Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
File:                     IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft (raw, json)
Hash identifier:          ptqTcqxEEuss5cJV0XkhztoKHnMYdl8ZChRbZQnVLG8=
Subject key identifier:   26:35:D5:C5:8F:59:25:1E:5A:60:99:20:47:E8:A3:3E:CE:1A:42:71
Authority key identifier: 20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2
Certificate issuer:       /CN=A9164F6C/serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
Manifest number:          4B
Signing time:             Sat 05 Sep 2026 03:45:52 +0000
Manifest this update:     Sat 05 Sep 2026 03:45:51 +0000
Manifest next update:     Sat 12 Sep 2026 03:45:51 +0000
Files and hashes:         1: IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl (hash: ttJSfhVZGxCerOgHN3r9ZqC8TKKG/81fhcqqtPv2Dzs=)
                          2: 959E1E5C438911F199AC3545C7833773.roa (hash: o/N5wMgvItXdP3V7fouQN7Bkpr2EmsUXoWrtblWz5Ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
        Validity
            Not Before: Sep  5 03:45:51 2026 GMT
            Not After : Sep 12 03:45:51 2026 GMT
        Subject: CN=6a9b9070-042c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:08:7c:ee:59:8c:f7:b6:06:33:70:ed:a8:
                    88:6f:8d:d7:65:85:6d:7b:34:3a:2e:a5:53:47:6b:
                    6e:bd:f3:68:cf:43:bd:31:e3:87:d8:8a:0c:62:fd:
                    be:f6:95:ec:b5:13:29:66:07:44:9f:2a:41:07:de:
                    a2:a3:73:46:1e:1e:18:70:4c:b6:d4:f9:a7:0f:7a:
                    fa:ff:1c:ac:1a:46:fb:d6:6c:fa:69:c2:bb:8f:1a:
                    b3:c7:89:49:52:23:fb:bf:89:7b:38:a2:2e:35:7a:
                    b0:f0:ce:57:41:1a:99:98:42:8e:75:28:ad:e9:55:
                    2c:d6:58:e4:c1:24:33:9a:12:3e:b9:14:8b:97:5a:
                    d6:8e:d8:fa:5c:a1:ec:70:5f:da:f2:5a:b0:93:88:
                    62:c2:8a:54:67:4d:26:ea:6c:57:67:26:eb:8f:87:
                    af:c1:b6:23:7a:00:36:fc:f0:7e:65:17:85:5a:4b:
                    7d:8c:b5:25:14:96:ca:4e:fd:9a:7e:ec:1e:eb:46:
                    e3:f1:77:db:57:95:29:8b:40:e3:2a:44:72:3b:52:
                    02:73:50:1a:c9:9a:a4:da:99:52:28:01:da:ae:c1:
                    56:85:91:72:25:b2:47:bb:83:03:f9:c9:3d:4b:91:
                    83:b7:39:cb:b3:a0:7e:2c:fc:48:7b:71:71:5a:79:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:D5:C5:8F:59:25:1E:5A:60:99:20:47:E8:A3:3E:CE:1A:42:71
            X509v3 Authority Key Identifier:
                keyid:20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:4b:85:9b:0f:ba:0f:99:4a:fb:84:ac:ba:e9:f4:ca:6b:
         d9:a9:9b:ba:f0:54:c2:ce:04:df:77:d5:fe:b0:ab:e1:91:84:
         72:58:5e:ab:b9:91:41:62:d3:1d:0b:42:a2:57:7d:7f:0c:b2:
         e4:16:a9:07:48:31:73:4b:fa:10:e8:e4:40:bc:1a:44:f5:75:
         a1:41:dc:3a:1e:d7:c3:35:f1:9a:06:b5:82:1c:be:65:da:f2:
         3d:8e:64:55:69:08:07:61:76:1e:a0:98:98:82:09:b9:60:d9:
         c8:35:17:03:b5:55:a4:66:a4:5d:94:50:c9:da:c8:b3:34:64:
         e3:51:73:7d:5f:3a:5d:81:ec:70:ea:d8:bf:a8:5e:c8:69:85:
         5f:e3:91:29:0c:58:ca:27:23:01:8d:7b:51:d7:dd:1b:42:5b:
         0d:16:b5:a4:dc:25:8b:66:ba:3d:01:2e:6a:d4:06:a0:c8:b5:
         e0:e8:05:3f:88:07:c8:75:19:45:0e:8c:a4:c0:58:77:52:6b:
         6c:fd:e7:14:e0:eb:e6:59:75:f7:58:bd:8e:1f:a5:ba:4f:bc:
         f5:eb:fb:ee:4c:47:eb:a7:9d:ba:99:5a:75:3c:84:be:e0:c6:
         7e:04:d9:ee:b3:6e:f3:9e:c9:60:f1:b5:ab:21:07:df:6b:17:
         26:f5:a6:ee
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEY2QzExMC8GA1UEBRMoMjBERTkxOEQ0RjkyM0MwMkZFMjNFQjkxNjM3NUJCRjg1
QjAyNENEMjAeFw0yNjA5MDUwMzQ1NTFaFw0yNjA5MTIwMzQ1NTFaMBgxFjAUBgNV
BAMTDTZhOWI5MDcwLTA0MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDStAh87lmM97YGM3DtqIhvjddlhW17NDoupVNHa26982jPQ70x44fYigxi/b72
ley1EylmB0SfKkEH3qKjc0YeHhhwTLbU+acPevr/HKwaRvvWbPppwruPGrPHiUlS
I/u/iXs4oi41erDwzldBGpmYQo51KK3pVSzWWOTBJDOaEj65FIuXWtaO2Ppcoexw
X9ryWrCTiGLCilRnTSbqbFdnJuuPh6/BtiN6ADb88H5lF4VaS32MtSUUlspO/Zp+
7B7rRuPxd9tXlSmLQOMqRHI7UgJzUBrJmqTamVIoAdquwVaFkXIlske7gwP5yT1L
kYO3OcuzoH4s/Eh7cXFaeXUHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJjXVxY9Z
JR5aYJkgR+ijPs4aQnEwHwYDVR0jBBgwFoAUIN6RjU+SPAL+I+uRY3W7+FsCTNIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjZDLzRGRkIyN0M4NDI5
OTExRjFCNUVBRTY3OTlFRUU1MjhFL0lONlJqVS1TUEFMLUktdVJZM1c3LUZzQ1RO
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSU42UmpVLVNQQUwtSS11UlkzVzctRnNDVE5JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
RjZDLzRGRkIyN0M4NDI5OTExRjFCNUVBRTY3OTlFRUU1MjhFL0lONlJqVS1TUEFM
LUktdVJZM1c3LUZzQ1ROSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBl2UuFmw+6D5lK+4Ssuun0ymvZqZu68FTCzgTfd9X+sKvhkYRyWF6ruZFBYtMd
C0KiV31/DLLkFqkHSDFzS/oQ6ORAvBpE9XWhQdw6HtfDNfGaBrWCHL5l2vI9jmRV
aQgHYXYeoJiYggm5YNnINRcDtVWkZqRdlFDJ2sizNGTjUXN9Xzpdgexw6ti/qF7I
aYVf45EpDFjKJyMBjXtR190bQlsNFrWk3CWLZro9AS5q1AagyLXg6AU/iAfIdRlF
DoykwFh3Umts/ecU4OvmWXX3WL2OH6W6T7z16/vuTEfrp526mVp1PIS+4MZ+BNnu
s27znslg8bWrIQffaxcm9abu
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:18:51 2026 by rpki-client