Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft
File:                     up6S-dvr9GsA8EzcssyhDLOpy1k.mft (raw, json)
Hash identifier:          FKsAyx8Ub+yv06k6Q5Ij9VtxtViP1UMZbe/V/TLjM3k=
Subject key identifier:   DF:16:9E:19:94:EC:3D:12:21:6C:3A:82:ED:2D:61:36:47:6A:E8:1D
Authority key identifier: BA:9E:92:F9:DB:EB:F4:6B:00:F0:4C:DC:B2:CC:A1:0C:B3:A9:CB:59
Certificate issuer:       /CN=A91F146E/serialNumber=BA9E92F9DBEBF46B00F04CDCB2CCA10CB3A9CB59
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/up6S-dvr9GsA8EzcssyhDLOpy1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft
Manifest number:          19
Signing time:             Thu 23 Jul 2026 11:03:53 +0000
Manifest this update:     Thu 23 Jul 2026 11:03:53 +0000
Manifest next update:     Thu 30 Jul 2026 11:03:53 +0000
Files and hashes:         1: up6S-dvr9GsA8EzcssyhDLOpy1k.crl (hash: a+LU5LU0YCcFidacFMbNl111iJGdVVBxhIK9vjIQgV4=)
                          2: 4351D97663C411F18EB919B97D47A888.roa (hash: LcI6Ko/amxefDFMR+j9QBtvlBr3SLK5q6W1Bwhc2cTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.crl
                          rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/up6S-dvr9GsA8EzcssyhDLOpy1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F146E, serialNumber=BA9E92F9DBEBF46B00F04CDCB2CCA10CB3A9CB59
        Validity
            Not Before: Jul 23 11:03:53 2026 GMT
            Not After : Jul 30 11:03:53 2026 GMT
        Subject: CN=6a61f519-6a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:9e:a8:9c:1c:e3:fe:23:dc:f6:07:99:00:
                    75:90:89:ed:e5:f9:3d:65:f2:ee:01:b2:8c:c7:c5:
                    d2:c2:b1:c9:ab:d0:77:6d:da:49:38:81:f1:53:85:
                    32:24:90:1b:98:6f:22:02:af:cf:d7:de:45:5a:99:
                    04:54:6d:9b:0d:0f:f5:d0:0d:a2:fb:dc:2c:40:b0:
                    06:de:c3:d5:a7:b2:ce:8e:51:b1:9c:74:a1:c5:b1:
                    8d:bc:0a:58:16:f2:32:13:3f:f1:f1:8f:95:6b:9c:
                    a3:a9:5a:84:ce:7f:93:1e:5e:1f:9f:c2:dc:9a:7e:
                    dd:d3:5c:f4:09:47:ae:ad:b9:34:a3:06:a6:ff:df:
                    a2:b9:6e:4b:38:34:64:df:23:ea:af:43:af:76:ec:
                    89:f4:68:d8:93:78:e1:fe:ad:cd:f0:8d:e5:b7:b0:
                    9e:02:d2:29:5a:02:f1:d3:86:58:a7:ac:f0:8a:f9:
                    dd:70:f8:58:d3:17:42:0c:0f:55:cc:5e:3f:99:c1:
                    78:1f:2f:31:b6:57:0b:ae:ca:80:2e:c1:83:cb:d1:
                    f1:75:31:ec:1d:71:1b:af:5e:72:da:0f:5a:e3:e1:
                    ea:f7:50:e1:de:3b:86:d4:8b:a2:3c:2a:f0:e3:4b:
                    aa:38:d3:3b:a8:c1:3c:5d:b5:8f:bb:c0:61:13:7d:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:9E:19:94:EC:3D:12:21:6C:3A:82:ED:2D:61:36:47:6A:E8:1D
            X509v3 Authority Key Identifier:
