Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
File:                     3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json)
Hash identifier:          5mEJeNLHGu0aOwILvm9TjUqqB9+ExwitkW5bm3kZ5n0=
Subject key identifier:   76:AB:EA:83:1A:FE:04:2B:67:47:F7:98:4F:D6:8E:6A:92:DD:F4:B6
Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
Certificate issuer:       /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
Manifest number:          B6
Signing time:             Fri 17 Apr 2026 06:44:47 +0000
Manifest this update:     Fri 17 Apr 2026 06:44:46 +0000
Manifest next update:     Fri 24 Apr 2026 06:44:46 +0000
Files and hashes:         1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: O9CsVAHDwPY3oIglfJMC7OGIzlRIup93RLPQLnEG9Ps=)
                          2: F1940290212911F087425013C4F9AE02.roa (hash: aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
                          rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
        Validity
            Not Before: Apr 17 06:44:46 2026 GMT
            Not After : Apr 24 06:44:46 2026 GMT
        Subject: CN=69e1d6df-6627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:5f:f9:c2:7a:5a:97:10:fc:0a:b8:03:bf:
                    5d:6d:5e:43:de:b4:8e:ec:fa:df:f5:b9:71:a9:2c:
                    91:51:7e:0d:69:17:ab:46:1b:54:27:2c:85:3b:1a:
                    f4:96:5d:bd:2b:67:99:d4:41:c3:b4:68:52:16:ac:
                    d5:0e:75:a6:5e:1a:ce:97:75:38:d5:ed:c2:b8:3d:
                    f7:2c:ca:14:20:c2:8a:13:34:42:e6:88:58:81:e2:
                    83:cb:59:b4:d3:4b:2a:ef:70:a5:27:61:72:f2:d7:
                    1a:9c:d5:4b:03:96:c1:75:dd:73:83:32:3a:06:7e:
                    67:b1:e5:4b:7e:2d:72:73:ff:7f:ed:c0:fa:48:f0:
                    b7:26:5e:dc:b6:f0:3b:ea:dd:cb:a8:60:c5:4e:71:
                    fc:bb:35:2f:f4:a0:c9:e8:fd:aa:75:b4:ce:e0:0e:
                    43:3c:48:00:b0:58:35:05:dd:57:19:3a:7d:07:a8:
                    8c:6f:6e:20:c6:18:42:0c:f7:39:3a:77:2a:35:40:
                    2e:93:2d:f1:af:dd:76:ef:50:82:74:91:c3:38:59:
                    a1:c8:69:e0:b8:35:ea:f5:63:56:4b:48:f3:c5:b9:
                    64:32:d9:35:b7:b5:d1:ad:0e:a1:37:5d:62:c6:25:
                    f5:71:b2:e8:73:1c:d8:70:ee:ea:ff:3e:e4:e5:fd:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AB:EA:83:1A:FE:04:2B:67:47:F7:98:4F:D6:8E:6A:92:DD:F4:B6
            X509v3 Authority Key Identifier:
                keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:90:81:ba:5d:2d:a6:f7:34:e8:d8:4b:f9:e7:e5:3d:f9:b0:
         c2:b2:99:10:3c:81:9d:17:5e:fd:ab:e4:2b:d3:86:8d:1b:5d:
         a2:89:03:46:d1:ac:59:61:03:e7:51:15:c3:b5:57:a3:ce:4a:
         2f:06:7a:9c:9a:6b:d5:ed:81:dc:e3:f4:7e:a5:c9:98:8b:09:
         96:b2:77:bc:c0:b6:5d:2f:af:7b:7e:92:dc:35:e0:3b:6a:75:
         e5:9e:5d:a1:0f:fa:2f:dd:26:f7:de:2f:82:97:af:90:9b:b0:
         c6:be:39:a2:f2:9f:49:49:bb:09:89:51:6b:cd:3b:0e:46:08:
         fb:4a:05:4f:3a:3b:ac:07:09:e5:67:1e:b1:0d:89:1b:5d:1c:
         04:a7:c1:47:40:e5:1b:d3:c0:1f:c4:25:a2:49:d7:d0:c9:c2:
         48:0b:18:d3:e7:eb:56:ff:09:04:de:d3:5f:dc:11:09:17:72:
         14:a7:d1:87:28:66:bf:61:e4:2e:f1:fd:ab:98:db:fd:53:c7:
         d6:a7:fe:31:d6:53:3d:92:db:e6:65:9c:10:df:7f:29:f5:80:
         2a:24:ea:95:31:16:da:43:62:92:46:3e:67:28:ff:e1:39:d9:
         c2:41:d4:ee:1f:16:37:ea:bd:e1:21:3b:57:e3:72:8c:b1:87:
         55:5f:60:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFBMDUxMTAvBgNVBAUTKERGMTg3MzExRkEwOUM3NzlCOEIxNUQ5NDdBNDZENEY0
RURDQzUwNTMwHhcNMjYwNDE3MDY0NDQ2WhcNMjYwNDI0MDY0NDQ2WjAYMRYwFAYD
VQQDEw02OWUxZDZkZi02NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZxf+cJ6WpcQ/Aq4A79dbV5D3rSO7Prf9blxqSyRUX4NaRerRhtUJyyFOxr0
ll29K2eZ1EHDtGhSFqzVDnWmXhrOl3U41e3CuD33LMoUIMKKEzRC5ohYgeKDy1m0
00sq73ClJ2Fy8tcanNVLA5bBdd1zgzI6Bn5nseVLfi1yc/9/7cD6SPC3Jl7ctvA7
6t3LqGDFTnH8uzUv9KDJ6P2qdbTO4A5DPEgAsFg1Bd1XGTp9B6iMb24gxhhCDPc5
OncqNUAuky3xr91271CCdJHDOFmhyGnguDXq9WNWS0jzxblkMtk1t7XRrQ6hN11i
xiX1cbLocxzYcO7q/z7k5f1KWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHar6oMa
/gQrZ0f3mE/WjmqS3fS2MB8GA1UdIwQYMBaAFN8YcxH6Ccd5uLFdlHpG1PTtzFBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUEwNS80REMxRDkyNjIx
MjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngzbTRzVjJVZWtiVTlPM01V
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUEwNS80REMxRDkyNjIxMjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngz
bTRzVjJVZWtiVTlPM01VRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpCBul0tpvc06NhL+eflPfmwwrKZEDyBnRde/avkK9OGjRtdookDRtGsWWED
51EVw7VXo85KLwZ6nJpr1e2B3OP0fqXJmIsJlrJ3vMC2XS+ve36S3DXgO2p15Z5d
oQ/6L90m994vgpevkJuwxr45ovKfSUm7CYlRa807DkYI+0oFTzo7rAcJ5WcesQ2J
G10cBKfBR0DlG9PAH8QloknX0MnCSAsY0+frVv8JBN7TX9wRCRdyFKfRhyhmv2Hk
LvH9q5jb/VPH1qf+MdZTPZLb5mWcEN9/KfWAKiTqlTEW2kNikkY+Zyj/4TnZwkHU
7h8WN+q94SE7V+NyjLGHVV9gHg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:22 2026 by rpki-client