Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
File:                     s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft (raw, json)
Hash identifier:          +GMrXBsecj9G7UBptQAac8flC2M3KH7duBJwWBspJMk=
Subject key identifier:   EB:4C:14:29:7D:24:E8:E7:F0:92:20:AC:3E:35:79:E1:00:94:1F:ED
Authority key identifier: B3:A2:5C:63:54:70:0E:5A:EB:A6:4F:51:BA:E5:E1:C8:52:7C:C2:5E
Certificate issuer:       /CN=A9141292/serialNumber=B3A25C6354700E5AEBA64F51BAE5E1C8527CC25E
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
Manifest number:          23
Signing time:             Wed 19 Aug 2026 09:37:51 +0000
Manifest this update:     Wed 19 Aug 2026 09:37:50 +0000
Manifest next update:     Wed 26 Aug 2026 09:37:50 +0000
Files and hashes:         1: s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl (hash: q3RqLKOul9lO1GKtCkBeZXBUs7cOvIvbXssBYOdMQ0Y=)
                          2: AE3AF652985611F19F9DCE754C11F970.roa (hash: jFbrBBBTbOxx4u9Zm1gwWIVaCSiZ62l036MMVRa+NCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl
                          rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141292, serialNumber=B3A25C6354700E5AEBA64F51BAE5E1C8527CC25E
        Validity
            Not Before: Aug 19 09:37:50 2026 GMT
            Not After : Aug 26 09:37:50 2026 GMT
        Subject: CN=6a85796f-912e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:c7:0c:b1:24:cc:1f:e1:fc:c5:0b:57:1e:
                    06:f8:4e:e1:0f:6b:33:bc:e2:e9:88:a8:cb:3c:0a:
                    13:99:7a:79:b5:91:a7:78:88:a0:94:d6:7d:1b:04:
                    06:91:bd:29:67:46:43:28:ae:62:e6:26:4b:c1:3e:
                    ca:2f:94:28:45:05:02:5a:32:50:e3:d0:20:24:80:
                    2a:7b:c5:26:ac:1f:75:9b:1d:43:d4:c0:af:10:cb:
                    bf:f2:cd:75:9d:89:ae:e4:e9:a9:f6:3d:a5:65:73:
                    5f:37:52:90:99:d5:1d:96:b3:9e:7a:50:83:b8:b3:
                    96:1d:fd:a9:0f:e2:d9:ae:3e:b1:a1:8c:21:89:d0:
                    c6:a5:a2:a0:2c:c9:f8:48:4d:26:2e:3b:e7:da:40:
                    a7:88:71:b2:e1:5c:80:aa:8d:10:09:08:b0:6f:2b:
                    69:d4:89:1e:0b:7d:7c:a0:6d:af:6e:db:7d:36:b0:
                    90:20:f6:b4:26:32:a8:0e:9f:b9:7c:a5:a8:ee:be:
                    4c:bf:9a:b0:14:73:38:64:e0:69:2d:6b:ce:17:ba:
                    a4:5f:66:b0:c7:d8:97:f9:93:b2:6d:90:b9:a8:c3:
                    1e:7a:82:95:68:29:29:07:dd:55:96:52:cd:9a:28:
                    03:04:e1:4b:9b:b2:d9:0e:86:d9:f3:09:6e:99:10:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:14:29:7D:24:E8:E7:F0:92:20:AC:3E:35:79:E1:00:94:1F:ED
            X509v3 Authority Key Identifier:
