Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
File:                     a6spHHXSmuNRQl8zWSdvmWpHY4o.mft (raw, json)
Hash identifier:          a93iX2MSzK9r/GdLTlTT0JP0tdnO+HhYGE4oTHnB9Rg=
Subject key identifier:   5F:68:42:E3:6C:9F:1E:CA:81:EB:F5:C1:7B:21:93:AE:A7:6A:66:29
Authority key identifier: 6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A
Certificate issuer:       /CN=A91BE2F6/serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
Manifest number:          02
Signing time:             Tue 02 Jun 2026 08:24:19 +0000
Manifest this update:     Tue 02 Jun 2026 08:24:19 +0000
Manifest next update:     Tue 09 Jun 2026 08:24:19 +0000
Files and hashes:         1: a6spHHXSmuNRQl8zWSdvmWpHY4o.crl (hash: 4OyDLD7jaRIz3ALwN0WUhueT4kCBA3tgTCcNXMMwd2Q=)
                          2: 70FBEBF45E5C11F18CFD5F700D7AAC22.roa (hash: i0tj7RMQgOcOuyqDW6PhqjVGODM75vtYFvLbA/6Ejjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.crl
                          rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 08:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE2F6, serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
        Validity
            Not Before: Jun  2 08:24:19 2026 GMT
            Not After : Jun  9 08:24:19 2026 GMT
        Subject: CN=6a1e9333-c32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:66:b7:1b:28:88:83:67:c1:90:ea:4b:58:
                    c0:3d:56:0f:34:65:b9:57:c1:02:50:03:b1:75:24:
                    4b:69:49:23:fa:1f:54:a4:df:08:95:66:bc:31:0e:
                    0e:b9:45:5a:f9:9b:dd:74:0b:7e:82:9e:9e:3d:ef:
                    08:df:5c:f2:72:1d:d9:b4:ad:5f:5b:1a:24:be:29:
                    d9:a6:87:7a:52:1f:a2:e3:ba:75:27:76:f2:11:1a:
                    b7:58:c6:47:cf:e2:d8:75:d9:b3:ce:8e:e0:c5:b3:
                    63:65:56:fd:7f:57:07:98:e2:08:43:9e:30:71:05:
                    68:ef:fe:fa:73:f6:a2:d5:d9:69:18:69:98:ea:8b:
                    e1:55:8a:c4:99:08:99:45:30:7b:76:42:1a:e2:0c:
                    a1:c2:38:45:76:b6:47:ad:e2:ce:31:7a:41:8d:be:
                    de:70:12:5f:ba:1b:8f:b9:0e:0a:62:38:ac:bd:b0:
                    40:42:e6:ae:eb:29:fb:eb:f0:33:d6:7b:08:36:ab:
                    42:ba:c3:76:84:27:0d:64:a0:71:20:40:ef:cb:ff:
                    7e:ab:48:91:f3:be:28:df:22:be:05:73:1d:64:3e:
                    03:ea:03:0e:7c:b7:56:d4:2b:11:66:50:5b:b0:c4:
                    29:5c:a0:a7:4d:46:17:ac:8e:7d:41:47:9f:43:16:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:68:42:E3:6C:9F:1E:CA:81:EB:F5:C1:7B:21:93:AE:A7:6A:66:29
            X509v3 Authority Key Identifier:
