Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft
File:                     up6S-dvr9GsA8EzcssyhDLOpy1k.mft (raw, json)
Hash identifier:          m0uXRPVXnA43SPpEO1wwxMjTo1KuwADHt7nDprIdYq0=
Subject key identifier:   1F:EA:85:E4:0C:79:67:91:79:E9:2A:AB:BE:F1:2A:05:B6:87:4D:DB
Authority key identifier: BA:9E:92:F9:DB:EB:F4:6B:00:F0:4C:DC:B2:CC:A1:0C:B3:A9:CB:59
Certificate issuer:       /CN=A91F146E/serialNumber=BA9E92F9DBEBF46B00F04CDCB2CCA10CB3A9CB59
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/up6S-dvr9GsA8EzcssyhDLOpy1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft
Manifest number:          27
Signing time:             Wed 19 Aug 2026 09:33:16 +0000
Manifest this update:     Wed 19 Aug 2026 09:33:15 +0000
Manifest next update:     Wed 26 Aug 2026 09:33:15 +0000
Files and hashes:         1: up6S-dvr9GsA8EzcssyhDLOpy1k.crl (hash: GYudWvw7pojFnfzenB/p1vA5JchiQ40Jhi3Jf7g+NRc=)
                          2: 4351D97663C411F18EB919B97D47A888.roa (hash: LcI6Ko/amxefDFMR+j9QBtvlBr3SLK5q6W1Bwhc2cTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.crl
                          rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/up6S-dvr9GsA8EzcssyhDLOpy1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F146E, serialNumber=BA9E92F9DBEBF46B00F04CDCB2CCA10CB3A9CB59
        Validity
            Not Before: Aug 19 09:33:15 2026 GMT
            Not After : Aug 26 09:33:15 2026 GMT
        Subject: CN=6a85785b-5c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:ff:f6:94:72:84:ed:a9:ed:5e:4f:f3:31:
                    9a:a8:0d:96:75:da:d5:99:36:16:1a:58:e6:36:36:
                    3b:d5:38:15:b4:2f:5a:16:7a:78:c8:6e:55:60:4f:
                    b8:ed:ba:f8:07:23:fb:23:38:c8:8b:5d:16:cb:29:
                    37:ce:5b:f1:c0:2e:53:f8:72:77:96:d4:2c:fd:e2:
                    f9:1e:54:07:da:99:f3:b8:4c:6a:50:92:c8:df:fe:
                    a7:fe:25:72:21:74:45:cf:b9:6d:22:ba:b5:fd:6c:
                    39:4f:51:3f:6c:c9:6e:78:55:58:f8:d2:a6:96:b7:
                    ee:bf:f3:e3:39:ea:86:f0:73:83:55:c5:8b:e0:ea:
                    b9:32:98:9d:39:64:fb:5b:98:d8:6d:1f:40:14:81:
                    3c:df:2b:44:40:1a:c6:42:d7:e7:77:a2:cd:c8:49:
                    8b:4c:80:ef:de:14:78:c0:f6:a6:d4:7c:0d:61:ab:
                    aa:ac:87:1d:9f:6c:11:a8:41:7b:37:e4:0a:e3:c6:
                    c0:d1:80:d7:cb:96:b3:da:d9:7b:20:f8:48:5b:7b:
                    e1:9c:67:d7:be:81:a9:b6:0f:42:7b:34:2a:bf:7b:
                    c1:cd:1c:fb:7d:20:d8:27:a2:a8:15:0f:a4:1a:67:
                    8c:82:b3:3e:f4:80:15:b9:6d:c8:d7:b4:88:59:b9:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EA:85:E4:0C:79:67:91:79:E9:2A:AB:BE:F1:2A:05:B6:87:4D:DB
