Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
File:                     6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft (raw, json)
Hash identifier:          vngfkZ+Xl2e7rjbrmQ/vrZn1ag+4ZV5CLR4X+WDydcw=
Subject key identifier:   99:7C:12:E6:20:3B:21:88:FE:3F:3A:C2:3A:13:2C:0D:7E:C7:A0:BE
Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Certificate issuer:       /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Certificate serial:       0B34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
Manifest number:          0B2B
Signing time:             Sun 01 Mar 2026 22:59:48 +0000
Manifest this update:     Sun 01 Mar 2026 22:59:47 +0000
Manifest next update:     Sun 08 Mar 2026 22:59:47 +0000
Files and hashes:         1: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl (hash: Kx0B0H4lypswpDNymvj5Ke3I/qRxbPS1IcIRvJHyTX4=)
                          2: BA767AE8584A11EA91887312C4F9AE02.roa (hash: o4HoFez1MgYp3FqYzgE3IFlhr8Hcv6rB+e5/I3paQjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2868 (0xb34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119635, serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
        Validity
            Not Before: Mar  1 22:59:47 2026 GMT
            Not After : Mar  8 22:59:47 2026 GMT
        Subject: CN=69a4c4e4-6470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:49:62:fc:35:49:46:e5:6d:cd:39:6b:04:
                    5a:c3:9a:63:f9:05:7b:21:40:ef:24:0e:6f:76:dc:
                    c7:a5:a7:99:1f:75:4b:5f:20:42:a1:1b:2b:06:b6:
                    31:a6:85:e7:8c:4d:01:0a:b3:ab:d5:c1:07:70:32:
                    c0:7c:b4:77:32:c5:7f:de:27:df:f7:1e:68:0c:c2:
                    fa:ba:c7:87:e6:a0:b8:d8:02:c7:63:f7:52:d4:ff:
                    47:f0:ed:d0:b9:68:63:e4:61:e0:6e:13:b7:b7:74:
                    c7:e2:42:8d:d2:68:32:4d:4d:d0:f4:72:3e:a2:ed:
                    4d:e9:3c:ff:72:3d:c8:3d:bb:8b:d3:03:49:0d:e8:
                    0b:02:85:16:ac:62:78:5f:53:79:99:1f:de:01:81:
                    3a:15:37:d1:14:af:f0:bd:ea:f4:f2:1d:ef:73:90:
                    47:5f:6b:3b:5e:19:2f:86:49:cd:fa:1d:15:c9:58:
                    01:29:9a:3f:ae:c9:ed:2e:d8:da:fa:96:e5:63:9e:
                    35:ec:1f:f4:57:b3:02:51:0f:ae:4a:41:a5:ba:35:
                    11:d0:b2:02:fe:f3:f8:31:b6:f1:9c:bd:93:6e:a4:
                    15:2b:6d:1f:75:77:8b:0a:39:ec:f7:82:51:68:8a:
                    97:79:b3:f0:8b:71:d5:de:87:00:eb:73:7a:ce:4b:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:12:E6:20:3B:21:88:FE:3F:3A:C2:3A:13:2C:0D:7E:C7:A0:BE
            X509v3 Authority Key Identifier:
                keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ef:a6:fe:4b:31:43:4f:76:09:2b:d0:21:35:32:31:54:21:
         aa:f5:32:20:ef:27:dc:13:3a:c9:bb:9a:11:0f:7b:23:81:06:
         8c:47:75:92:55:26:1c:7a:85:99:51:92:05:72:b6:9f:ec:fc:
         bc:2a:5e:73:45:2a:e3:09:31:71:02:bb:a7:3e:af:21:50:09:
         3b:2f:3a:65:a5:06:6c:ac:a0:61:b8:47:e8:79:1f:f8:e1:8d:
         3f:7b:3c:84:f0:36:df:ba:e8:1f:ed:93:33:1e:a6:19:59:98:
         2a:d4:50:18:1d:c4:1e:a4:dc:9a:cc:9f:55:f9:ed:ce:17:0d:
         3d:23:de:75:aa:11:bf:42:83:77:ac:ab:23:2f:f5:fd:7d:43:
         07:da:6a:15:e0:49:8a:37:61:12:f0:a7:eb:d9:be:e6:92:92:
         c8:fc:26:4f:71:52:57:0b:44:80:fb:2b:6f:c9:ac:3e:4b:d3:
         9b:1f:c3:dc:c3:30:b0:4a:57:07:79:60:ee:29:11:88:c9:57:
         c0:73:b0:14:87:22:ec:e4:70:b8:8a:90:33:d8:4e:f3:45:a0:
         b0:a7:54:d2:4e:c4:6e:ad:94:68:05:9d:70:6f:09:f7:f9:95:
         fd:15:67:e0:91:e5:37:64:12:75:b0:bb:0b:ab:26:95:c4:34:
         ab:7c:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:39 2026 by rpki-client