                keyid:BA:9E:92:F9:DB:EB:F4:6B:00:F0:4C:DC:B2:CC:A1:0C:B3:A9:CB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/up6S-dvr9GsA8EzcssyhDLOpy1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F146E/67A93F4A63BE11F198E330027C47A888/up6S-dvr9GsA8EzcssyhDLOpy1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:44:6b:e0:20:94:0b:c5:a2:ed:11:71:2d:fe:3d:a0:7f:c3:
         28:93:ba:28:35:8a:04:3e:6c:ca:d8:cd:10:8d:5f:e5:42:21:
         c7:0d:70:f9:58:46:91:26:84:1a:35:33:14:24:11:12:b5:62:
         27:67:a4:d4:70:f6:72:f6:67:db:25:12:8a:75:7d:d5:d0:0e:
         a9:5a:00:51:35:3d:24:75:57:cb:10:95:7c:3c:f1:a2:66:1a:
         48:ce:84:83:77:0b:8e:7e:e7:42:79:76:84:7c:d8:e1:85:e8:
         57:b2:1f:84:c6:98:a7:03:25:61:ee:39:aa:da:a9:80:f6:bc:
         5d:e5:10:2d:49:06:b3:82:b9:94:bf:42:28:ba:72:ad:ad:39:
         d7:7b:29:24:e2:f1:58:a4:b5:41:d3:d1:19:ee:df:9d:ee:05:
         e3:3a:e0:ad:b5:a5:b2:86:57:a2:02:b3:dd:8b:7f:43:20:e2:
         4b:bc:1c:1c:e2:eb:c1:82:fa:b8:b6:ec:5a:eb:6b:3b:ce:e5:
         ab:d0:cc:17:16:51:c6:c5:1f:9a:fc:15:e6:86:90:93:da:71:
         00:75:3e:ce:3a:cd:e0:2c:be:76:91:3e:7f:39:a5:90:1d:c2:
         54:45:13:2d:b3:6b:03:89:76:4f:b1:80:a9:bc:45:99:72:6b:
         fc:cf:b8:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MTQ2RTExMC8GA1UEBRMoQkE5RTkyRjlEQkVCRjQ2QjAwRjA0Q0RDQjJDQ0ExMENC
M0E5Q0I1OTAeFw0yNjA3MjMxMTAzNTNaFw0yNjA3MzAxMTAzNTNaMBgxFjAUBgNV
BAMTDTZhNjFmNTE5LTZhODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmFZ6onBzj/iPc9geZAHWQie3l+T1l8u4BsozHxdLCscmr0Hdt2kk4gfFThTIk
kBuYbyICr8/X3kVamQRUbZsND/XQDaL73CxAsAbew9Wnss6OUbGcdKHFsY28ClgW
8jITP/Hxj5VrnKOpWoTOf5MeXh+fwtyaft3TXPQJR66tuTSjBqb/36K5bks4NGTf
I+qvQ6927In0aNiTeOH+rc3wjeW3sJ4C0ilaAvHThlinrPCK+d1w+FjTF0IMD1XM
Xj+ZwXgfLzG2VwuuyoAuwYPL0fF1MewdcRuvXnLaD1rj4er3UOHeO4bUi6I8KvDj
S6o40zuowTxdtY+7wGETfUlvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3xaeGZTs
PRIhbDqC7S1hNkdq6B0wHwYDVR0jBBgwFoAUup6S+dvr9GsA8EzcssyhDLOpy1kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNDZFLzY3QTkzRjRBNjNC
RTExRjE5OEUzMzAwMjdDNDdBODg4L3VwNlMtZHZyOUdzQThFemNzc3loRExPcHkx
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdXA2Uy1kdnI5R3NBOEV6Y3NzeWhETE9weTFrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
NDZFLzY3QTkzRjRBNjNCRTExRjE5OEUzMzAwMjdDNDdBODg4L3VwNlMtZHZyOUdz
QThFemNzc3loRExPcHkxay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAARGvgIJQLxaLtEXEt/j2gf8Mok7ooNYoEPmzK2M0QjV/lQiHHDXD5WEaRJoQa
NTMUJBEStWInZ6TUcPZy9mfbJRKKdX3V0A6pWgBRNT0kdVfLEJV8PPGiZhpIzoSD
dwuOfudCeXaEfNjhhehXsh+ExpinAyVh7jmq2qmA9rxd5RAtSQazgrmUv0IounKt
rTnXeykk4vFYpLVB09EZ7t+d7gXjOuCttaWyhleiArPdi39DIOJLvBwc4uvBgvq4
tuxa62s7zuWr0MwXFlHGxR+a/BXmhpCT2nEAdT7OOs3gLL52kT5/OaWQHcJURRMt
s2sDiXZPsYCpvEWZcmv8z7hs
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:49 2026 by rpki-client