            X509v3 Authority Key Identifier:
                keyid:BA:9E:92:F9:DB:EB:F4:6B:00:F0:4C:DC:B2:CC:A1:0C:B3:A9:CB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/up6S-dvr9GsA8EzcssyhDLOpy1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:5c:e4:1c:8f:86:e6:c0:ee:2f:b2:81:c6:c4:de:49:35:
         70:35:2e:65:c0:c7:e8:63:86:90:4e:91:60:74:f3:5e:eb:a6:
         e1:9a:b3:4b:9d:3a:22:16:5f:8e:81:75:ab:7b:7e:a1:f9:7b:
         5c:e2:dc:7b:12:64:11:8d:c0:0d:89:bd:59:76:8f:fe:9e:11:
         8b:9b:6b:e5:37:58:b6:cf:c9:86:5e:75:e4:98:a1:59:d3:85:
         60:a4:f2:12:99:1e:29:0c:3a:34:71:c6:b4:ba:0f:b6:e0:48:
         50:80:52:b1:f9:34:c7:14:c0:58:a1:bf:c4:4b:94:34:4d:b1:
         10:86:19:b3:00:62:72:c4:0e:a4:bd:06:d2:13:fd:ec:04:bc:
         49:2d:58:c4:a0:96:e8:c7:ca:ef:57:79:37:a3:37:9b:e8:f9:
         0f:72:9d:d5:f0:ef:79:15:a5:c2:64:05:84:a4:13:fe:aa:dd:
         1c:b8:4c:c7:95:b4:0d:36:77:8c:77:03:04:a8:b5:dd:44:86:
         01:c9:31:57:76:8c:a7:aa:e6:58:a5:b3:56:1f:f6:f2:9a:33:
         9e:b4:8b:81:69:76:0a:cc:02:5b:3d:30:dd:4e:c3:25:93:a8:
         c0:88:d3:cf:db:17:39:71:05:d9:d9:50:58:c2:8b:58:30:bb:
         6f:56:6f:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MTQ2RTExMC8GA1UEBRMoQkE5RTkyRjlEQkVCRjQ2QjAwRjA0Q0RDQjJDQ0ExMENC
M0E5Q0I1OTAeFw0yNjA4MTkwOTMzMTVaFw0yNjA4MjYwOTMzMTVaMBgxFjAUBgNV
BAMTDTZhODU3ODViLTVjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCb4f/2lHKE7antXk/zMZqoDZZ12tWZNhYaWOY2NjvVOBW0L1oWenjIblVgT7jt
uvgHI/sjOMiLXRbLKTfOW/HALlP4cneW1Cz94vkeVAfamfO4TGpQksjf/qf+JXIh
dEXPuW0iurX9bDlPUT9syW54VVj40qaWt+6/8+M56obwc4NVxYvg6rkymJ05ZPtb
mNhtH0AUgTzfK0RAGsZC1+d3os3ISYtMgO/eFHjA9qbUfA1hq6qshx2fbBGoQXs3
5ArjxsDRgNfLlrPa2Xsg+Ehbe+GcZ9e+gam2D0J7NCq/e8HNHPt9INgnoqgVD6Qa
Z4yCsz70gBW5bcjXtIhZuTy/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH+qF5Ax5
Z5F56SqrvvEqBbaHTdswHwYDVR0jBBgwFoAUup6S+dvr9GsA8EzcssyhDLOpy1kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNDZFLzY3QTkzRjRBNjNC
RTExRjE5OEUzMzAwMjdDNDdBODg4L3VwNlMtZHZyOUdzQThFemNzc3loRExPcHkx
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdXA2Uy1kdnI5R3NBOEV6Y3NzeWhETE9weTFrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
NDZFLzY3QTkzRjRBNjNCRTExRjE5OEUzMzAwMjdDNDdBODg4L3VwNlMtZHZyOUdz
QThFemNzc3loRExPcHkxay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAM1lzkHI+G5sDuL7KBxsTeSTVwNS5lwMfoY4aQTpFgdPNe66bhmrNLnToiFl+O
gXWre36h+Xtc4tx7EmQRjcANib1Zdo/+nhGLm2vlN1i2z8mGXnXkmKFZ04VgpPIS
mR4pDDo0cca0ug+24EhQgFKx+TTHFMBYob/ES5Q0TbEQhhmzAGJyxA6kvQbSE/3s
BLxJLVjEoJbox8rvV3k3ozeb6PkPcp3V8O95FaXCZAWEpBP+qt0cuEzHlbQNNneM
dwMEqLXdRIYByTFXdoynquZYpbNWH/bymjOetIuBaXYKzAJbPTDdTsMlk6jAiNPP
2xc5cQXZ2VBYwotYMLtvVm9f
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:08:50 2026 by rpki-client