Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          x/vGR6AnbnvxO3AYogC1mPJKp2K6Su+5wRfYqk9bPKU=
Subject key identifier:   A4:23:49:CC:F1:76:9E:AB:77:86:DD:64:B9:8E:2D:E7:49:B5:0F:0E
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       0833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          131F
Signing time:             Fri 04 Sep 2026 19:39:36 +0000
Manifest this update:     Fri 04 Sep 2026 19:39:34 +0000
Manifest next update:     Fri 11 Sep 2026 19:39:34 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: /kHSPw95F9Hojrxcgw1DZlfTDY0GaCVbO3oYnRMDdRE=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: LwJPI6nfsdC0VxNhRepAlsHVCIOUuNDvAHykCwTVC8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Sep  4 19:39:34 2026 GMT
            Not After : Sep 11 19:39:34 2026 GMT
        Subject: CN=6a9b1e77-24b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:81:57:f4:30:74:61:06:f5:03:51:ca:d7:
                    56:ce:d9:f2:ff:06:3a:3d:24:10:0c:b3:56:7b:a0:
                    e5:ab:b0:eb:16:44:b1:93:99:dd:f7:aa:45:af:3f:
                    6f:c8:16:9d:88:a0:c0:86:4b:bb:21:d2:ec:05:a4:
                    6f:6c:7f:d4:6d:65:7d:3b:e9:0c:1e:b9:c3:f1:74:
                    f7:47:b4:83:e6:fe:84:e9:74:0b:05:ca:14:49:b2:
                    b3:d9:4c:71:c0:b5:1b:20:3b:94:7f:57:51:ef:da:
                    61:c2:5c:bb:9b:63:d5:8a:af:11:c7:d5:4f:be:1e:
                    82:29:05:12:15:61:cc:8f:63:3c:99:2d:68:98:e9:
                    83:85:c3:18:f0:9e:0e:d3:65:a2:38:7c:a5:f0:85:
                    9b:c0:68:24:34:7d:f8:4e:26:70:6f:1c:29:06:3c:
                    9b:50:02:31:6d:47:04:a0:df:79:4a:03:ae:0a:40:
                    6b:58:d6:79:e8:69:fb:ee:0d:c4:1c:58:30:fe:99:
                    2b:96:42:0d:17:e4:70:63:ca:05:58:f8:13:98:af:
                    c6:e9:b3:5d:cd:fc:25:52:4e:b0:fe:9a:2f:a8:0f:
                    44:7d:15:3e:ba:68:e7:ea:b2:6b:27:63:5a:8f:87:
                    9d:b3:7d:fd:fd:13:b8:b1:20:06:89:bc:e3:8f:70:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:49:CC:F1:76:9E:AB:77:86:DD:64:B9:8E:2D:E7:49:B5:0F:0E
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:39:af:a1:7b:03:bc:e6:39:d9:6b:2b:ee:d5:41:96:db:
         66:d1:80:a2:8c:83:44:75:8b:a1:0a:17:36:d7:d8:c3:0b:55:
         f5:a9:5d:37:12:19:bd:9e:eb:9a:bc:70:c3:8b:4e:eb:48:bb:
         fc:3f:7b:b2:99:d4:ad:fb:3d:a5:83:35:c3:57:d9:34:6b:ae:
         92:11:5c:fd:ba:0f:76:06:62:86:f7:d8:e3:e2:8e:75:46:9a:
         7f:1c:6d:af:15:81:12:c5:74:42:6c:fc:4d:6c:86:c0:d7:91:
         d3:c4:91:f2:2a:8b:12:32:9c:c6:d1:58:6d:84:cb:2f:4e:97:
         97:a8:d0:86:fc:7b:c0:f2:de:cc:1c:8e:ae:2c:04:e9:a9:bd:
         50:bd:42:fa:26:ac:c9:90:13:c2:a5:de:ea:68:6c:69:0d:14:
         08:a1:46:bf:60:f1:55:68:83:bf:63:41:df:e6:55:a6:37:c6:
         15:a5:71:35:dc:52:30:56:3e:49:5e:0e:c8:1f:0e:70:16:e0:
         01:28:8f:2a:a6:a6:af:11:c7:90:12:15:1c:3a:51:22:90:8a:
         1a:45:e0:2d:c6:ad:4f:18:b2:f1:cb:d9:2c:8d:45:3d:37:20:
         22:69:63:a0:67:7f:b6:e2:6c:e4:ae:f7:f8:4c:8c:42:cf:d2:
         d7:ab:7a:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC
MEUyRUI5MzEwHhcNMjYwOTA0MTkzOTM0WhcNMjYwOTExMTkzOTM0WjAYMRYwFAYD
VQQDEw02YTliMWU3Ny0yNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoGBV/QwdGEG9QNRytdWztny/wY6PSQQDLNWe6Dlq7DrFkSxk5nd96pFrz9v
yBadiKDAhku7IdLsBaRvbH/UbWV9O+kMHrnD8XT3R7SD5v6E6XQLBcoUSbKz2Uxx
wLUbIDuUf1dR79phwly7m2PViq8Rx9VPvh6CKQUSFWHMj2M8mS1omOmDhcMY8J4O
02WiOHyl8IWbwGgkNH34TiZwbxwpBjybUAIxbUcEoN95SgOuCkBrWNZ56Gn77g3E
HFgw/pkrlkINF+RwY8oFWPgTmK/G6bNdzfwlUk6w/povqA9EfRU+umjn6rJrJ2Na
j4eds339/RO4sSAGibzjj3ChYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQjSczx
dp6rd4bdZLmOLedJtQ8OMB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz
RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM
dFpsUnc1bWwtZXF3NHV1VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjaQ5r6F7A7zmOdlrK+7VQZbbZtGAooyDRHWLoQoXNtfYwwtV9aldNxIZvZ7r
mrxww4tO60i7/D97spnUrfs9pYM1w1fZNGuukhFc/boPdgZihvfY4+KOdUaafxxt
rxWBEsV0Qmz8TWyGwNeR08SR8iqLEjKcxtFYbYTLL06Xl6jQhvx7wPLezByOriwE
6am9UL1C+iasyZATwqXe6mhsaQ0UCKFGv2DxVWiDv2NB3+ZVpjfGFaVxNdxSMFY+
SV4OyB8OcBbgASiPKqamrxHHkBIVHDpRIpCKGkXgLcatTxiy8cvZLI1FPTcgImlj
oGd/tuJs5K73+EyMQs/S16t6fg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:38 2026 by rpki-client