Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
File:                     43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json)
Hash identifier:          X1INXFyDZTbVIBxIEe0IIGjdwASUYrmWekVy7N/hfUY=
Subject key identifier:   33:D8:7C:71:C0:68:E6:80:91:3D:72:4F:20:AC:19:CC:5E:32:9D:5F
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Certificate issuer:       /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
Manifest number:          6F
Signing time:             Thu 03 Sep 2026 08:10:42 +0000
Manifest this update:     Thu 03 Sep 2026 08:10:42 +0000
Manifest next update:     Thu 10 Sep 2026 08:10:42 +0000
Files and hashes:         1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: gqEZVhRiEeZ0iBdiaxudI2BmhUHc3Io+ZLB2mzW3sN4=)
                          2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
        Validity
            Not Before: Sep  3 08:10:42 2026 GMT
            Not After : Sep 10 08:10:42 2026 GMT
        Subject: CN=6a992b82-974d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:63:da:8c:d3:a1:8e:55:c2:6e:a6:05:62:
                    0d:6f:dc:f6:2e:77:ee:7e:bb:59:8e:89:78:fc:7d:
                    94:f4:b0:9f:9e:d9:55:2d:6f:f8:bc:46:2b:f1:b0:
                    8b:2e:7f:a0:61:df:cd:69:c4:c4:da:65:92:64:2a:
                    97:38:d8:57:06:33:31:a7:cf:c4:7f:85:a9:73:a2:
                    c6:e7:2d:be:f2:e9:5e:db:82:2e:0b:95:aa:82:2b:
                    28:e6:b1:28:6c:68:10:27:5d:5f:93:e1:6f:4a:d4:
                    15:f0:3d:42:38:53:bc:d2:d0:49:1a:1f:24:bc:ab:
                    2d:41:a8:83:0c:94:68:6f:3e:22:5d:34:8e:b9:99:
                    c1:51:87:41:b2:37:70:e5:15:8a:fe:db:70:57:56:
                    26:d7:4d:e8:93:5c:ca:93:fe:92:73:89:d6:f6:4b:
                    ac:81:ca:54:a4:14:c0:70:98:43:4b:7a:aa:90:2c:
                    4a:f9:1f:03:2e:a0:13:5e:73:9a:ea:27:62:20:bf:
                    73:aa:fa:3b:15:2a:cc:34:26:1e:a9:33:eb:08:7a:
                    ee:d2:f3:ad:be:ce:1a:f1:14:de:fb:56:52:50:83:
                    76:45:72:84:85:0f:86:c0:0d:0e:55:bc:4a:3a:15:
                    54:8b:8d:8e:58:93:71:91:bf:a4:19:d7:e0:cb:9c:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D8:7C:71:C0:68:E6:80:91:3D:72:4F:20:AC:19:CC:5E:32:9D:5F
            X509v3 Authority Key Identifier:
                keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:2b:90:6e:82:e1:74:e9:d0:d7:9c:0c:9d:a5:3f:d2:8d:1a:
         17:24:db:eb:4e:76:1e:8b:93:4e:1e:39:ee:7a:95:11:1c:3e:
         c3:19:dd:68:f1:61:20:f9:66:09:aa:55:ad:46:b6:d3:52:c9:
         3d:1c:28:eb:bf:83:18:60:21:ee:6d:c4:5f:13:91:05:00:f0:
         c8:b2:46:ae:fa:1d:88:77:81:c8:fb:62:18:36:ce:4c:f9:3e:
         c9:77:48:fe:ec:e4:00:1e:05:7b:b3:87:19:d2:43:d4:99:35:
         8f:2b:17:81:22:d5:0d:63:c5:b5:d5:a6:84:a8:0d:36:61:7a:
         b3:60:18:9b:8f:fe:0a:de:68:56:2b:6b:b4:ff:ef:82:46:b9:
         1f:19:f9:b6:14:27:88:8b:9d:fa:06:fc:f5:60:56:2c:5c:da:
         7d:01:c2:65:32:35:27:4f:a4:f8:7d:70:22:91:47:3b:82:31:
         bc:8d:ad:3d:72:50:9d:ef:4e:de:5a:cc:c6:1f:8d:b1:bc:72:
         03:f7:73:67:60:a0:a3:a7:36:b8:7c:35:f0:9f:69:2c:e1:08:
         fb:bc:01:1b:73:94:48:72:25:bd:7a:d1:07:00:2d:81:40:18:
         d3:49:20:37:f0:be:c1:ac:8b:83:ec:8b:e8:8c:2c:c3:3f:f3:
         3c:27:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:16:31 2026 by rpki-client