Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
File:                     6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json)
Hash identifier:          L3ZCZXCkG3hC11witMTOvHmCaRtR+5ky5uurMnCzcp4=
Subject key identifier:   06:9E:C0:26:DD:5E:68:C4:73:73:45:8E:D5:5E:F5:CD:D3:92:AE:AB
Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44
Certificate issuer:       /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
Certificate serial:       04F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
Manifest number:          04E5
Signing time:             Tue 22 Sep 2026 23:22:32 +0000
Manifest this update:     Tue 22 Sep 2026 23:22:31 +0000
Manifest next update:     Tue 29 Sep 2026 23:22:31 +0000
Files and hashes:         1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: tldnEoukaM2tQKMvqTH9H/hvRjuOTxskkxZ8bAKwCTE=)
                          2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: gUiW2vAjoVWGmxrK7l/5cBeg47nEU1anGQrH3sCs9Nc=)
                          3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: TGbZZQRtOxkLwoI+sDoyzXNZ3IGSlLxUsDOYQ4o4eXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944
        Validity
            Not Before: Sep 22 23:22:31 2026 GMT
            Not After : Sep 29 23:22:31 2026 GMT
        Subject: CN=6ab30db8-4c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:7d:85:8b:c7:bd:9e:52:37:ca:22:e7:dd:
                    ce:d4:27:cd:de:d4:e0:17:d2:89:56:41:c4:0a:a5:
                    c6:46:58:73:ac:55:da:26:27:f7:ce:cd:14:ee:3c:
                    06:7d:21:a4:d6:b2:9d:54:52:01:7d:d2:2b:65:3d:
                    b3:1a:7e:99:79:a3:0a:b6:24:98:5c:ca:fd:8b:ef:
                    b9:bc:40:cb:bd:f4:5c:1b:0a:19:48:27:7d:5b:42:
                    3d:32:d1:e7:28:f1:5b:a3:ab:e8:06:9b:6e:24:12:
                    9d:2a:0a:95:59:7e:03:99:b6:21:e6:4f:be:5b:77:
                    9c:40:97:cf:f4:99:8e:04:c1:a7:6f:01:e4:48:45:
                    11:94:83:36:e7:1b:78:f0:a3:8a:64:83:0a:a4:15:
                    db:07:f8:60:ee:2b:f0:4f:0d:e9:aa:16:f0:7a:6d:
                    1a:82:0c:ee:76:f7:4d:a0:4c:60:e9:7e:84:3a:89:
                    5b:02:1e:1e:5f:83:f3:03:fe:40:bf:a5:96:29:37:
                    19:aa:ad:87:df:e4:93:27:1f:de:60:3b:c1:29:36:
                    21:4f:9b:4d:a8:c4:48:9c:71:31:0e:f6:70:19:f9:
                    bd:0c:de:7f:40:22:cc:38:db:4f:ca:cf:7e:7c:ac:
                    53:68:c4:5d:2d:94:38:37:55:9d:63:c1:2a:2b:a9:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9E:C0:26:DD:5E:68:C4:73:73:45:8E:D5:5E:F5:CD:D3:92:AE:AB
            X509v3 Authority Key Identifier:
                keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:40:a4:6b:13:ef:9a:0a:30:27:f4:94:d0:42:c0:0e:87:
         87:33:fc:5c:bf:45:07:3f:a2:a9:4f:3d:d8:c2:61:32:d0:6b:
         51:aa:43:6b:2c:57:98:19:ad:ab:38:25:6b:27:e5:d8:5f:cc:
         f8:f0:d6:49:10:91:1d:f2:f5:70:95:2a:57:34:10:a7:4a:4f:
         57:61:6e:62:53:2e:1b:a7:41:53:d9:40:35:34:0a:2a:36:0b:
         c1:c3:43:aa:8e:96:54:15:f6:b1:06:5e:ae:e9:db:2a:15:98:
         0a:00:e6:fe:e3:2a:cf:31:bf:a2:88:1a:2c:f5:80:99:63:1a:
         f9:f9:73:54:b0:18:1f:92:39:a6:32:c2:1b:d9:3c:0b:64:98:
         b7:fe:a2:37:ca:d9:09:4a:f2:f6:e3:1f:5f:60:52:c3:2d:d2:
         1f:1b:e6:1a:10:d1:76:ac:fa:32:01:fd:49:98:aa:18:33:06:
         6c:37:b5:79:73:29:28:1d:27:33:c0:9d:15:15:b0:50:21:13:
         6e:c6:bc:e0:c1:9f:b0:f0:0e:54:25:9d:40:05:26:a3:c3:b4:
         3f:17:3d:53:1b:02:c9:77:e0:58:12:67:03:a8:5f:74:fe:f0:
         fe:2c:03:d2:e7:01:04:82:0a:ff:8a:f9:21:7a:9a:f1:88:6e:
         84:89:d9:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5
RjlDODc5NDQwHhcNMjYwOTIyMjMyMjMxWhcNMjYwOTI5MjMyMjMxWjAYMRYwFAYD
VQQDEw02YWIzMGRiOC00YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfV9hYvHvZ5SN8oi593O1CfN3tTgF9KJVkHECqXGRlhzrFXaJif3zs0U7jwG
fSGk1rKdVFIBfdIrZT2zGn6ZeaMKtiSYXMr9i++5vEDLvfRcGwoZSCd9W0I9MtHn
KPFbo6voBptuJBKdKgqVWX4DmbYh5k++W3ecQJfP9JmOBMGnbwHkSEURlIM25xt4
8KOKZIMKpBXbB/hg7ivwTw3pqhbwem0aggzudvdNoExg6X6EOolbAh4eX4PzA/5A
v6WWKTcZqq2H3+STJx/eYDvBKTYhT5tNqMRInHExDvZwGfm9DN5/QCLMONtPys9+
fKxTaMRdLZQ4N1WdY8EqK6l60QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaewCbd
XmjEc3NFjtVe9c3Tkq6rMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE
NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq
ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGulApGsT75oKMCf0lNBCwA6HhzP8XL9FBz+iqU892MJhMtBrUapDayxXmBmt
qzglayfl2F/M+PDWSRCRHfL1cJUqVzQQp0pPV2FuYlMuG6dBU9lANTQKKjYLwcND
qo6WVBX2sQZerunbKhWYCgDm/uMqzzG/oogaLPWAmWMa+flzVLAYH5I5pjLCG9k8
C2SYt/6iN8rZCUry9uMfX2BSwy3SHxvmGhDRdqz6MgH9SZiqGDMGbDe1eXMpKB0n
M8CdFRWwUCETbsa84MGfsPAOVCWdQAUmo8O0Pxc9UxsCyXfgWBJnA6hfdP7w/iwD
0ucBBIIK/4r5IXqa8YhuhInZew==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:17:03 2026 by rpki-client