                keyid:6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:1b:9c:e9:ca:36:80:8d:27:0b:c5:b3:96:34:f1:4d:3c:
         df:c5:bc:08:e0:04:02:f5:fa:da:5d:bd:66:c9:65:03:7f:30:
         25:af:91:42:62:16:0b:3a:e3:62:68:b3:ae:89:5b:75:2d:32:
         c7:00:40:05:2f:34:a7:94:e1:ab:cd:39:f5:69:af:b0:bb:86:
         9e:dd:6b:59:81:e6:3c:52:2c:dc:bc:05:45:e8:7c:fe:41:5f:
         ba:34:52:2f:40:aa:5f:ee:f1:69:b5:3e:25:65:40:27:e0:9b:
         1b:fd:ce:ba:71:8b:98:ab:67:eb:47:3f:7d:ca:b7:fa:88:a4:
         ee:ae:56:3e:82:3d:40:87:c9:9c:c9:22:8f:7d:0a:a8:56:88:
         db:a6:ff:dc:c9:b9:60:db:33:15:6f:75:77:ae:dc:59:6b:fc:
         f8:6f:3a:17:13:dd:dd:0e:c6:5a:65:39:5a:c6:ba:d0:6b:e8:
         55:7b:07:95:ff:5b:57:59:dc:36:6d:b2:d8:26:d4:7b:17:a0:
         e2:13:aa:3f:e6:3d:8d:6a:de:ff:da:79:18:da:a6:79:2b:11:
         7a:e2:cb:e8:c0:6e:42:ef:14:07:78:a3:7f:ee:6d:e7:f9:37:
         90:e9:aa:df:73:99:b0:30:9f:27:76:06:64:d0:85:f3:34:17:
         22:88:ac:8b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RTJGNjExMC8GA1UEBRMoNkJBQjI5MUM3NUQyOUFFMzUxNDI1RjMzNTkyNzZGOTk2
QTQ3NjM4QTAeFw0yNjA2MDIwODI0MTlaFw0yNjA2MDkwODI0MTlaMBgxFjAUBgNV
BAMTDTZhMWU5MzMzLWMzMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCM8Wa3GyiIg2fBkOpLWMA9Vg80ZblXwQJQA7F1JEtpSSP6H1Sk3wiVZrwxDg65
RVr5m910C36Cnp497wjfXPJyHdm0rV9bGiS+Kdmmh3pSH6LjunUndvIRGrdYxkfP
4th12bPOjuDFs2NlVv1/VweY4ghDnjBxBWjv/vpz9qLV2WkYaZjqi+FVisSZCJlF
MHt2QhriDKHCOEV2tket4s4xekGNvt5wEl+6G4+5DgpiOKy9sEBC5q7rKfvr8DPW
ewg2q0K6w3aEJw1koHEgQO/L/36rSJHzvijfIr4Fcx1kPgPqAw58t1bUKxFmUFuw
xClcoKdNRhesjn1BR59DFhN5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUX2hC42yf
HsqB6/XBeyGTrqdqZikwHwYDVR0jBBgwFoAUa6spHHXSmuNRQl8zWSdvmWpHY4ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFMkY2LzBDQTIwNUVFNUU1
QzExRjFCNkJBQTA4MDBDN0FBQzIyL2E2c3BISFhTbXVOUlFsOHpXU2R2bVdwSFk0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYTZzcEhIWFNtdU5SUWw4eldTZHZtV3BIWTRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF
MkY2LzBDQTIwNUVFNUU1QzExRjFCNkJBQTA4MDBDN0FBQzIyL2E2c3BISFhTbXVO
UlFsOHpXU2R2bVdwSFk0by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAIXxuc6co2gI0nC8WzljTxTTzfxbwI4AQC9fraXb1myWUDfzAlr5FCYhYLOuNi
aLOuiVt1LTLHAEAFLzSnlOGrzTn1aa+wu4ae3WtZgeY8UizcvAVF6Hz+QV+6NFIv
QKpf7vFptT4lZUAn4Jsb/c66cYuYq2frRz99yrf6iKTurlY+gj1Ah8mcySKPfQqo
Vojbpv/cyblg2zMVb3V3rtxZa/z4bzoXE93dDsZaZTlaxrrQa+hVeweV/1tXWdw2
bbLYJtR7F6DiE6o/5j2Nat7/2nkY2qZ5KxF64svowG5C7xQHeKN/7m3n+TeQ6arf
c5mwMJ8ndgZk0IXzNBciiKyL
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:42 2026 by rpki-client