Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
File:                     p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft (raw, json)
Hash identifier:          fa88AuFG40DKoOEE/elFeBEkjUzloNj+IqsLG5Vn8ug=
Subject key identifier:   26:83:B3:59:6F:FE:85:A0:10:19:DD:D5:0B:97:A9:1C:76:7E:8E:A2
Authority key identifier: A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4
Certificate issuer:       /CN=A91E3125/serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
Manifest number:          3A
Signing time:             Tue 07 Jul 2026 09:48:34 +0000
Manifest this update:     Tue 07 Jul 2026 09:48:34 +0000
Manifest next update:     Tue 14 Jul 2026 09:48:34 +0000
Files and hashes:         1: p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl (hash: yfTRytopQYlMCs++VaBo0xjhaj653ehZJbDT8VvDlJA=)
                          2: BB455B6A21B611F180955D50193D8C67.roa (hash: T5dGYO6xIA3iT8OTT5zsMy1BjQKaQzVyRcAZAGPI9p0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3125, serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
        Validity
            Not Before: Jul  7 09:48:34 2026 GMT
            Not After : Jul 14 09:48:34 2026 GMT
        Subject: CN=6a4ccb72-967c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:de:a6:c2:05:bc:95:30:3b:79:13:62:00:
                    02:08:7f:8d:19:8d:8f:93:16:8b:f1:63:56:07:1b:
                    99:c5:6b:3d:b9:64:15:b8:86:3c:8f:26:7c:ba:ec:
                    5a:c1:9f:b3:89:4c:ef:0c:8a:34:94:a1:ee:ad:0c:
                    bf:ac:d7:a2:87:67:21:9a:09:53:71:20:eb:d6:02:
                    c2:ad:14:30:6a:7d:8f:fd:7a:ab:26:9b:f3:9a:45:
                    b9:1c:19:f0:a3:0c:fe:ba:cc:ba:c1:45:af:6b:bd:
                    fa:52:d8:c0:12:40:ba:4e:c4:7e:db:60:b4:78:ed:
                    15:27:d9:b5:72:70:ff:46:3d:e0:c1:e5:03:4a:f8:
                    db:b3:02:54:cf:6a:9e:73:ee:95:45:4a:ab:b6:d8:
                    51:b6:80:51:89:5d:f5:35:c9:56:48:3c:4f:57:97:
                    6c:38:6f:58:11:ad:f1:59:36:c4:a3:de:da:df:a8:
                    d6:ca:dd:96:62:1f:2e:4d:00:6a:0c:96:cc:6d:d4:
                    7f:b1:6f:9b:b7:ce:da:08:3d:91:1c:2e:4a:57:7d:
                    70:11:56:e4:60:1f:4c:eb:14:79:01:93:70:ab:ba:
                    54:2f:5e:f4:74:e8:87:12:67:05:b4:ca:15:82:c7:
                    64:ec:85:a7:75:9d:35:0b:6f:bf:92:c7:c9:cd:85:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:83:B3:59:6F:FE:85:A0:10:19:DD:D5:0B:97:A9:1C:76:7E:8E:A2
            X509v3 Authority Key Identifier:
