Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File:                     6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier:          Lb5A9rbpl2B9FEL2jC5GoNl5jzHM7GZlTSC5A7tvHmI=
Subject key identifier:   22:CF:A1:05:B0:C6:45:C2:9C:DA:EA:18:0B:80:62:3C:D2:E9:01:80
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer:       /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial:       356E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number:          3567
Signing time:             Tue 28 Jul 2026 14:52:23 +0000
Manifest this update:     Tue 28 Jul 2026 14:52:22 +0000
Manifest next update:     Tue 04 Aug 2026 14:52:22 +0000
Files and hashes:         1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: PnzaxU7iwUki6HbT+04tnzEtB9hqnENLeRTqiraeqZs=)
                          2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13678 (0x356e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
        Validity
            Not Before: Jul 28 14:52:22 2026 GMT
            Not After : Aug  4 14:52:22 2026 GMT
        Subject: CN=6a68c227-111c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:02:f9:73:5f:92:28:99:b6:53:09:fd:c0:
                    02:a8:6d:3d:b1:5a:1e:e8:7a:14:1e:32:68:e6:22:
                    e8:4b:82:06:b2:6a:63:6a:25:a4:c2:fb:fa:43:82:
                    58:50:55:35:76:6e:41:45:d6:fc:76:87:07:6e:72:
                    11:27:55:44:a4:31:c2:5a:41:9f:65:e5:47:3e:a0:
                    e4:53:96:85:07:12:0d:56:22:74:e2:5e:a2:39:d6:
                    af:14:2a:94:d6:84:46:2b:51:c2:2d:60:69:4c:e2:
                    d1:42:6e:c9:95:6c:e4:b6:07:1c:99:13:c7:83:3b:
                    e0:e5:3d:2d:05:20:91:28:da:a6:41:a3:66:8a:f1:
                    6e:b1:69:e0:f5:19:b8:8b:a7:f0:29:74:35:92:d9:
                    c6:40:97:a4:8b:b8:c7:ef:e6:2b:08:cb:1b:0f:af:
                    8d:16:e9:32:8f:c7:f9:7e:20:32:42:10:d6:7d:a9:
                    42:04:b7:82:49:c4:be:1c:a5:b7:79:15:d6:33:c1:
                    f4:9e:6a:66:43:33:28:88:1f:48:17:f6:75:61:73:
                    4a:ea:2b:c7:5c:fd:b5:a7:2a:36:8b:75:ed:fd:4d:
                    18:61:19:bc:f5:31:27:ed:89:07:23:79:b5:a2:bb:
                    04:09:dd:b1:ca:78:55:d7:21:c3:a4:3b:2a:f4:00:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:A1:05:B0:C6:45:C2:9C:DA:EA:18:0B:80:62:3C:D2:E9:01:80
            X509v3 Authority Key Identifier:
                keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:14:7f:f2:17:bb:42:df:c9:8e:01:97:36:3b:68:c9:d7:e4:
         6f:5c:bc:f5:64:87:63:bf:2b:f8:25:4e:fc:f2:27:2c:43:f1:
         41:7d:86:8a:e7:35:02:e1:73:0c:df:a7:71:31:18:dd:5d:80:
         1c:cd:a0:8d:9d:60:f9:33:4d:4a:fe:62:34:ea:0d:f3:d4:ac:
         a1:cd:b2:47:fd:bf:79:da:d4:bc:5e:d5:f1:a0:8c:f2:aa:0d:
         b9:ce:47:b6:4b:d1:f9:eb:5b:4b:98:d7:d8:8e:df:41:60:b1:
         0e:f7:bf:2a:95:b6:9f:cf:f4:96:dc:be:0f:0e:db:1b:79:0a:
         c1:3a:dc:22:48:25:80:09:10:cf:44:10:45:5b:cb:29:11:0d:
         71:95:cd:04:97:44:c0:9b:3e:d3:68:38:56:4a:50:60:e0:a1:
         b4:0d:e4:a2:3b:3b:cf:a5:9d:ee:80:c0:c6:ef:ed:66:e4:47:
         73:a8:50:12:19:e3:1b:93:19:0d:bc:5e:b3:7c:ec:cf:a1:ce:
         76:9d:ff:55:d1:5f:94:a3:c2:8c:11:80:40:92:0a:71:bb:5b:
         0d:bc:fd:e3:0d:de:ff:17:32:8d:78:f9:04:27:53:fa:16:79:
         85:47:f6:fe:fc:f6:fd:af:d4:3f:0f:f1:f1:03:b6:81:8a:04:
         01:bc:25:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC
MzkwNURERDgwHhcNMjYwNzI4MTQ1MjIyWhcNMjYwODA0MTQ1MjIyWjAYMRYwFAYD
VQQDEw02YTY4YzIyNy0xMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvf4C+XNfkiiZtlMJ/cACqG09sVoe6HoUHjJo5iLoS4IGsmpjaiWkwvv6Q4JY
UFU1dm5BRdb8docHbnIRJ1VEpDHCWkGfZeVHPqDkU5aFBxINViJ04l6iOdavFCqU
1oRGK1HCLWBpTOLRQm7JlWzktgccmRPHgzvg5T0tBSCRKNqmQaNmivFusWng9Rm4
i6fwKXQ1ktnGQJeki7jH7+YrCMsbD6+NFukyj8f5fiAyQhDWfalCBLeCScS+HKW3
eRXWM8H0nmpmQzMoiB9IF/Z1YXNK6ivHXP21pyo2i3Xt/U0YYRm89TEn7YkHI3m1
orsECd2xynhV1yHDpDsq9ADbqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLPoQWw
xkXCnNrqGAuAYjzS6QGAMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE
OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX
c3JZMk80WWRhM2V6a0YzZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUBR/8he7Qt/JjgGXNjtoydfkb1y89WSHY78r+CVO/PInLEPxQX2Giuc1AuFz
DN+ncTEY3V2AHM2gjZ1g+TNNSv5iNOoN89Ssoc2yR/2/edrUvF7V8aCM8qoNuc5H
tkvR+etbS5jX2I7fQWCxDve/KpW2n8/0lty+Dw7bG3kKwTrcIkglgAkQz0QQRVvL
KRENcZXNBJdEwJs+02g4VkpQYOChtA3kojs7z6Wd7oDAxu/tZuRHc6hQEhnjG5MZ
Dbxes3zsz6HOdp3/VdFflKPCjBGAQJIKcbtbDbz94w3e/xcyjXj5BCdT+hZ5hUf2
/vz2/a/UPw/x8QO2gYoEAbwlzg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:51 2026 by rpki-client