Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
File:                     --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json)
Hash identifier:          Ifd71sXwi12zf9ILf9PwElblAaBd3hcq8WRx3ZVuljk=
Subject key identifier:   D0:AF:2B:57:98:0C:A2:D9:DD:21:A8:D1:EA:27:71:C9:BB:4F:6A:10
Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Certificate issuer:       /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
Manifest number:          12
Signing time:             Fri 17 Apr 2026 08:44:46 +0000
Manifest this update:     Fri 17 Apr 2026 08:44:45 +0000
Manifest next update:     Fri 24 Apr 2026 08:44:45 +0000
Files and hashes:         1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: 1+aBkhwEWRDuLqRzHmmekOEa4HbsDEB6S0/yayT78WA=)
                          2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
                          rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
        Validity
            Not Before: Apr 17 08:44:45 2026 GMT
            Not After : Apr 24 08:44:45 2026 GMT
        Subject: CN=69e1f2fe-2e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:c0:0e:2a:e8:ff:ff:bb:e2:4d:a9:36:7e:
                    d9:ab:00:34:9d:d0:bd:57:03:b5:5c:24:ff:53:80:
                    6d:f1:63:3f:65:5d:b0:e1:d3:78:b0:31:05:1f:37:
                    31:e2:7c:e2:82:fc:01:f6:86:47:ad:bb:51:2c:7b:
                    47:bb:a0:ce:78:2f:43:b3:20:00:66:f4:1b:ff:6f:
                    34:8f:ef:fb:45:1e:c3:05:41:70:24:0b:36:20:97:
                    99:9e:bf:43:ca:5d:5e:6c:93:83:f3:24:f8:f5:99:
                    4f:02:a1:f4:1b:b9:02:90:fa:60:9a:fa:96:a9:5c:
                    ed:d5:d2:d4:df:b1:f7:2d:c3:ff:79:8d:30:19:1f:
                    2c:f1:10:2b:bb:aa:a0:a8:b8:56:51:5f:c2:49:cb:
                    c5:4d:89:af:14:63:eb:b0:a5:00:ee:ea:7b:72:77:
                    13:0c:29:0c:2d:27:af:b1:5e:36:a2:86:83:c5:64:
                    a4:d7:87:35:40:07:d0:0b:4e:69:4d:cd:9a:a0:77:
                    e4:20:38:ff:c0:13:30:26:36:70:95:0d:61:fa:81:
                    cf:89:b1:12:b3:20:d4:f8:aa:39:32:84:5c:2a:c5:
                    f3:9e:1b:c7:05:25:0d:db:9b:c0:7d:84:6a:61:85:
                    75:0f:55:09:43:42:31:eb:78:53:d8:82:80:16:47:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:2B:57:98:0C:A2:D9:DD:21:A8:D1:EA:27:71:C9:BB:4F:6A:10
            X509v3 Authority Key Identifier:
                keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:ac:72:1e:a6:eb:1b:cc:a9:4d:0b:73:19:be:38:31:f0:
         a1:3e:55:40:6f:1e:f3:30:bd:74:1c:dd:43:5e:92:9f:a6:b7:
         29:8d:83:cf:79:3f:08:cf:b4:e2:03:6c:48:9d:7f:2d:05:1c:
         b8:7a:30:43:26:35:cf:b5:2b:04:61:25:78:ce:0b:a8:9b:88:
         ab:bb:95:db:74:19:14:cc:16:47:63:a0:63:b5:4e:e0:9e:9f:
         cf:66:b0:90:ca:4b:d7:ff:5f:24:93:d5:a8:60:c1:e1:5f:f9:
         60:82:4e:3a:3c:12:c5:39:4e:cb:0e:e5:89:44:17:63:34:3b:
         c9:69:6b:53:c3:37:38:d9:ca:bd:64:e4:f3:57:77:5c:b3:19:
         31:d4:bb:01:94:9f:e5:12:5a:2b:31:8d:b1:84:95:61:8a:11:
         7d:f8:c7:84:ac:68:78:49:05:be:7a:c1:4f:c6:8e:6f:10:e8:
         f6:20:d0:bd:83:7f:d0:74:25:93:6d:79:e5:93:00:f4:32:ad:
         d1:be:7b:90:cf:0f:c3:c8:79:cd:e4:09:97:ab:68:a3:ba:f4:
         e1:b6:cc:ec:90:a4:6b:b2:90:25:32:00:18:33:82:8e:4a:d3:
         67:09:2c:5f:61:f8:91:1e:d1:1d:00:d1:e8:b9:e4:35:83:c3:
         2c:87:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:39 2026 by rpki-client