Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
File:                     6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json)
Hash identifier:          21sDuPEA2xqVBwuvkYd4pz92JFMhnR31LWcAEuu5BW0=
Subject key identifier:   DE:CA:00:5B:50:2B:70:95:11:B3:BC:22:AB:7A:C3:AF:BF:AA:84:5E
Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Certificate issuer:       /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
Manifest number:          59
Signing time:             Tue 25 Aug 2026 08:07:51 +0000
Manifest this update:     Tue 25 Aug 2026 08:07:50 +0000
Manifest next update:     Tue 01 Sep 2026 08:07:50 +0000
Files and hashes:         1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: RRsueObMExFIyjmOyQs9BqR0MOuvz79+BQa/ZW8nzVs=)
                          2: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8=)
                          3: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: fYSO4EkACFFF5hAoMPUl96CHjFMY11d2KjA4W0FFZmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
        Validity
            Not Before: Aug 25 08:07:50 2026 GMT
            Not After : Sep  1 08:07:50 2026 GMT
        Subject: CN=6a8d4d57-c343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:ac:44:2b:38:c4:9c:d5:6e:2b:4d:a7:61:
                    fa:1e:95:4d:0a:d5:82:2c:81:39:83:32:c9:66:39:
                    0b:96:68:24:b0:4a:7c:df:82:95:70:f7:9a:56:7e:
                    3e:9f:8d:3f:6a:05:ed:e2:01:68:cf:f7:2f:d9:4d:
                    3a:67:2a:b6:b6:34:9d:bb:f7:61:0c:a1:b6:fd:69:
                    49:10:2f:6a:1f:42:5a:38:0e:68:9d:b2:da:ad:35:
                    44:96:8b:7f:76:54:11:59:16:ee:fb:a6:70:29:60:
                    15:b6:f6:3a:55:ec:56:63:bf:8d:e6:86:16:6b:5a:
                    cd:42:b0:e7:01:9e:ea:00:bd:a4:08:d5:bc:1d:be:
                    6c:ba:e1:d5:55:fd:8f:b5:58:dc:69:16:50:81:0a:
                    f3:e8:5a:20:ba:4d:11:7f:f7:9c:35:e1:55:55:25:
                    9f:52:33:34:58:2b:a2:7f:14:ee:49:9c:c6:8b:71:
                    f8:88:c7:17:3b:1e:e5:d2:6a:43:da:d9:7b:7b:0b:
                    f4:9d:c0:34:73:b6:f0:78:d4:12:50:3b:85:ea:40:
                    88:f6:9d:98:53:07:91:8c:82:c0:90:d6:41:d5:90:
                    01:ea:87:82:77:98:2b:ff:fb:25:4b:5c:b4:84:43:
                    02:c6:38:f5:63:e0:a8:7e:5b:e2:ff:4c:af:9f:6f:
                    4f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CA:00:5B:50:2B:70:95:11:B3:BC:22:AB:7A:C3:AF:BF:AA:84:5E
            X509v3 Authority Key Identifier:
                keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:c7:8f:45:e8:9a:38:e3:93:15:e4:6c:40:7a:fc:30:3a:
         c8:89:30:29:da:3c:84:b0:9c:80:48:ed:0f:93:67:dd:92:e2:
         35:fa:35:e7:dd:ec:4a:fd:60:4b:5b:06:3c:e2:45:f3:0f:56:
         da:9c:f0:a1:23:4e:73:1b:a2:f9:d9:b6:71:c6:ee:ec:57:13:
         26:a8:e4:bc:cc:64:99:b0:77:a0:06:3f:bf:ab:e9:1a:fe:67:
         80:23:d4:c0:99:81:64:a7:41:39:29:03:6f:e7:bd:da:7d:b8:
         07:d0:95:15:36:19:35:60:cb:d4:49:0a:46:e9:d0:91:d8:c4:
         8c:fe:dc:7a:97:cf:ff:3d:e0:e5:bc:df:f1:c9:65:be:40:49:
         a5:78:56:dd:c6:b7:a9:0f:77:7a:1b:26:b5:cf:3e:24:f5:3c:
         c0:cb:14:5b:02:f3:4a:6f:74:4e:c5:23:70:c1:7f:d0:9a:30:
         87:ac:e2:66:46:a8:fb:73:52:e1:70:0d:a9:08:ae:31:c9:56:
         cc:4d:c7:ae:72:02:6b:a3:a5:ee:0f:95:9e:4a:dc:4f:7c:72:
         34:cd:c5:f2:98:a2:0e:dd:6b:37:a7:fd:4e:e1:fc:cf:b2:16:
         c8:05:43:2f:74:c3:a2:65:4c:b7:15:fc:00:f7:8c:00:72:3d:
         39:4b:a4:99
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB
Q0E1MjVEQTAeFw0yNjA4MjUwODA3NTBaFw0yNjA5MDEwODA3NTBaMBgxFjAUBgNV
BAMTDTZhOGQ0ZDU3LWMzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCje6xEKzjEnNVuK02nYfoelU0K1YIsgTmDMslmOQuWaCSwSnzfgpVw95pWfj6f
jT9qBe3iAWjP9y/ZTTpnKra2NJ2792EMobb9aUkQL2ofQlo4DmidstqtNUSWi392
VBFZFu77pnApYBW29jpV7FZjv43mhhZrWs1CsOcBnuoAvaQI1bwdvmy64dVV/Y+1
WNxpFlCBCvPoWiC6TRF/95w14VVVJZ9SMzRYK6J/FO5JnMaLcfiIxxc7HuXSakPa
2Xt7C/SdwDRztvB41BJQO4XqQIj2nZhTB5GMgsCQ1kHVkAHqh4J3mCv/+yVLXLSE
QwLGOPVj4Kh+W+L/TK+fb0+5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3soAW1Ar
cJURs7wiq3rDr7+qhF4wHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG
RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
MDY0L0QxMkIxQzc4MUNGRjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFV
UjI3TFJ4X1hkVGF5bEpkby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbE8ePReiaOOOTFeRsQHr8MDrIiTAp2jyEsJyASO0Pk2fdkuI1+jXn3exK/WBL
WwY84kXzD1banPChI05zG6L52bZxxu7sVxMmqOS8zGSZsHegBj+/q+ka/meAI9TA
mYFkp0E5KQNv573afbgH0JUVNhk1YMvUSQpG6dCR2MSM/tx6l8//PeDlvN/xyWW+
QEmleFbdxrepD3d6Gya1zz4k9TzAyxRbAvNKb3ROxSNwwX/QmjCHrOJmRqj7c1Lh
cA2pCK4xyVbMTceucgJro6XuD5WeStxPfHI0zcXymKIO3Ws3p/1O4fzPshbIBUMv
dMOiZUy3FfwA94wAcj05S6SZ
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:38 2026 by rpki-client