Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File:                     60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier:          G0C3qVxgWxEYF2xABFAWJaHf/2/F3wI65jVTKiGknN0=
Subject key identifier:   28:BA:C5:CE:84:8B:28:45:66:17:C9:A2:65:A7:AA:CB:AC:D0:84:56
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number:          C6
Signing time:             Thu 03 Sep 2026 07:02:07 +0000
Manifest this update:     Thu 03 Sep 2026 07:02:06 +0000
Manifest next update:     Thu 10 Sep 2026 07:02:06 +0000
Files and hashes:         1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: +2nTXyT4cYc0pHhMDUdiTvEf2YEN2rxh48ZJ+AkA11g=)
                          2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: lAXWv3UUJ6cic6YPRSG4uuhpq3Qimwck5d5gS3sMPco=)
                          3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: car3+0AuT/DxwtWfPZqhcplFaS0iE8HtUQGh8tESllM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Sep  3 07:02:06 2026 GMT
            Not After : Sep 10 07:02:06 2026 GMT
        Subject: CN=6a991b6f-9412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:29:0b:72:f9:c4:1a:aa:bb:ce:f0:6f:55:
                    3e:d7:87:1a:44:1d:47:b8:03:89:88:eb:7c:10:f8:
                    e0:f3:bc:73:4b:2c:be:50:86:3a:e7:a9:dc:10:79:
                    c4:84:e7:9f:54:62:5e:fb:dc:ba:fa:29:f9:c3:fa:
                    04:40:65:da:ab:d4:52:60:9c:cf:93:8b:48:1e:1e:
                    f7:60:21:49:8c:f0:4d:2c:e3:25:26:ac:7c:d2:f3:
                    0c:c7:94:f3:ed:78:0c:86:e0:f2:79:1b:7c:7d:e9:
                    5a:cf:4b:48:cc:de:e8:bc:63:c5:6d:ac:28:ae:13:
                    fa:44:f4:cf:06:a1:61:1f:de:4a:25:90:63:ed:1a:
                    86:33:82:4e:7d:ba:33:2b:05:d4:40:da:56:95:6a:
                    89:7d:72:8f:44:b2:de:7e:45:10:12:af:b6:d3:79:
                    f4:b4:cc:da:10:da:08:6e:b2:a8:ae:5b:85:70:13:
                    a4:d0:f1:af:19:a6:89:7c:dc:5c:08:9b:02:5b:2d:
                    64:b5:a7:37:39:29:72:43:44:2d:21:c9:af:aa:12:
                    9f:f9:33:5c:e9:85:7f:69:3b:93:6b:3e:e8:c6:8d:
                    0d:b9:41:70:c0:6b:08:9b:d9:1c:5a:4d:d3:02:14:
                    1c:f4:c7:cf:1d:dc:4c:65:2d:93:3e:c9:ab:76:13:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:C5:CE:84:8B:28:45:66:17:C9:A2:65:A7:AA:CB:AC:D0:84:56
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:16:67:b6:ac:ad:e7:f6:46:65:f3:f1:9a:bc:43:cc:e1:
         a2:55:9a:57:cc:de:5a:3e:af:29:30:af:e4:7c:ca:3a:42:26:
         ae:6c:62:0d:ba:42:d5:fd:0a:43:55:ef:e1:73:27:9a:d7:5f:
         14:81:1a:af:01:65:6d:a5:e3:c0:7a:31:3e:82:6e:b8:3e:3f:
         0d:fc:93:c0:1e:3e:33:68:dd:61:63:3c:a1:35:15:5d:2b:dc:
         c7:5d:af:b2:6e:42:7c:7d:d3:59:d7:35:dc:ea:86:88:6f:8d:
         74:cc:cb:61:ac:25:f3:15:a6:b5:af:8d:c1:a3:2a:15:09:fd:
         7f:87:ae:4f:87:56:9b:20:e9:b3:3a:40:4a:56:6f:bf:a4:16:
         c3:5d:c6:5f:3f:b7:98:1e:f2:30:3a:d7:d2:d0:27:bf:61:cc:
         c0:6f:76:ed:c4:d5:31:f8:77:1c:64:0e:a6:7f:45:e7:84:a3:
         fe:af:ab:c4:84:26:4f:e0:0f:6d:24:cb:b6:dd:d8:19:7d:00:
         2a:9c:ea:0b:6e:3a:09:21:f3:b0:be:ae:38:21:eb:32:17:15:
         ba:77:85:9b:8e:e7:9f:a4:06:3f:20:bf:40:ff:3f:70:2e:db:
         0a:40:5f:f4:af:ab:28:38:c1:5b:19:b5:a4:6f:cb:9e:5e:76:
         f3:dd:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:20:15 2026 by rpki-client