Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
File:                     6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json)
Hash identifier:          eCFw7HZi7XA3DE28AiFOJYATPw3SdM7MfiwhG6KzB84=
Subject key identifier:   6C:9B:81:6A:7A:7E:4A:78:21:79:26:4D:5B:69:0D:0A:C0:7C:12:89
Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Certificate issuer:       /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
Manifest number:          25
Signing time:             Wed 13 May 2026 08:59:14 +0000
Manifest this update:     Wed 13 May 2026 08:59:14 +0000
Manifest next update:     Wed 20 May 2026 08:59:14 +0000
Files and hashes:         1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: nkF97jiWG6S7Kf4aOQy1PO3R5Qv88SzYTFhNYFv/PAo=)
                          2: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8=)
                          3: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: fYSO4EkACFFF5hAoMPUl96CHjFMY11d2KjA4W0FFZmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
        Validity
            Not Before: May 13 08:59:14 2026 GMT
            Not After : May 20 08:59:14 2026 GMT
        Subject: CN=6a043d62-1bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:20:07:fa:c5:c0:6c:c2:1a:bb:d8:2d:74:
                    c9:f1:e8:d0:03:ed:aa:a9:e3:7f:e9:dc:f9:49:e9:
                    b5:77:34:ff:25:23:66:f2:72:bd:d9:ed:4f:00:e2:
                    08:ac:b4:00:c0:ba:ee:c5:7b:59:97:08:9c:53:1e:
                    5a:90:67:71:cb:4f:7d:60:51:f6:82:2b:bb:43:f5:
                    cb:5b:04:8f:a1:f2:b8:0f:64:d7:d4:f6:2f:65:b6:
                    3e:34:71:2b:6b:7e:c5:63:2c:97:df:7c:6e:3a:ed:
                    18:18:b7:e4:c3:bb:04:df:41:88:15:5c:6e:37:9b:
                    f6:c2:ad:ed:db:6b:80:f2:94:05:47:7b:48:db:c4:
                    ff:79:1a:73:20:d8:2d:23:db:36:2e:c4:17:fb:25:
                    9e:42:97:35:c8:57:5c:8f:4b:1e:f6:c3:26:ce:80:
                    5b:32:be:d7:41:e2:96:02:8a:98:39:63:9f:ac:cb:
                    b1:e2:b3:78:5e:0d:37:31:e5:a2:cd:fc:dc:82:bb:
                    3f:0b:33:b3:aa:15:37:fe:4a:2c:7f:ec:59:86:6d:
                    ea:bc:ab:fe:86:96:e6:88:41:db:af:73:4d:5c:e5:
                    e2:01:22:47:6b:87:69:c8:3e:78:ba:3b:95:45:60:
                    02:9f:a3:45:13:6c:1a:cf:27:25:86:4b:8c:92:98:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:81:6A:7A:7E:4A:78:21:79:26:4D:5B:69:0D:0A:C0:7C:12:89
            X509v3 Authority Key Identifier:
                keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:10:50:16:e0:75:d8:4f:d0:04:21:af:1d:26:85:e3:3e:
         ae:51:c3:ea:75:cc:26:b0:59:3d:10:1e:bd:f6:95:94:af:2c:
         21:10:c1:30:f7:5c:80:b8:ca:12:31:32:57:0e:10:bc:13:33:
         5a:d6:8f:68:61:c5:4b:c3:d8:b0:9c:14:a3:7c:f1:76:0b:b9:
         cc:3c:c2:db:32:39:21:75:5a:33:ac:24:ec:0f:b9:47:81:40:
         48:21:44:d5:8c:1b:15:79:27:11:9a:c6:5f:e6:3a:3a:7f:51:
         eb:b8:58:aa:33:c3:c0:ef:8e:c8:78:e6:57:e3:e0:56:79:6a:
         bb:39:4f:8f:29:b8:d5:75:93:f1:24:a7:1a:cb:3f:66:c4:c7:
         0d:51:49:26:80:a4:99:06:d2:51:45:b6:c0:a5:f1:5c:ea:61:
         1f:5d:a6:1c:ba:4f:c5:96:d8:dd:81:78:41:8a:f4:3c:e4:bf:
         b2:44:c1:1e:d3:bc:52:a7:13:b8:7a:9f:38:48:f6:5a:af:6e:
         03:5e:95:cd:06:bb:77:c0:b6:07:68:46:4f:d6:f9:57:78:bd:
         4d:9b:ec:00:b2:f1:da:d6:12:7d:e6:a6:0d:65:b2:e4:7c:a3:
         9f:bb:34:19:e4:b3:db:c0:09:4f:b6:89:10:c9:f5:88:03:4b:
         e0:92:ff:06
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB
Q0E1MjVEQTAeFw0yNjA1MTMwODU5MTRaFw0yNjA1MjAwODU5MTRaMBgxFjAUBgNV
BAMTDTZhMDQzZDYyLTFiY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqkSAH+sXAbMIau9gtdMnx6NAD7aqp43/p3PlJ6bV3NP8lI2bycr3Z7U8A4gis
tADAuu7Fe1mXCJxTHlqQZ3HLT31gUfaCK7tD9ctbBI+h8rgPZNfU9i9ltj40cStr
fsVjLJfffG467RgYt+TDuwTfQYgVXG43m/bCre3ba4DylAVHe0jbxP95GnMg2C0j
2zYuxBf7JZ5ClzXIV1yPSx72wybOgFsyvtdB4pYCipg5Y5+sy7His3heDTcx5aLN
/NyCuz8LM7OqFTf+Six/7FmGbeq8q/6GluaIQduvc01c5eIBIkdrh2nIPni6O5VF
YAKfo0UTbBrPJyWGS4ySmNC/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbJuBanp+
SngheSZNW2kNCsB8EokwHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG
RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE
MDY0L0QxMkIxQzc4MUNGRjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFV
UjI3TFJ4X1hkVGF5bEpkby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBsShBQFuB12E/QBCGvHSaF4z6uUcPqdcwmsFk9EB699pWUrywhEMEw91yAuMoS
MTJXDhC8EzNa1o9oYcVLw9iwnBSjfPF2C7nMPMLbMjkhdVozrCTsD7lHgUBIIUTV
jBsVeScRmsZf5jo6f1HruFiqM8PA747IeOZX4+BWeWq7OU+PKbjVdZPxJKcayz9m
xMcNUUkmgKSZBtJRRbbApfFc6mEfXaYcuk/FltjdgXhBivQ85L+yRMEe07xSpxO4
ep84SPZar24DXpXNBrt3wLYHaEZP1vlXeL1Nm+wAsvHa1hJ95qYNZbLkfKOfuzQZ
5LPbwAlPtokQyfWIA0vgkv8G
-----END CERTIFICATE-----
Generated at Wed May 13 15:52:28 2026 by rpki-client