                keyid:A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:23:81:74:ac:c2:3b:77:ab:2f:38:b3:ca:17:f4:75:c6:d9:
         ac:01:9a:d0:ad:79:6a:9f:53:a7:c8:86:a3:b9:b0:77:08:51:
         ea:1f:f1:12:95:bd:08:fe:7c:68:3d:58:5c:95:54:87:66:fe:
         d6:95:13:6f:e5:b8:00:d1:7a:d3:6c:5a:04:4d:0d:17:6c:e7:
         a7:34:84:20:77:ab:e4:6b:ad:fd:a9:e1:85:0f:67:b5:d9:f6:
         91:b2:fc:5e:06:37:ce:73:be:58:90:3e:1a:08:f4:4a:45:73:
         d6:bb:83:9a:37:26:00:7b:cd:a3:e6:92:96:55:38:c3:10:18:
         15:d6:23:93:f6:a7:65:92:e7:e7:84:fb:cd:74:1c:b7:e9:95:
         26:ca:fe:f1:97:07:7f:12:7c:82:d5:77:dc:e4:88:3d:ee:b0:
         3b:a2:10:89:5b:94:d2:66:1b:9a:dd:5e:a2:26:62:82:75:66:
         de:5c:4c:0d:33:19:64:07:8e:f2:4f:7b:ea:a0:2d:d3:5a:0e:
         5b:39:25:a2:bc:ad:da:8a:94:4c:ac:2e:4c:aa:16:5d:eb:7c:
         1c:7e:3d:4c:9f:81:3d:68:7e:94:0b:57:73:f0:14:31:90:17:
         c4:97:97:08:ab:23:eb:29:1a:f8:ff:3e:2d:75:94:a7:35:d6:
         fe:03:d6:62
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MzEyNTExMC8GA1UEBRMoQTdBMTEwQzhBNDAyOUUyNTIxNTQ2M0NFRTIxREE1N0ZC
NjRCOEFFNDAeFw0yNjA3MDcwOTQ4MzRaFw0yNjA3MTQwOTQ4MzRaMBgxFjAUBgNV
BAMTDTZhNGNjYjcyLTk2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTWN6mwgW8lTA7eRNiAAIIf40ZjY+TFovxY1YHG5nFaz25ZBW4hjyPJny67FrB
n7OJTO8MijSUoe6tDL+s16KHZyGaCVNxIOvWAsKtFDBqfY/9eqsmm/OaRbkcGfCj
DP66zLrBRa9rvfpS2MASQLpOxH7bYLR47RUn2bVycP9GPeDB5QNK+NuzAlTPap5z
7pVFSqu22FG2gFGJXfU1yVZIPE9Xl2w4b1gRrfFZNsSj3trfqNbK3ZZiHy5NAGoM
lsxt1H+xb5u3ztoIPZEcLkpXfXARVuRgH0zrFHkBk3CrulQvXvR06IcSZwW0yhWC
x2Tshad1nTULb7+Sx8nNheIlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJoOzWW/+
haAQGd3VC5epHHZ+jqIwHwYDVR0jBBgwFoAUp6EQyKQCniUhVGPO4h2lf7ZLiuQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzMTI1LzcxNzJFMDk4MjFC
NjExRjE4OTNGQkNGRDE4M0Q4QzY3L3A2RVF5S1FDbmlVaFZHUE80aDJsZjdaTGl1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcDZFUXlLUUNuaVVoVkdQTzRoMmxmN1pMaXVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz
MTI1LzcxNzJFMDk4MjFCNjExRjE4OTNGQkNGRDE4M0Q4QzY3L3A2RVF5S1FDbmlV
aFZHUE80aDJsZjdaTGl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAAI4F0rMI7d6svOLPKF/R1xtmsAZrQrXlqn1OnyIajubB3CFHqH/ESlb0I/nxo
PVhclVSHZv7WlRNv5bgA0XrTbFoETQ0XbOenNIQgd6vka639qeGFD2e12faRsvxe
BjfOc75YkD4aCPRKRXPWu4OaNyYAe82j5pKWVTjDEBgV1iOT9qdlkufnhPvNdBy3
6ZUmyv7xlwd/EnyC1Xfc5Ig97rA7ohCJW5TSZhua3V6iJmKCdWbeXEwNMxlkB47y
T3vqoC3TWg5bOSWivK3aipRMrC5MqhZd63wcfj1Mn4E9aH6UC1dz8BQxkBfEl5cI
qyPrKRr4/z4tdZSnNdb+A9Zi
-----END CERTIFICATE-----
Generated at Wed Jul 8 20:46:02 2026 by rpki-client