Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.mft (raw, json)
Hash identifier:          3ZwokXzWtKTvRU153PaRg+c8DXQmvJK4TTwQZwEnU6g=
Subject key identifier:   2B:1F:C0:82:A2:BB:CD:06:B0:D5:A5:6E:01:8E:A5:FA:E1:4E:BD:5B
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       089E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
Manifest number:          16CB
Signing time:             Mon 24 Aug 2026 17:42:58 +0000
Manifest this update:     Mon 24 Aug 2026 17:42:57 +0000
Manifest next update:     Mon 31 Aug 2026 17:42:57 +0000
Files and hashes:         1: 6rJKkMbQRs2D-170o8WY5OqaFow.crl (hash: 7njBKyDCefRPhHPG2aUgg9uz8n5qK95fhw0p8cLS0uw=)
                          2: 524CFDB27C1111EFBFC7363AC4F9AE02.roa (hash: xrZpK+30+Kb/RLzQh+heJJ4ddMYvE6wmkvBw7Pwi8f0=)
                          3: 41372C94C1A311EC8986B978C4F9AE02.roa (hash: ld0pgp9Ur0fSMgQwCR7H3kT/sCa921QHH6dvfIj9T1g=)
                          4: F6C5480A7C1011EF97676539C4F9AE02.roa (hash: mrSkrE5pyRMFxi9n1hRXQwcpqPnPzUX4ednXpMVvNvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 17:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Aug 24 17:42:57 2026 GMT
            Not After : Aug 31 17:42:57 2026 GMT
        Subject: CN=6a8c82a1-e099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:b2:83:6a:99:d1:47:2c:2e:1c:b1:63:cf:
                    e8:7f:76:5f:0f:16:e5:80:f7:65:32:0e:ce:f0:a2:
                    36:0a:d0:0d:5f:6a:80:1d:44:f1:f3:ca:2d:f6:ab:
                    5d:a8:e6:86:70:e2:bb:10:95:36:fd:31:8f:a0:89:
                    27:38:9a:24:4e:0a:bc:e7:ce:73:24:91:1f:58:4d:
                    2c:b0:3b:10:21:94:c7:02:cb:1f:6b:d4:da:80:d2:
                    f5:86:da:81:19:dd:04:96:18:fd:a6:93:87:7a:0b:
                    3a:3b:1d:9d:e8:4b:09:64:56:c4:50:21:aa:9f:e4:
                    21:12:1b:ef:d2:96:ef:19:1b:81:8b:ef:e8:d1:85:
                    44:23:35:89:ef:ec:f1:2c:74:ef:9d:1f:78:87:52:
                    a4:7c:4a:a2:f0:e0:dc:78:5b:06:3a:7a:f7:cf:e2:
                    4e:1a:60:c0:51:c9:49:87:24:59:7c:10:cd:a7:24:
                    ea:79:94:00:01:88:ac:16:60:90:dd:ab:6c:f5:13:
                    15:e7:50:98:c4:83:52:ed:68:50:37:0a:20:8e:0c:
                    ae:0e:9b:9a:e0:28:fd:f6:fe:12:83:fe:4a:63:35:
                    34:56:4d:2c:d8:c3:74:42:75:f6:08:8d:c9:e8:3a:
                    15:18:67:ae:e0:62:95:e2:74:16:92:7b:46:8e:4d:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:C0:82:A2:BB:CD:06:B0:D5:A5:6E:01:8E:A5:FA:E1:4E:BD:5B
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5b:d6:bf:2f:3b:81:c8:8a:5c:63:f7:6c:5e:8a:29:4e:d4:
         7a:46:94:ad:ae:23:e7:4c:07:ab:8c:ad:7d:e7:a3:3d:78:a9:
         6d:83:25:b4:a1:b3:04:14:75:32:7b:4c:4c:36:fc:78:36:93:
         f0:35:02:43:9a:fb:5c:ea:f0:5b:95:1a:97:fa:95:e1:8e:eb:
         a3:e3:4a:d3:3e:93:07:74:29:27:b9:4a:0d:7d:88:65:18:8e:
         0c:f5:56:ce:46:dc:d8:c3:e3:8f:2b:32:90:70:cb:64:54:bf:
         0b:fe:89:17:2c:5e:50:26:f1:bb:09:a8:cc:fc:d9:db:f7:b8:
         1b:4c:5f:c3:8d:b7:22:63:26:bb:cd:16:5e:1f:9f:93:ec:28:
         d2:f3:50:28:1f:f6:5d:c4:ef:b5:72:0f:ef:bb:23:6e:11:2a:
         ca:63:6e:40:cf:7a:02:b6:87:68:58:7e:9d:7f:f3:1f:3a:69:
         bf:4f:94:cd:d4:ff:95:b7:d9:6e:cd:1e:31:0f:32:1d:d3:e9:
         3b:86:e1:0c:e6:e2:93:86:ca:94:cf:d2:f9:5e:04:27:56:41:
         ca:01:e9:25:cc:e7:04:35:82:21:b9:14:3e:bf:01:de:a5:34:
         fe:14:69:de:1d:3b:c3:01:24:af:5a:98:10:8f:dd:04:ec:6f:
         79:8a:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:13:29 2026 by rpki-client