Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          kWL/9XDGq+Ut9+X376facqUAVx5QRcZvMprwxd/j+xk=
Subject key identifier:   63:A8:EA:A3:7F:05:78:3F:00:F0:5F:99:E1:A3:56:D6:5C:3B:8D:2B
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          0473
Signing time:             Thu 03 Sep 2026 00:03:34 +0000
Manifest this update:     Thu 03 Sep 2026 00:03:33 +0000
Manifest next update:     Thu 10 Sep 2026 00:03:33 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: HyvDmH4+5xDpy9CY6+IIGyaN7KtVWfujjPvEaZiw1UQ=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: 1dx9NxWRRsStkRQSuFMVGM2HADMKYljo140Xw+RdEi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Sep  3 00:03:33 2026 GMT
            Not After : Sep 10 00:03:33 2026 GMT
        Subject: CN=6a98b956-d153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:ea:24:06:82:89:f1:07:f0:be:ff:bc:d9:
                    45:5e:95:9d:70:37:da:0a:90:85:44:4a:d0:88:04:
                    98:ff:ad:90:03:5c:3e:0f:7e:0e:91:d7:7e:83:c5:
                    e8:eb:85:23:95:a0:07:66:7a:23:43:11:37:2d:81:
                    f1:6a:37:51:55:e5:0a:0b:e9:4c:98:e1:76:d8:b2:
                    c7:d9:77:6a:bf:00:fb:69:29:85:9c:0b:db:f4:a8:
                    47:6a:91:76:71:05:ac:5f:cc:67:79:a1:5b:a5:89:
                    28:5c:a3:62:c5:b1:31:02:52:64:16:62:32:31:27:
                    bb:3f:83:ee:c5:51:a2:72:ad:66:90:f1:81:7b:b0:
                    0e:bf:96:b2:b4:9a:d9:ff:f3:97:08:23:e9:37:6a:
                    8c:8c:bb:16:66:9c:43:da:3f:6c:3d:f1:ac:e6:00:
                    02:73:20:16:dd:17:83:a0:85:9d:57:d8:78:8a:96:
                    f2:7b:2d:32:59:a6:ce:1a:6d:4a:df:6c:bf:1f:b8:
                    5e:4d:b5:37:e0:1e:b0:92:82:f0:33:0a:5f:1d:7a:
                    4f:c9:b5:0a:be:56:df:93:2e:4f:a4:69:89:5f:6c:
                    0d:8a:f4:29:9a:b7:18:80:bd:67:f3:b5:3b:b2:6d:
                    2e:38:9e:e8:93:bc:77:5c:bb:26:86:3c:5a:53:2c:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:EA:A3:7F:05:78:3F:00:F0:5F:99:E1:A3:56:D6:5C:3B:8D:2B
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:21:f7:f8:9d:d5:7a:04:74:b2:8b:58:82:4d:f3:4f:9e:
         3a:d5:b1:e8:08:9f:78:a2:58:7d:ba:dd:82:25:d8:b1:6d:13:
         97:ed:93:ce:bb:7b:55:74:f8:62:22:29:63:f7:ff:cf:09:be:
         a0:62:7b:a6:3b:5a:00:a6:dd:04:1e:18:98:fb:ae:f6:b1:85:
         8e:e8:ad:f1:f1:67:7b:03:e6:72:d5:ed:2a:65:ad:61:83:35:
         be:72:59:ed:81:9d:f2:29:89:8a:1d:d6:00:06:24:5b:63:c6:
         eb:d8:f4:a3:a1:d8:8b:83:bc:bb:d0:79:12:a1:e1:42:3f:a1:
         10:43:4e:5d:f4:a6:13:3f:d4:6f:94:12:25:49:f0:4d:9a:7d:
         c9:44:7d:ef:3d:cb:75:ad:c1:95:18:32:45:27:f2:81:e3:62:
         a9:d7:9a:48:e2:a7:19:73:1b:de:16:16:23:4a:2d:b6:a8:dc:
         45:dd:6f:a5:0d:59:73:23:79:b3:50:66:ae:5a:06:de:be:ad:
         0a:02:bf:19:47:a2:2a:c0:40:a5:55:e0:83:c4:52:df:6e:d8:
         01:20:e2:ec:dd:e0:cc:49:f1:96:ea:08:7a:b2:79:7b:05:d1:
         5d:f2:7c:6b:9a:42:4b:e1:62:a6:ab:5f:03:a4:71:d3:80:ec:
         8e:15:af:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD
NUQzRERFOEIwHhcNMjYwOTAzMDAwMzMzWhcNMjYwOTEwMDAwMzMzWjAYMRYwFAYD
VQQDEw02YTk4Yjk1Ni1kMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv8HqJAaCifEH8L7/vNlFXpWdcDfaCpCFRErQiASY/62QA1w+D34Okdd+g8Xo
64UjlaAHZnojQxE3LYHxajdRVeUKC+lMmOF22LLH2XdqvwD7aSmFnAvb9KhHapF2
cQWsX8xneaFbpYkoXKNixbExAlJkFmIyMSe7P4PuxVGicq1mkPGBe7AOv5aytJrZ
//OXCCPpN2qMjLsWZpxD2j9sPfGs5gACcyAW3ReDoIWdV9h4ipbyey0yWabOGm1K
32y/H7heTbU34B6wkoLwMwpfHXpPybUKvlbfky5PpGmJX2wNivQpmrcYgL1n87U7
sm0uOJ7ok7x3XLsmhjxaUyzCAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOo6qN/
BXg/APBfmeGjVtZcO40rMB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0
Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF
UXlxQm00R0ptMkRGMDkzb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD80h9/id1XoEdLKLWIJN80+eOtWx6AifeKJYfbrdgiXYsW0Tl+2Tzrt7VXT4
YiIpY/f/zwm+oGJ7pjtaAKbdBB4YmPuu9rGFjuit8fFnewPmctXtKmWtYYM1vnJZ
7YGd8imJih3WAAYkW2PG69j0o6HYi4O8u9B5EqHhQj+hEENOXfSmEz/Ub5QSJUnw
TZp9yUR97z3Lda3BlRgyRSfygeNiqdeaSOKnGXMb3hYWI0ottqjcRd1vpQ1ZcyN5
s1BmrloG3r6tCgK/GUeiKsBApVXgg8RS327YASDi7N3gzEnxluoIerJ5ewXRXfJ8
a5pCS+FipqtfA6Rx04DsjhWvaA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:12:52 2026 by rpki-client