Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File:                     N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier:          TiH1xBB/xyBzP2aw8pOp/+EzqX8aJjXGD+0faHkIxKw=
Subject key identifier:   49:3D:9D:4D:E3:F8:B1:49:07:C7:1A:F5:25:B9:A8:57:E1:DC:3E:F0
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer:       /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number:          6A
Signing time:             Mon 29 Jun 2026 08:41:42 +0000
Manifest this update:     Mon 29 Jun 2026 08:41:42 +0000
Manifest next update:     Mon 06 Jul 2026 08:41:42 +0000
Files and hashes:         1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: QLV0D7sjPg/l5+xjdXPg3b/E1nO2QWWzse3GtZGWU3g=)
                          2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
                          3: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 08:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
        Validity
            Not Before: Jun 29 08:41:42 2026 GMT
            Not After : Jul  6 08:41:42 2026 GMT
        Subject: CN=6a422fc6-361a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:d5:3b:a1:0f:a7:4e:80:0f:f5:fa:59:af:
                    69:2c:fb:cc:bc:48:08:1d:ac:76:4e:1f:5b:ee:ed:
                    21:0a:c7:29:48:80:bc:ff:df:e8:6b:38:cd:35:5e:
                    18:08:3d:a5:47:07:80:ce:67:2b:09:22:22:ce:a6:
                    0e:80:81:66:c0:1d:db:20:33:44:61:38:4e:73:5f:
                    02:75:df:a6:cb:8b:5e:9e:0d:3c:10:39:a9:c2:77:
                    b6:1c:81:c4:3c:2e:ef:d9:39:00:32:ee:dc:77:53:
                    7b:f1:0e:b6:2a:22:6e:0c:9b:3c:f5:f1:22:2a:23:
                    4d:06:c2:8c:31:45:33:64:d8:18:49:12:a2:71:8f:
                    ce:de:12:7b:2b:0a:2a:63:b9:20:25:77:67:4f:5c:
                    17:04:1e:f1:11:5e:43:0c:b8:19:66:4b:34:25:81:
                    59:b1:89:8f:17:54:07:ea:df:fd:83:64:f7:2c:be:
                    ad:c8:6a:44:33:49:dc:20:2c:2b:d0:cb:e8:ce:2e:
                    79:d6:42:02:57:d3:bb:0e:43:5c:f3:5f:f2:db:c4:
                    c6:5b:2c:19:b5:83:76:c9:9a:b9:84:cb:87:bf:ab:
                    b6:4f:56:ad:cb:9c:ca:cf:0f:a6:d1:ad:6f:56:ce:
                    85:2c:4e:12:0e:10:8d:84:58:5b:31:09:3d:fd:e8:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3D:9D:4D:E3:F8:B1:49:07:C7:1A:F5:25:B9:A8:57:E1:DC:3E:F0
            X509v3 Authority Key Identifier:
                keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:93:c9:57:27:af:c4:dc:ba:37:32:fe:34:3a:cb:a6:b4:9f:
         f8:91:40:5a:1a:e0:3c:d4:32:f2:c8:0f:ae:e2:c4:5c:ef:5d:
         71:b3:e2:da:c3:c0:17:36:b3:f9:bc:93:11:b9:46:26:af:c3:
         1a:b8:fb:f7:38:fd:a1:a0:ae:a9:24:bc:4a:6a:ad:10:05:09:
         a9:ed:80:a7:a0:00:ef:53:27:f4:55:9d:b7:94:9d:96:d9:40:
         e0:ca:1a:48:1d:4e:6b:b6:19:a6:1c:c0:a4:3a:f3:28:67:b6:
         82:8e:fc:4c:24:a8:71:1d:09:3b:e7:ca:fa:5b:15:f7:4c:bb:
         74:d1:4e:27:6f:2b:28:e3:a5:46:7d:08:e0:32:b4:5c:6d:c4:
         a3:62:5e:f1:9f:da:ae:15:c4:e2:d7:65:0b:21:fd:c9:c0:7b:
         36:02:56:a8:d0:7a:b7:9e:1a:c1:26:8f:d3:41:ed:40:df:eb:
         0b:1b:e9:59:f5:b0:31:ff:e2:25:f3:2b:85:8d:2e:4a:c5:05:
         53:b9:fa:de:06:e1:57:f4:19:ba:ad:ef:85:41:cd:aa:8b:67:
         6d:ea:92:b6:ac:a8:82:b0:a0:74:fb:b7:f4:af:73:28:8d:9a:
         ae:7b:1e:47:a6:58:a7:c7:78:21:b0:8c:85:7f:e2:17:95:bd:
         d0:b3:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:27:11 2026 by rpki-client