Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
File:                     6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json)
Hash identifier:          ryybTVUg/8Uagd121rMsBUDwBLtcaVpty+isAWDr5zc=
Subject key identifier:   37:33:13:AE:B1:FE:82:6A:00:39:37:CB:32:33:2F:33:6C:EE:27:EF
Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Certificate issuer:       /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
Manifest number:          3F
Signing time:             Sun 05 Jul 2026 09:15:13 +0000
Manifest this update:     Sun 05 Jul 2026 09:15:13 +0000
Manifest next update:     Sun 12 Jul 2026 09:15:13 +0000
Files and hashes:         1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: jEGIc6WAPB6ST3sRY99IC0Te2ctRzh7Rv9hb4xtTCtI=)
                          2: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: fYSO4EkACFFF5hAoMPUl96CHjFMY11d2KjA4W0FFZmw=)
                          3: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
        Validity
            Not Before: Jul  5 09:15:13 2026 GMT
            Not After : Jul 12 09:15:13 2026 GMT
        Subject: CN=6a4a20a1-5033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:15:30:84:1d:df:30:8d:ec:08:be:55:18:
                    b1:91:63:7e:6c:3d:b7:4b:39:1d:c3:68:3b:c1:f2:
                    b4:39:df:08:51:ee:f7:0c:09:2e:58:6e:11:a5:da:
                    f2:23:d5:43:77:1e:59:91:18:bc:73:22:15:5a:d8:
                    2c:e7:b9:6c:a5:d7:6a:1d:35:34:de:ff:fc:8c:3c:
                    63:24:99:83:f0:a1:b1:b3:1a:21:b2:39:c9:51:84:
                    3a:5d:2e:55:1b:fd:ea:1d:d0:87:d3:c7:39:e0:04:
                    67:9a:38:b1:ed:8f:a8:5f:63:57:53:41:61:06:7c:
                    b0:dc:e8:23:fa:47:49:54:3e:7f:9d:61:ce:bd:c9:
                    e4:d0:f7:2a:42:48:5c:ec:e6:0e:6e:74:18:60:b7:
                    25:ad:fd:6c:61:51:8d:27:c9:90:ff:f8:f0:0e:4c:
                    ac:f6:bb:d1:27:93:36:43:95:76:76:2a:a6:ff:19:
                    de:1d:a6:de:67:e4:3b:51:da:77:81:2b:c7:d0:fb:
                    0b:b4:73:9d:7b:0d:4a:5b:63:29:d9:ea:ac:f4:4e:
                    39:79:e0:a5:a2:e4:13:61:4e:d4:41:a0:73:18:14:
                    73:9f:ae:ab:25:6e:26:5f:45:20:d7:22:8b:2e:ff:
                    1c:bb:64:46:d6:0f:1e:90:d4:92:e7:ad:82:68:6b:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:33:13:AE:B1:FE:82:6A:00:39:37:CB:32:33:2F:33:6C:EE:27:EF
            X509v3 Authority Key Identifier:
                keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:69:14:5c:e3:6e:17:35:b4:00:af:27:66:8d:f2:d1:03:87:
         71:fa:43:dd:18:5f:25:9a:23:a5:6d:08:80:d7:1f:24:5a:94:
         47:f0:2d:f2:cd:f4:3b:46:95:06:6a:38:be:0a:4c:9c:5b:a5:
         89:70:73:72:97:63:96:eb:a3:54:64:1a:d8:83:45:a8:75:dc:
         12:63:11:7e:f4:0f:78:c3:f5:58:31:89:0f:03:c0:0b:3c:16:
         05:b9:7b:6a:2e:66:bf:a2:e8:e1:90:aa:3f:fd:38:29:41:02:
         a8:60:0b:1e:9e:1c:00:ff:eb:85:fe:f5:a8:0b:cb:8b:28:53:
         27:ab:a4:ea:08:dc:8c:af:73:c1:27:80:2b:9c:d6:ca:67:90:
         e0:df:c3:b7:66:f5:76:91:fb:32:fd:50:71:c6:8e:2c:f3:6f:
         66:0b:bc:3e:83:27:60:c9:32:98:a2:9b:62:ed:3a:48:fd:d0:
         55:b9:f8:24:ed:b6:40:1f:c7:c7:0f:c0:d6:5f:75:23:ac:9b:
         b1:fb:41:af:ab:8d:f0:c8:43:13:f0:bb:84:2d:4c:a5:f8:37:
         7e:91:0d:61:a7:18:e9:9b:5e:d5:d4:cf:5f:1d:9a:e9:78:1a:
         67:06:9c:17:3f:06:f6:ee:64:6e:5d:9f:84:3c:8f:6b:73:76:
         b9:9f:8b:62
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB
Q0E1MjVEQTAeFw0yNjA3MDUwOTE1MTNaFw0yNjA3MTIwOTE1MTNaMBgxFjAUBgNV
BAMTDTZhNGEyMGExLTUwMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4XxUwhB3fMI3sCL5VGLGRY35sPbdLOR3DaDvB8rQ53whR7vcMCS5YbhGl2vIj
1UN3HlmRGLxzIhVa2CznuWyl12odNTTe//yMPGMkmYPwobGzGiGyOclRhDpdLlUb
/eod0IfTxzngBGeaOLHtj6hfY1dTQWEGfLDc6CP6R0lUPn+dYc69yeTQ9ypCSFzs
5g5udBhgtyWt/WxhUY0nyZD/+PAOTKz2u9EnkzZDlXZ2Kqb/Gd4dpt5n5DtR2neB
K8fQ+wu0c517DUpbYynZ6qz0Tjl54KWi5BNhTtRBoHMYFHOfrqslbiZfRSDXIosu
/xy7ZEbWDx6Q1JLnrYJoa1RpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNzMTrrH+
gmoAOTfLMjMvM2zuJ+8wHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG
RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
MDY0L0QxMkIxQzc4MUNGRjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFV
UjI3TFJ4X1hkVGF5bEpkby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA2aRRc424XNbQArydmjfLRA4dx+kPdGF8lmiOlbQiA1x8kWpRH8C3yzfQ7RpUG
aji+CkycW6WJcHNyl2OW66NUZBrYg0WoddwSYxF+9A94w/VYMYkPA8ALPBYFuXtq
Lma/oujhkKo//TgpQQKoYAsenhwA/+uF/vWoC8uLKFMnq6TqCNyMr3PBJ4ArnNbK
Z5Dg38O3ZvV2kfsy/VBxxo4s829mC7w+gydgyTKYopti7TpI/dBVufgk7bZAH8fH
D8DWX3UjrJux+0Gvq43wyEMT8LuELUyl+Dd+kQ1hpxjpm17V1M9fHZrpeBpnBpwX
Pwb27mRuXZ+EPI9rc3a5n4ti
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:39:53 2026 by rpki-client