Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File:                     6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier:          3jfwunWXezYvjcNMbE5zuw0oXZ9n6P9wf/EB1CzofEA=
Subject key identifier:   59:6E:98:8D:82:88:AF:B3:B6:78:4F:54:19:31:EB:B5:7D:29:B0:3B
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer:       /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number:          0113
Signing time:             Mon 27 Jul 2026 08:13:29 +0000
Manifest this update:     Mon 27 Jul 2026 08:13:29 +0000
Manifest next update:     Mon 03 Aug 2026 08:13:29 +0000
Files and hashes:         1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: iB3AZLubr7MKlniivKg6XJqGDLTK4H+1qNxmXdmavZw=)
                          2: 535D1F52069511F090414823C4F9AE02.roa (hash: fFn43c+yB+C9Km2SsZKRXLmx2giwdUoMyfnmnxY1vo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
                          rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
        Validity
            Not Before: Jul 27 08:13:29 2026 GMT
            Not After : Aug  3 08:13:29 2026 GMT
        Subject: CN=6a671329-7d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:7e:6d:f2:39:0c:ea:24:bc:6e:7f:21:42:
                    39:c9:11:c6:7b:22:17:1f:ea:58:34:7a:95:ec:eb:
                    db:84:8d:22:5c:53:cb:b6:ad:24:ab:28:c5:7e:35:
                    c5:e3:0c:a6:b2:31:5a:19:d2:e6:7a:d9:a7:69:48:
                    02:80:a0:76:1b:3e:c4:d9:17:ba:b0:41:44:b5:4a:
                    66:86:a3:48:71:56:bf:de:63:c7:37:7e:56:e4:19:
                    66:e5:9a:18:23:20:f9:8d:3c:a9:a6:ed:aa:cd:65:
                    0b:64:9d:11:52:fd:5f:77:36:43:ef:4c:75:02:7e:
                    f7:71:58:0b:ff:6e:85:0e:4e:33:bf:d2:c9:6f:ac:
                    53:72:37:27:ff:d5:46:17:af:45:e4:31:73:bf:3f:
                    25:8d:90:c3:66:00:7a:f8:a1:6b:24:8c:78:08:4f:
                    72:d1:f6:e4:71:cc:14:af:a2:0a:8d:8b:6b:f1:70:
                    57:11:19:59:00:9c:7c:12:23:a8:1f:fd:47:61:a8:
                    38:14:9a:dc:60:80:a7:30:c6:35:5f:41:23:57:17:
                    14:b4:47:18:04:eb:51:e5:2c:98:32:b2:b1:b2:0f:
                    3a:f5:ee:38:75:57:9b:e6:ea:95:a2:0f:c0:8d:4c:
                    3a:90:26:f4:17:3d:bf:5d:1c:7b:6d:a4:4f:9e:2a:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:98:8D:82:88:AF:B3:B6:78:4F:54:19:31:EB:B5:7D:29:B0:3B
            X509v3 Authority Key Identifier:
                keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:de:d3:d7:8b:72:1a:e8:db:d0:0b:0f:bc:f6:da:34:e4:60:
         ad:0d:d9:aa:28:71:6c:3d:bf:fb:60:7c:53:dd:3c:c3:1a:8a:
         90:23:31:5c:cf:7f:9f:a0:7a:ed:56:e9:5a:05:c9:3f:2b:4f:
         54:6d:13:05:3f:6e:b4:3c:4f:71:82:d5:93:af:4a:12:cd:f0:
         2a:28:52:36:7b:c3:39:bb:bb:85:3a:38:c1:e6:32:9c:47:8b:
         e7:c7:0f:22:d1:77:d8:dd:cf:97:ff:26:5d:b6:d9:0b:d9:1f:
         f7:8a:5f:81:a9:5d:d4:9f:a6:5b:28:a3:cb:c6:44:16:48:10:
         e6:d4:de:41:e2:94:1d:b4:d3:2a:d0:7b:57:bb:92:c0:73:9f:
         9d:01:5a:f2:55:26:1a:9c:4f:b6:98:c1:20:11:1e:3b:cd:32:
         44:62:b0:1c:3a:11:cc:b7:54:13:27:06:a5:2f:f6:68:5d:0b:
         d2:92:11:95:6d:c4:9e:3b:39:d0:43:e8:9d:37:68:52:18:b4:
         33:ac:7e:85:3f:67:e1:9f:ee:c4:46:22:19:6b:04:92:c3:12:
         06:c5:40:80:58:b1:67:08:c7:e5:84:8a:a8:75:bc:40:a4:10:
         c1:6a:1f:d1:1f:e5:80:b0:c2:1e:7f:8b:ae:85:95:72:c0:ab:
         b2:99:b8:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJBQTIxMTAvBgNVBAUTKEVBQTQ4M0JCQkQ1Q0EwRTEyQjNFQzBGNkU3MEM1QkFB
QUUzNDU1MkIwHhcNMjYwNzI3MDgxMzI5WhcNMjYwODAzMDgxMzI5WjAYMRYwFAYD
VQQDEw02YTY3MTMyOS03ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEh+bfI5DOokvG5/IUI5yRHGeyIXH+pYNHqV7OvbhI0iXFPLtq0kqyjFfjXF
4wymsjFaGdLmetmnaUgCgKB2Gz7E2Re6sEFEtUpmhqNIcVa/3mPHN35W5Blm5ZoY
IyD5jTyppu2qzWULZJ0RUv1fdzZD70x1An73cVgL/26FDk4zv9LJb6xTcjcn/9VG
F69F5DFzvz8ljZDDZgB6+KFrJIx4CE9y0fbkccwUr6IKjYtr8XBXERlZAJx8EiOo
H/1HYag4FJrcYICnMMY1X0EjVxcUtEcYBOtR5SyYMrKxsg869e44dVeb5uqVog/A
jUw6kCb0Fz2/XRx7baRPnip77QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlumI2C
iK+ztnhPVBkx67V9KbA7MB8GA1UdIwQYMBaAFOqkg7u9XKDhKz7A9ucMW6quNFUr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFBMi80REVDRDA4MEZF
NjYxMUVGODkyRTUyMTRDNEY5QUUwMi82cVNEdTcxY29PRXJQc0QyNXd4YnFxNDBW
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZxU0R1NzFjb09FclBzRDI1d3hicXE0MFZTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkFBMi80REVDRDA4MEZFNjYxMUVGODkyRTUyMTRDNEY5QUUwMi82cVNEdTcxY29P
RXJQc0QyNXd4YnFxNDBWU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGN7T14tyGujb0AsPvPbaNORgrQ3ZqihxbD2/+2B8U908wxqKkCMxXM9/n6B6
7VbpWgXJPytPVG0TBT9utDxPcYLVk69KEs3wKihSNnvDObu7hTo4weYynEeL58cP
ItF32N3Pl/8mXbbZC9kf94pfgald1J+mWyijy8ZEFkgQ5tTeQeKUHbTTKtB7V7uS
wHOfnQFa8lUmGpxPtpjBIBEeO80yRGKwHDoRzLdUEycGpS/2aF0L0pIRlW3Enjs5
0EPonTdoUhi0M6x+hT9n4Z/uxEYiGWsEksMSBsVAgFixZwjH5YSKqHW8QKQQwWof
0R/lgLDCHn+LroWVcsCrspm41Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:07 2026 by rpki-client