Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          lGHLA0rj/CZzkDmFstD1s9qZZvKoNsmZDoeqL1UtRSc=
Subject key identifier:   4F:BE:19:ED:A9:CC:AF:B9:0B:D8:69:47:49:AD:43:94:EC:01:AB:DA
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0DC4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0DB7
Signing time:             Tue 02 Jun 2026 17:55:59 +0000
Manifest this update:     Tue 02 Jun 2026 17:55:58 +0000
Manifest next update:     Tue 09 Jun 2026 17:55:58 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: Q+47biHLA+KyfiTIurMepD5ZH/OcL+k/tcSPen7fW2w=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: aQ8cA00GJjluwPOIwcjxSsjlMHR7a0I4vLY3lPAB7wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3524 (0xdc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Jun  2 17:55:58 2026 GMT
            Not After : Jun  9 17:55:58 2026 GMT
        Subject: CN=6a1f192f-05d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:ef:c4:da:51:d6:8f:43:ee:c0:16:31:5c:
                    a6:40:9a:59:fe:0c:83:df:b1:e4:b8:fe:4a:1f:a6:
                    7c:aa:22:4b:e2:aa:20:66:ac:d5:03:de:99:74:2d:
                    0e:68:ff:19:c3:39:c4:34:df:2d:50:94:e0:60:4b:
                    e3:97:ba:f2:2b:13:23:6c:6c:7a:d5:31:75:37:3e:
                    55:80:ff:8a:f6:e5:dd:07:a2:51:70:73:47:38:c2:
                    48:db:74:fb:d0:97:46:ee:db:b5:3c:e6:9f:d6:77:
                    98:e7:f4:86:99:32:15:c1:82:8a:24:44:0e:09:3a:
                    af:c0:85:e9:5a:59:9b:2e:65:2b:cc:11:84:bc:13:
                    b6:09:8f:65:2b:b7:12:13:6b:3b:2c:63:17:ce:c2:
                    f2:5e:11:37:32:70:bd:f6:13:44:3f:42:c5:4b:d9:
                    f4:fa:ca:b0:b2:af:34:1e:ce:ec:61:fe:7e:80:94:
                    d1:b1:aa:50:f8:b7:06:3c:d1:de:17:14:3c:e1:c7:
                    65:70:da:df:7a:1b:59:db:59:27:e5:9d:59:40:5f:
                    41:83:ac:aa:00:f8:7d:25:d0:d6:c4:fa:5a:78:88:
                    ee:9d:94:4e:6d:a3:d0:a4:a6:49:0e:1f:4e:07:63:
                    18:8b:b1:61:62:e7:6c:c0:ab:49:1a:95:3f:d0:51:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BE:19:ED:A9:CC:AF:B9:0B:D8:69:47:49:AD:43:94:EC:01:AB:DA
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:93:09:87:61:6e:01:8d:f0:ae:cb:0a:e3:c0:b2:c6:6a:56:
         ca:86:6a:08:09:a0:70:71:80:d2:6f:8c:76:83:8b:28:ac:4b:
         6d:ac:54:5c:b0:ca:ac:5c:a8:ef:a8:e7:86:32:e7:bf:bf:ee:
         c5:52:bf:44:2a:8d:00:c8:bb:c9:b7:00:58:33:d6:02:f3:32:
         30:47:7b:99:80:3b:02:4d:a8:71:6c:20:c2:52:2e:ce:e8:96:
         e3:f0:dd:ca:19:ac:b0:45:f6:3d:7f:e7:1c:3f:bc:07:71:5f:
         cc:a1:e6:1e:f3:7f:32:ca:62:a6:14:1b:e9:ac:90:28:02:f0:
         62:bd:cc:70:8a:72:f1:bc:a2:a1:08:d7:90:37:4b:24:7e:f4:
         1e:32:c8:31:00:3b:d8:a5:42:0c:d5:9b:88:e7:bf:5a:96:f4:
         0a:cf:ee:33:c8:dd:ac:c9:e8:7c:df:09:48:62:db:5f:df:a2:
         9d:a7:27:e2:f7:42:ed:2e:83:e0:86:38:a5:4e:49:f9:f1:46:
         3a:61:c2:fa:1d:8c:92:c1:29:1c:5d:43:e9:8f:b6:86:4d:e1:
         9c:aa:ac:2f:50:d6:5e:ac:b6:ce:f0:39:7a:80:3a:0e:b8:83:
         ee:07:a8:91:9a:40:94:83:00:52:23:c7:e4:fa:07:6b:d5:7e:
         f4:51:53:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx
MEVDMzE3N0EwHhcNMjYwNjAyMTc1NTU4WhcNMjYwNjA5MTc1NTU4WjAYMRYwFAYD
VQQDEw02YTFmMTkyZi0wNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsvvxNpR1o9D7sAWMVymQJpZ/gyD37HkuP5KH6Z8qiJL4qogZqzVA96ZdC0O
aP8ZwznENN8tUJTgYEvjl7ryKxMjbGx61TF1Nz5VgP+K9uXdB6JRcHNHOMJI23T7
0JdG7tu1POaf1neY5/SGmTIVwYKKJEQOCTqvwIXpWlmbLmUrzBGEvBO2CY9lK7cS
E2s7LGMXzsLyXhE3MnC99hNEP0LFS9n0+sqwsq80Hs7sYf5+gJTRsapQ+LcGPNHe
FxQ84cdlcNrfehtZ21kn5Z1ZQF9Bg6yqAPh9JdDWxPpaeIjunZRObaPQpKZJDh9O
B2MYi7FhYudswKtJGpU/0FHCeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE++Ge2p
zK+5C9hpR0mtQ5TsAavaMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0
MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu
Q3JqNElXeUhZVXNRN0RGM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1ZMJh2FuAY3wrssK48CyxmpWyoZqCAmgcHGA0m+MdoOLKKxLbaxUXLDKrFyo
76jnhjLnv7/uxVK/RCqNAMi7ybcAWDPWAvMyMEd7mYA7Ak2ocWwgwlIuzuiW4/Dd
yhmssEX2PX/nHD+8B3FfzKHmHvN/MspiphQb6ayQKALwYr3McIpy8byioQjXkDdL
JH70HjLIMQA72KVCDNWbiOe/Wpb0Cs/uM8jdrMnofN8JSGLbX9+inacn4vdC7S6D
4IY4pU5J+fFGOmHC+h2MksEpHF1D6Y+2hk3hnKqsL1DWXqy2zvA5eoA6DriD7geo
kZpAlIMAUiPH5PoHa9V+9FFTfw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:40 2026 by rpki-client