Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File:                     6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier:          9oNik0DUzIAAnefXbnP3abTBs4FJRI39oTdBEfoMufk=
Subject key identifier:   36:90:54:D5:75:4C:83:78:8B:A0:D7:28:C6:7E:9D:E2:06:EE:FC:28
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer:       /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial:       215F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number:          2136
Signing time:             Wed 22 Jul 2026 16:00:28 +0000
Manifest this update:     Wed 22 Jul 2026 16:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:28 +0000
Files and hashes:         1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: oD8rSUl5p/VJXfiau/j/acBtZecmZdLFAMoTsVMMY9g=)
                          2: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
                          3: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
                          rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8543 (0x215f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
        Validity
            Not Before: Jul 22 16:00:28 2026 GMT
            Not After : Jul 29 16:00:28 2026 GMT
        Subject: CN=6a60e91c-0402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3b:03:8d:be:d9:4f:9f:47:fe:cf:63:81:fd:
                    f6:c0:5a:e8:bd:24:ba:90:da:d6:25:71:4e:d6:06:
                    dc:57:16:64:17:fa:c9:aa:e5:86:fa:2d:83:67:0d:
                    2b:62:a6:f5:f6:85:e8:71:d9:8f:6d:32:54:c4:a3:
                    0b:d4:33:95:07:2a:02:ea:35:28:70:ff:ac:4d:b0:
                    f3:80:00:22:ee:45:41:2c:1b:59:aa:ea:1a:8b:c8:
                    32:e3:47:fb:9b:b2:68:66:63:74:70:76:f0:2e:6e:
                    a7:ba:7c:18:99:48:31:63:e5:b2:a9:cb:46:fd:e9:
                    a6:e4:48:22:a4:84:a7:a2:b1:76:9c:40:a4:87:59:
                    5e:58:62:82:9e:20:d8:e2:7f:24:e6:c0:fb:51:7b:
                    19:e8:79:ef:7e:97:af:c9:b0:38:4f:de:ea:0c:fc:
                    2d:85:82:df:12:41:5e:a1:e5:11:e3:65:dc:8c:9f:
                    ef:7c:c1:dd:cd:f5:be:8e:56:02:01:04:a2:78:f0:
                    4d:d5:c4:66:49:be:f4:c2:54:94:75:62:47:13:c7:
                    dd:20:ea:0f:18:3b:34:07:24:40:05:30:50:36:c2:
                    f4:43:ff:80:3d:7c:64:34:af:df:ac:eb:4a:06:60:
                    e2:6e:82:99:6c:0a:bb:0a:92:f6:10:ce:e4:ed:13:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:54:D5:75:4C:83:78:8B:A0:D7:28:C6:7E:9D:E2:06:EE:FC:28
            X509v3 Authority Key Identifier:
                keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:d1:a7:10:1b:4d:f1:fc:d4:de:ca:47:69:df:a5:e0:09:
         52:56:28:d5:be:db:ef:7f:a4:e6:9b:8a:ec:97:dc:91:31:a1:
         74:cd:6f:f7:c6:c6:8b:e4:0a:6a:60:e4:72:64:81:9c:87:2d:
         2b:7c:4c:03:77:22:87:03:9f:60:ee:32:39:a4:71:35:88:c0:
         b0:6b:f6:05:c8:8b:e7:da:8e:3b:d6:cf:c0:a4:fd:5f:a7:e0:
         10:d1:f3:94:81:b2:31:f7:54:3e:ca:d4:26:4a:ea:ea:56:74:
         a5:48:ed:80:a3:fe:e9:03:61:9c:c5:ed:da:03:90:50:90:84:
         3d:7d:d1:29:80:e6:90:03:c9:e0:0a:4f:5f:ce:95:b7:73:95:
         51:0d:23:73:fb:f9:69:ce:42:52:d4:3b:ac:30:9a:07:e4:10:
         30:c7:16:6f:19:15:89:f5:87:43:38:65:c8:25:2b:7d:73:1d:
         81:bb:e2:bc:dd:69:77:cf:92:b6:1f:bc:16:ee:63:1b:fb:b6:
         15:dd:bc:87:94:6c:87:b4:e6:54:bd:13:4f:78:53:81:5c:73:
         92:c1:70:e3:d8:b5:e5:d9:e9:bf:4d:b0:87:b1:e4:b3:d1:e4:
         33:7d:ed:8c:04:fa:21:17:97:f1:a6:a7:9b:7d:a2:08:df:75:
         16:f8:7f:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1
M0NBOEYzODkwHhcNMjYwNzIyMTYwMDI4WhcNMjYwNzI5MTYwMDI4WjAYMRYwFAYD
VQQDEw02YTYwZTkxYy0wNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7zsDjb7ZT59H/s9jgf32wFrovSS6kNrWJXFO1gbcVxZkF/rJquWG+i2DZw0r
Yqb19oXocdmPbTJUxKML1DOVByoC6jUocP+sTbDzgAAi7kVBLBtZquoai8gy40f7
m7JoZmN0cHbwLm6nunwYmUgxY+WyqctG/emm5EgipISnorF2nECkh1leWGKCniDY
4n8k5sD7UXsZ6HnvfpevybA4T97qDPwthYLfEkFeoeUR42XcjJ/vfMHdzfW+jlYC
AQSiePBN1cRmSb70wlSUdWJHE8fdIOoPGDs0ByRABTBQNsL0Q/+APXxkNK/frOtK
BmDiboKZbAq7CpL2EM7k7RNRqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaQVNV1
TIN4i6DXKMZ+neIG7vwoMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2
ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw
OEd3a29yYlJ0M0ZUeW84NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPNfRpxAbTfH81N7KR2nfpeAJUlYo1b7b73+k5puK7JfckTGhdM1v98bGi+QK
amDkcmSBnIctK3xMA3cihwOfYO4yOaRxNYjAsGv2BciL59qOO9bPwKT9X6fgENHz
lIGyMfdUPsrUJkrq6lZ0pUjtgKP+6QNhnMXt2gOQUJCEPX3RKYDmkAPJ4ApPX86V
t3OVUQ0jc/v5ac5CUtQ7rDCaB+QQMMcWbxkVifWHQzhlyCUrfXMdgbvivN1pd8+S
th+8Fu5jG/u2Fd28h5Rsh7TmVL0TT3hTgVxzksFw49i15dnpv02wh7Hks9HkM33t
jAT6IReX8aanm32iCN91Fvh/vw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:22 2026 by rpki-client