Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
File:                     6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json)
Hash identifier:          nDOzRr71famNaCe6PO+JAm0ofp07eqjiiDj7nY3FRPs=
Subject key identifier:   C6:2F:AC:07:B7:FC:3B:7C:06:4C:FF:02:C8:14:7B:21:7A:A2:98:03
Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Certificate issuer:       /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
Manifest number:          C1
Signing time:             Sun 01 Mar 2026 08:09:51 +0000
Manifest this update:     Sun 01 Mar 2026 08:09:51 +0000
Manifest next update:     Sun 08 Mar 2026 08:09:51 +0000
Files and hashes:         1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: ZZp9zcfWK3VpFrM/aBUmTBSQaAr+Q3mjMf7W+uJu72Y=)
                          2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: JMt5vP4Mc/dfVXUg6MZM2/6WBhdcp4CEtH6D5aR/lLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
                          rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
        Validity
            Not Before: Mar  1 08:09:51 2026 GMT
            Not After : Mar  8 08:09:51 2026 GMT
        Subject: CN=69a3f44f-62e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:3d:e1:58:57:d3:6e:5b:7b:cf:8e:42:d8:
                    2f:c5:0e:af:94:53:ce:d9:0f:f2:92:de:db:5c:e1:
                    6d:05:59:13:78:94:68:f0:38:49:79:2d:87:85:8e:
                    c1:d0:41:44:9e:74:1c:6c:54:ce:70:63:7e:f1:fb:
                    10:6d:9c:b9:64:00:58:3b:7e:78:43:39:30:55:18:
                    a0:2a:20:44:8d:b2:81:71:a4:77:d8:07:69:bf:4d:
                    da:d8:8a:b7:e6:a3:2e:12:70:37:4a:cb:09:e7:ca:
                    6e:6e:b1:53:46:fc:55:e5:7d:a1:a3:0e:b6:37:18:
                    cb:45:de:d6:ec:09:f5:c1:c6:e6:68:a3:12:cb:78:
                    d0:6d:9c:30:b7:d5:4e:28:3d:41:b1:03:e6:7a:01:
                    cc:6e:db:3e:c9:b8:bf:31:8c:4a:dd:42:86:d0:f6:
                    fc:78:aa:61:a4:69:73:d3:19:99:4e:3c:b9:65:90:
                    75:1c:65:35:2a:81:02:14:ed:10:e1:bb:c4:1d:a5:
                    d2:fc:ae:5c:a3:89:6c:c1:23:27:d0:f4:13:8d:ae:
                    5e:ce:85:25:30:79:cf:ef:c5:49:28:f5:11:b3:95:
                    be:b7:03:30:bf:b9:62:94:ca:5b:02:68:c7:c4:8c:
                    34:d8:22:4d:f0:77:26:38:4a:a7:2d:bc:1e:85:ce:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:AC:07:B7:FC:3B:7C:06:4C:FF:02:C8:14:7B:21:7A:A2:98:03
            X509v3 Authority Key Identifier:
                keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:a3:dd:67:91:56:2e:68:d5:98:9c:1c:af:3d:99:8e:f4:
         8c:cb:81:de:6e:ce:9e:d7:04:47:a2:83:95:46:d9:3f:cf:90:
         ac:55:85:e9:5c:fd:e8:66:b0:f5:8c:4d:16:0c:47:6e:89:1d:
         a1:71:1b:6f:1c:7d:ea:69:6a:39:5a:a4:8c:dc:c0:8a:a3:e4:
         5b:b5:c0:1e:c1:8a:cb:36:10:03:b6:b9:73:53:92:c1:17:0c:
         84:84:d6:93:4c:80:8b:c4:e3:19:5b:6f:26:07:6b:9c:11:e7:
         61:d1:69:c1:2b:14:de:65:fe:d0:c7:c1:78:09:41:e2:f9:c6:
         ab:5f:55:e4:7f:1d:4a:0c:c4:10:de:e0:fb:6a:66:8b:fc:ca:
         22:46:8f:13:cf:f4:c7:15:10:a5:55:1a:a8:2e:cd:b1:a5:07:
         64:f0:bf:67:3e:b7:e8:16:65:09:8f:90:23:e0:6c:fd:c8:d7:
         fa:95:ab:ea:fe:b0:41:bc:99:33:c9:4e:6b:46:cf:07:4b:bf:
         01:3e:76:96:59:33:3f:00:45:6a:8c:7b:43:ff:c6:ab:5d:ac:
         33:8b:4b:92:07:78:0d:07:d6:46:24:64:4a:25:5e:1f:b0:8e:
         d0:54:e4:ba:b3:2e:a3:ba:d1:b1:58:ba:b3:a5:f0:70:01:64:
         a4:9c:25:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk2OTYxMTAvBgNVBAUTKEU4NDI5MjkxMjMyQjlFMEZCOTQ4NUEwQUFENDkzRDdF
MDdDN0U0RDEwHhcNMjYwMzAxMDgwOTUxWhcNMjYwMzA4MDgwOTUxWjAYMRYwFAYD
VQQDEw02OWEzZjQ0Zi02MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthA94VhX025be8+OQtgvxQ6vlFPO2Q/ykt7bXOFtBVkTeJRo8DhJeS2HhY7B
0EFEnnQcbFTOcGN+8fsQbZy5ZABYO354QzkwVRigKiBEjbKBcaR32Adpv03a2Iq3
5qMuEnA3SssJ58pubrFTRvxV5X2how62NxjLRd7W7An1wcbmaKMSy3jQbZwwt9VO
KD1BsQPmegHMbts+ybi/MYxK3UKG0Pb8eKphpGlz0xmZTjy5ZZB1HGU1KoECFO0Q
4bvEHaXS/K5co4lswSMn0PQTja5ezoUlMHnP78VJKPURs5W+twMwv7lilMpbAmjH
xIw02CJN8HcmOEqnLbwehc5tCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYvrAe3
/Dt8Bkz/AsgUeyF6opgDMB8GA1UdIwQYMBaAFOhCkpEjK54PuUhaCq1JPX4Hx+TR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY5Ni8yQjgxMTY1NkYx
QTQxMUVGODQ0OEVCMjJDNEY5QUUwMi82RUtTa1NNcm5nLTVTRm9LclVrOWZnZkg1
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTY5Ni8yQjgxMTY1NkYxQTQxMUVGODQ0OEVCMjJDNEY5QUUwMi82RUtTa1NNcm5n
LTVTRm9LclVrOWZnZkg1TkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATLuj3WeRVi5o1ZicHK89mY70jMuB3m7OntcER6KDlUbZP8+QrFWF6Vz96Gaw
9YxNFgxHbokdoXEbbxx96mlqOVqkjNzAiqPkW7XAHsGKyzYQA7a5c1OSwRcMhITW
k0yAi8TjGVtvJgdrnBHnYdFpwSsU3mX+0MfBeAlB4vnGq19V5H8dSgzEEN7g+2pm
i/zKIkaPE8/0xxUQpVUaqC7NsaUHZPC/Zz636BZlCY+QI+Bs/cjX+pWr6v6wQbyZ
M8lOa0bPB0u/AT52llkzPwBFaox7Q//Gq12sM4tLkgd4DQfWRiRkSiVeH7CO0FTk
urMuo7rRsVi6s6XwcAFkpJwlFw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:43 2026 by rpki-client