Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
File:                     6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json)
Hash identifier:          AXQERIG89HacXchyFxgOnc1tCJX7XjY5M/qLhki4M1o=
Subject key identifier:   3B:A2:0C:65:1A:4B:74:FA:C2:C3:A0:5E:22:80:01:BB:DF:00:4B:58
Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
Certificate issuer:       /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
Manifest number:          83
Signing time:             Thu 23 Jul 2026 09:29:47 +0000
Manifest this update:     Thu 23 Jul 2026 09:29:46 +0000
Manifest next update:     Thu 30 Jul 2026 09:29:46 +0000
Files and hashes:         1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: Aj8IO6z8OXevMICzk5GWE+/y6OQy0W6ASUYPv3sXfNA=)
                          2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
                          rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
        Validity
            Not Before: Jul 23 09:29:46 2026 GMT
            Not After : Jul 30 09:29:46 2026 GMT
        Subject: CN=6a61df0a-59df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:24:12:f6:b5:34:63:46:3a:a7:99:bb:73:
                    a5:be:00:19:44:48:ee:70:65:ac:de:02:cb:d3:43:
                    f9:22:7d:9b:a2:c6:db:62:1f:e3:92:26:13:6b:46:
                    7b:c6:c8:e8:ff:ba:98:29:c6:e8:e5:cd:99:e7:ec:
                    31:22:7d:af:09:12:27:58:44:ce:5f:6c:fd:4c:5f:
                    ed:70:97:fe:6f:0d:9b:8c:3b:d4:eb:e3:66:7a:5a:
                    c7:a7:b4:97:61:11:44:ab:a4:20:8f:62:ca:24:63:
                    5c:6c:6e:83:64:dd:14:f2:9a:14:c7:f4:15:5f:71:
                    ba:35:5b:e4:76:5a:bd:9c:bc:01:42:fe:db:6f:11:
                    fd:2a:b1:9f:c8:37:f1:7c:da:53:cf:72:cb:ad:5d:
                    d8:de:3b:ba:14:17:5e:bd:f6:d1:12:57:71:d2:48:
                    06:8f:07:00:16:7e:0f:13:9f:06:a9:1e:d0:17:1e:
                    db:12:fb:6b:a7:e6:63:04:d4:e5:93:d5:52:4e:87:
                    7d:ff:17:52:26:e1:39:f0:a3:1b:6a:e0:72:6f:6a:
                    63:01:58:9d:95:20:8b:fd:e0:d9:f7:83:ae:4c:7b:
                    d7:d0:51:9f:47:cb:71:de:05:39:34:07:f4:ef:a1:
                    01:b9:b0:41:5b:d4:f5:5a:fe:6e:a0:af:9d:43:1c:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:0C:65:1A:4B:74:FA:C2:C3:A0:5E:22:80:01:BB:DF:00:4B:58
            X509v3 Authority Key Identifier:
                keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:25:e4:0e:f3:cb:a1:b6:94:a5:bc:f9:8e:e2:5b:e0:1a:92:
         2e:1d:60:dd:6a:a5:99:f7:e6:a9:53:99:10:92:cf:35:21:6b:
         01:17:5a:43:2e:85:43:ed:51:a3:a5:f2:d7:17:4e:72:59:1e:
         5f:04:a2:44:8d:cb:1e:59:f2:45:2a:0e:14:37:cc:e0:3c:c3:
         27:f7:74:f3:8b:f0:4b:b0:16:c7:63:cd:cb:96:ed:07:5a:b0:
         b2:9e:0d:3e:fb:20:85:16:e8:ca:34:91:6c:95:34:ab:d8:c8:
         71:93:a4:91:af:4f:2c:d5:47:2c:05:da:07:16:4f:18:86:2b:
         3f:77:d5:9b:88:e2:98:48:9b:41:bc:65:25:81:2d:12:96:12:
         62:c7:3b:1c:8a:2f:ce:b6:5a:6a:f7:ce:76:4b:b0:14:dc:ed:
         c3:12:6a:ad:da:2c:3c:e4:d2:d8:99:45:42:3b:d8:76:30:a6:
         57:5c:da:d6:75:16:2b:e7:65:13:31:1d:26:56:83:31:34:ab:
         b0:c5:b4:68:66:cd:1f:9e:c3:06:bf:13:0d:dc:21:97:9d:b7:
         5b:9e:35:ca:cb:84:aa:87:80:3d:81:5b:04:f6:28:83:79:49:
         f6:d8:56:f6:cd:53:0d:fd:3d:f3:cf:42:3f:ac:b6:c4:be:b5:
         42:06:78:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ5QkExMTAvBgNVBAUTKEU4NzkwMzAxN0FCMUYwNkE5Q0I0NkFCMDIxQkQwQjky
MUM5QUZBODgwHhcNMjYwNzIzMDkyOTQ2WhcNMjYwNzMwMDkyOTQ2WjAYMRYwFAYD
VQQDEw02YTYxZGYwYS01OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKokEva1NGNGOqeZu3OlvgAZREjucGWs3gLL00P5In2bosbbYh/jkiYTa0Z7
xsjo/7qYKcbo5c2Z5+wxIn2vCRInWETOX2z9TF/tcJf+bw2bjDvU6+NmelrHp7SX
YRFEq6Qgj2LKJGNcbG6DZN0U8poUx/QVX3G6NVvkdlq9nLwBQv7bbxH9KrGfyDfx
fNpTz3LLrV3Y3ju6FBdevfbREldx0kgGjwcAFn4PE58GqR7QFx7bEvtrp+ZjBNTl
k9VSTod9/xdSJuE58KMbauByb2pjAVidlSCL/eDZ94OuTHvX0FGfR8tx3gU5NAf0
76EBubBBW9T1Wv5uoK+dQxyDiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuiDGUa
S3T6wsOgXiKAAbvfAEtYMB8GA1UdIwQYMBaAFOh5AwF6sfBqnLRqsCG9C5IcmvqI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDlCQS9FMzY3RjZDNkJF
RjUxMUYwOUI3RTcyMDlDNEY5QUUwMi82SGtEQVhxeDhHcWN0R3F3SWIwTGtoeWEt
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1vZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDlCQS9FMzY3RjZDNkJFRjUxMUYwOUI3RTcyMDlDNEY5QUUwMi82SGtEQVhxeDhH
cWN0R3F3SWIwTGtoeWEtb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMyXkDvPLobaUpbz5juJb4BqSLh1g3WqlmffmqVOZEJLPNSFrARdaQy6FQ+1R
o6Xy1xdOclkeXwSiRI3LHlnyRSoOFDfM4DzDJ/d084vwS7AWx2PNy5btB1qwsp4N
PvsghRboyjSRbJU0q9jIcZOkka9PLNVHLAXaBxZPGIYrP3fVm4jimEibQbxlJYEt
EpYSYsc7HIovzrZaavfOdkuwFNztwxJqrdosPOTS2JlFQjvYdjCmV1za1nUWK+dl
EzEdJlaDMTSrsMW0aGbNH57DBr8TDdwhl523W541ysuEqoeAPYFbBPYog3lJ9thW
9s1TDf09889CP6y2xL61QgZ4Uw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:03 2026 by rpki-client