                keyid:B3:A2:5C:63:54:70:0E:5A:EB:A6:4F:51:BA:E5:E1:C8:52:7C:C2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:d6:3b:74:e5:09:24:0e:88:c1:55:a9:1f:5f:c8:64:3c:
         68:84:02:ab:47:b6:cc:f6:1e:ec:5d:c5:cb:a3:d1:e8:c3:cc:
         81:6b:7e:15:6f:e0:19:fa:87:7b:5b:87:73:2c:9d:02:2d:30:
         25:0f:d7:85:89:5f:4b:ff:a3:da:1c:bc:dd:a5:dc:06:bd:58:
         32:06:ad:89:b1:0d:69:fb:86:cb:86:0b:e5:56:4c:d9:47:dc:
         c5:3a:e9:55:61:3c:46:94:60:c2:e5:b5:05:6c:1d:e8:35:c7:
         c9:ae:89:32:6a:15:14:3a:e4:d6:93:49:89:d6:42:1f:9c:d8:
         e0:50:5a:11:65:76:6e:fd:bc:c9:bf:99:b9:25:8a:a0:e7:f3:
         c6:d2:0c:05:1d:c5:0f:00:13:d8:22:e9:7b:30:de:36:14:27:
         17:f2:58:91:2d:68:56:6d:50:bb:4d:3a:84:77:25:5d:9f:00:
         5d:38:2d:16:9b:72:a6:69:2f:ee:b7:75:29:a1:95:63:57:52:
         98:b8:af:3b:83:e9:7c:ff:4b:e5:93:c8:3e:b2:5a:2b:ac:ff:
         9e:9b:85:6d:1b:8c:c1:f9:50:21:b0:b1:34:57:6c:f7:d6:9e:
         dd:04:d7:0d:2f:fd:60:2c:b9:5f:09:f3:d6:3e:85:dd:85:2c:
         9c:3f:48:bc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MTI5MjExMC8GA1UEBRMoQjNBMjVDNjM1NDcwMEU1QUVCQTY0RjUxQkFFNUUxQzg1
MjdDQzI1RTAeFw0yNjA4MTkwOTM3NTBaFw0yNjA4MjYwOTM3NTBaMBgxFjAUBgNV
BAMTDTZhODU3OTZmLTkxMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDg88cMsSTMH+H8xQtXHgb4TuEPazO84umIqMs8ChOZenm1kad4iKCU1n0bBAaR
vSlnRkMormLmJkvBPsovlChFBQJaMlDj0CAkgCp7xSasH3WbHUPUwK8Qy7/yzXWd
ia7k6an2PaVlc183UpCZ1R2Ws556UIO4s5Yd/akP4tmuPrGhjCGJ0MaloqAsyfhI
TSYuO+faQKeIcbLhXICqjRAJCLBvK2nUiR4LfXygba9u2302sJAg9rQmMqgOn7l8
pajuvky/mrAUczhk4Gkta84XuqRfZrDH2Jf5k7JtkLmowx56gpVoKSkH3VWWUs2a
KAME4UubstkOhtnzCW6ZEPGDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU60wUKX0k
6OfwkiCsPjV54QCUH+0wHwYDVR0jBBgwFoAUs6JcY1RwDlrrpk9RuuXhyFJ8wl4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMjkyLzAzOTMxRDRBNkM0
RDExRjFBOEFBRjEwQzY2NDdBODg4L3M2SmNZMVJ3RGxycnBrOVJ1dVhoeUZKOHds
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvczZKY1kxUndEbHJycGs5UnV1WGh5Rko4d2w0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx
MjkyLzAzOTMxRDRBNkM0RDExRjFBOEFBRjEwQzY2NDdBODg4L3M2SmNZMVJ3RGxy
cnBrOVJ1dVhoeUZKOHdsNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBA/tY7dOUJJA6IwVWpH1/IZDxohAKrR7bM9h7sXcXLo9How8yBa34Vb+AZ+od7
W4dzLJ0CLTAlD9eFiV9L/6PaHLzdpdwGvVgyBq2JsQ1p+4bLhgvlVkzZR9zFOulV
YTxGlGDC5bUFbB3oNcfJrokyahUUOuTWk0mJ1kIfnNjgUFoRZXZu/bzJv5m5JYqg
5/PG0gwFHcUPABPYIul7MN42FCcX8liRLWhWbVC7TTqEdyVdnwBdOC0Wm3KmaS/u
t3UpoZVjV1KYuK87g+l8/0vlk8g+slorrP+em4VtG4zB+VAhsLE0V2z31p7dBNcN
L/1gLLlfCfPWPoXdhSycP0i8
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:49 2026 by rpki-client