Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
File:                     IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft (raw, json)
Hash identifier:          ZIdhObCMFsYYTHwu4+rgaWtWf7pl3BdJVQarT5iEGbM=
Subject key identifier:   6A:A3:46:A1:49:9B:FC:5F:B9:FD:B1:E9:8A:14:72:43:28:89:92:CF
Authority key identifier: 20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2
Certificate issuer:       /CN=A9164F6C/serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
Manifest number:          34
Signing time:             Thu 23 Jul 2026 05:37:15 +0000
Manifest this update:     Thu 23 Jul 2026 05:37:14 +0000
Manifest next update:     Thu 30 Jul 2026 05:37:14 +0000
Files and hashes:         1: IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl (hash: YqnTZeFYGv6At4kCJ4tr3N7YzQqjzSeM+am/A1pY5y4=)
                          2: 959E1E5C438911F199AC3545C7833773.roa (hash: o/N5wMgvItXdP3V7fouQN7Bkpr2EmsUXoWrtblWz5Ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=20DE918D4F923C02FE23EB916375BBF85B024CD2
        Validity
            Not Before: Jul 23 05:37:14 2026 GMT
            Not After : Jul 30 05:37:14 2026 GMT
        Subject: CN=6a61a88b-123f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:2f:39:96:13:ce:5d:9c:b4:02:9e:ed:db:
                    fd:01:fd:4d:b4:44:52:39:9d:21:0b:0a:4c:ca:09:
                    8c:21:dc:21:ff:81:c2:47:9a:84:18:7c:6f:a1:88:
                    a8:3a:89:4c:a7:8f:81:fa:e7:52:81:a2:25:07:96:
                    0e:cd:8f:ce:10:48:c7:66:12:15:11:e6:18:fb:73:
                    d4:b7:fd:fb:6c:4a:1a:f9:3f:9b:74:33:e9:f7:57:
                    ff:1e:1c:80:e2:98:8c:8b:03:fe:8e:25:33:44:ae:
                    ab:6f:24:ea:56:01:13:57:92:3f:e2:3f:85:3b:9a:
                    87:66:1d:6b:80:2b:4b:31:78:a1:37:66:56:61:14:
                    0a:3e:99:88:c8:7b:26:8a:de:d0:15:90:63:f9:09:
                    10:1e:5f:a1:b8:e1:fe:0c:45:39:5b:6a:80:5c:e1:
                    90:c4:60:e3:71:89:d5:6c:64:ab:45:05:6b:38:86:
                    b0:a1:a0:da:ff:31:0b:82:73:24:81:14:1b:3f:21:
                    71:85:3f:20:51:0d:e1:0c:19:d8:a1:f2:12:3b:5a:
                    0d:1d:5f:37:ad:c0:99:27:87:f9:67:83:c8:12:36:
                    d0:5d:ad:92:c5:26:57:a8:1e:af:a6:b7:74:59:ce:
                    ca:fa:57:46:81:29:84:cf:a5:cb:cd:55:b1:73:4d:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A3:46:A1:49:9B:FC:5F:B9:FD:B1:E9:8A:14:72:43:28:89:92:CF
            X509v3 Authority Key Identifier:
