvlDS//Xcg
ngdQHJMznN4Z/EgKQ96NSuuP0v3HYiaCg0Xk7sFamyamoSsFgTCGe5OnovA6q/3u
cPIzpP/C2yvzzLvOwrPNDzMF+6gIO850EN2P9RRZrAMW69W1xbx2CCn9K3loTSDo
9qLVHnT8R1MOVzYMltqLQ6eXy49M4EzI/nINFjRcmr4CBmGJveePfLXUxBWlc9ov
f3RjOiC5wKBL78WOrcyf6igFoPBtHk1b1EUv0TE+lCj15Rf9K7mHYM1YXn5a7ZTa
V+W3O8iXy0jgOQ1IduN/sAoROQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWyqywT
JSimkFfZ5HBLt66+EzyFMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2
MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03
aHZQQll1eWYwMjBfMGx1Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT0gKhdoAGC0c4exDR4HHWSxGSTQNI7+pxmVVLvE2gJZbYCAeY1osiKAZObxu
iuwMmGp9tiEeOyc/qa1QCZbvxIzS8NA75o0r0ja2Afe7Ezy45lhdgWzY/GD5IDg/
7R13i2Q0SJhgvTMO734qIi9lyo4Nc/Gz7ZrT8eO9oo5q18vqxuYPi0X7Feg8oi5J
05IzcN4y2qs8mRSoQte9tQS8+YqOY4/tdkypS2xw1ytZpDnKzVG4E4fJuYdzdkkO
KodtrLJLJpTopGQZrZ89e9C35v7z871azdIfh5PTjIrT9VaoZfKmeRjVvvjqnhHw
au8PcjUZQBsZ3cuGCnyXbJ5xrQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:47:44 2026 by rpki-client