                keyid:20:DE:91:8D:4F:92:3C:02:FE:23:EB:91:63:75:BB:F8:5B:02:4C:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IN6RjU-SPAL-I-uRY3W7-FsCTNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/4FFB27C8429911F1B5EAE6799EEE528E/IN6RjU-SPAL-I-uRY3W7-FsCTNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:74:e1:fb:66:c8:a0:ad:49:bd:92:8d:e4:69:8a:0c:a0:59:
         22:59:84:51:a9:1e:ee:3c:31:4b:b2:33:2d:01:be:e0:45:4e:
         fa:0e:c4:a5:39:81:ca:d7:16:ec:66:ff:ec:fa:61:5a:15:35:
         fe:c8:2f:d3:3a:e8:ed:d2:33:3e:16:a2:81:6f:44:2f:d7:de:
         8c:35:f0:bc:9f:f5:e7:61:ec:db:ca:66:20:76:c7:ec:ac:d9:
         1a:3a:2f:26:50:28:ff:49:8e:98:7e:d0:b1:4f:a7:ff:96:78:
         7f:bc:9d:d6:e7:da:4b:7d:17:05:80:2a:d3:89:0b:49:52:84:
         2f:3d:30:e6:54:da:bf:86:77:62:9d:7b:e8:d4:25:59:d1:d6:
         df:26:41:5e:ba:8c:16:b4:c0:e9:41:85:53:e3:d7:2e:8b:c8:
         f0:79:1e:31:ab:c6:c0:3c:66:ea:77:47:0a:35:b4:6a:d8:fa:
         ad:98:7c:4e:05:74:13:35:b6:f2:d9:f7:d2:f8:0b:e1:87:83:
         ed:ac:27:be:77:47:0d:eb:6b:87:5e:65:4c:5f:ac:98:6e:8d:
         7b:31:01:eb:cc:67:2f:93:b3:21:6b:88:a0:42:13:49:63:8a:
         70:b0:ed:f6:ca:75:e4:b1:60:63:a2:0b:ee:c5:9f:2d:b1:32:
         79:86:83:9b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEY2QzExMC8GA1UEBRMoMjBERTkxOEQ0RjkyM0MwMkZFMjNFQjkxNjM3NUJCRjg1
QjAyNENEMjAeFw0yNjA3MjMwNTM3MTRaFw0yNjA3MzAwNTM3MTRaMBgxFjAUBgNV
BAMTDTZhNjFhODhiLTEyM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpES85lhPOXZy0Ap7t2/0B/U20RFI5nSELCkzKCYwh3CH/gcJHmoQYfG+hiKg6
iUynj4H651KBoiUHlg7Nj84QSMdmEhUR5hj7c9S3/ftsShr5P5t0M+n3V/8eHIDi
mIyLA/6OJTNErqtvJOpWARNXkj/iP4U7modmHWuAK0sxeKE3ZlZhFAo+mYjIeyaK
3tAVkGP5CRAeX6G44f4MRTlbaoBc4ZDEYONxidVsZKtFBWs4hrChoNr/MQuCcySB
FBs/IXGFPyBRDeEMGdih8hI7Wg0dXzetwJknh/lng8gSNtBdrZLFJleoHq+mt3RZ
zsr6V0aBKYTPpcvNVbFzTQ7HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaqNGoUmb
/F+5/bHpihRyQyiJks8wHwYDVR0jBBgwFoAUIN6RjU+SPAL+I+uRY3W7+FsCTNIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjZDLzRGRkIyN0M4NDI5
OTExRjFCNUVBRTY3OTlFRUU1MjhFL0lONlJqVS1TUEFMLUktdVJZM1c3LUZzQ1RO
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSU42UmpVLVNQQUwtSS11UlkzVzctRnNDVE5JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
RjZDLzRGRkIyN0M4NDI5OTExRjFCNUVBRTY3OTlFRUU1MjhFL0lONlJqVS1TUEFM
LUktdVJZM1c3LUZzQ1ROSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBldOH7ZsigrUm9ko3kaYoMoFkiWYRRqR7uPDFLsjMtAb7gRU76DsSlOYHK1xbs
Zv/s+mFaFTX+yC/TOujt0jM+FqKBb0Qv196MNfC8n/XnYezbymYgdsfsrNkaOi8m
UCj/SY6YftCxT6f/lnh/vJ3W59pLfRcFgCrTiQtJUoQvPTDmVNq/hndinXvo1CVZ
0dbfJkFeuowWtMDpQYVT49cui8jweR4xq8bAPGbqd0cKNbRq2PqtmHxOBXQTNbby
2ffS+Avhh4PtrCe+d0cN62uHXmVMX6yYbo17MQHrzGcvk7Mha4igQhNJY4pwsO32
ynXksWBjogvuxZ8tsTJ5hoOb
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:05 2026 by rpki-client