Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
File:                     6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft (raw, json)
Hash identifier:          MP44Z+u59FdPS7Czj1A2NcFJp81egePqjh+bBDKCPzI=
Subject key identifier:   75:C0:25:53:95:3F:26:6F:80:3E:A5:32:9D:A3:97:6B:2C:30:2E:9A
Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21
Certificate issuer:       /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
Manifest number:          86
Signing time:             Fri 17 Apr 2026 07:22:38 +0000
Manifest this update:     Fri 17 Apr 2026 07:22:38 +0000
Manifest next update:     Fri 24 Apr 2026 07:22:38 +0000
Files and hashes:         1: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl (hash: W7XOk4OvSjyi8rdFYG3lecv0nW50dFFYGfo62tIm2GY=)
                          2: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (hash: x1cJvjh7zdmg7T/0iUEkEcxMiM7lfkwPcQV8vAeDdfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl
                          rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
        Validity
            Not Before: Apr 17 07:22:38 2026 GMT
            Not After : Apr 24 07:22:38 2026 GMT
        Subject: CN=69e1dfbe-ac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:b3:16:f9:16:55:e0:6c:72:09:73:13:8b:
                    98:6b:e0:8c:00:56:3b:c4:6f:c3:33:dc:cd:dc:80:
                    37:61:ca:ca:e4:43:60:84:4f:df:da:b3:79:d3:95:
                    90:4f:1d:4a:18:fb:a5:1b:ca:29:6d:7b:96:cf:db:
                    ca:00:c3:5f:1a:32:f8:c7:02:a2:65:3e:97:81:72:
                    7d:01:4f:70:3a:a2:f0:2e:3e:60:3d:ba:60:78:ae:
                    95:71:ea:d1:71:55:c0:4b:3d:f3:42:2b:ca:c9:09:
                    71:fd:f2:5c:87:37:2d:47:d8:ee:3e:53:4f:fe:9a:
                    0f:36:c3:77:f0:bc:e4:69:15:67:79:05:07:6e:8a:
                    54:a0:40:67:2f:69:fe:1e:f2:e9:6f:d1:79:6d:b9:
                    bd:c6:f6:c2:67:5d:81:ca:ca:a5:c5:f9:3b:f7:5d:
                    f4:92:13:36:7c:e6:25:39:f5:f1:c7:d5:bf:8a:89:
                    07:26:98:d1:66:2a:40:b7:4e:76:62:08:8a:d3:fd:
                    1f:97:0b:34:eb:c5:72:fb:11:ee:52:c4:60:c8:87:
                    77:d6:0a:f6:58:d4:ee:74:12:82:64:96:fd:74:8b:
                    60:46:2c:d3:28:3e:81:00:41:af:0a:01:79:6f:06:
                    e9:c3:c6:9c:96:84:d5:ac:5c:f4:45:ed:3a:58:4c:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:25:53:95:3F:26:6F:80:3E:A5:32:9D:A3:97:6B:2C:30:2E:9A
            X509v3 Authority Key Identifier:
                keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:b1:2b:3a:a4:06:cb:8f:ae:8d:89:4a:e6:69:7c:a4:e7:
         29:58:a9:5c:6a:00:6c:16:0f:b4:27:27:14:37:84:8e:f1:05:
         4d:0e:32:92:d4:0b:a6:bc:e5:18:45:99:47:76:d4:7c:42:d0:
         9c:5e:af:be:34:08:0b:8a:02:ef:32:87:0e:28:93:4a:8e:26:
         ff:35:9c:19:47:5e:ca:b0:0e:39:20:f5:0b:1b:2a:bf:32:b2:
         9d:f4:b4:e0:64:68:23:cd:da:3e:0c:d4:10:df:2f:36:a4:a6:
         59:cb:4a:28:80:be:00:16:ff:9a:9a:09:ce:52:5d:cb:50:6d:
         a0:54:ce:bb:9b:6e:d3:5c:7b:21:b0:cb:d6:c8:0f:b9:93:70:
         85:ee:9b:86:b3:f3:a7:3e:57:53:c5:72:de:56:7e:82:88:5d:
         b5:67:bd:e7:a5:76:4f:67:44:98:73:da:27:6f:05:ad:26:ce:
         a5:2d:9b:34:82:5a:37:f9:1d:7a:df:5e:65:a6:13:42:ee:e1:
         63:78:89:83:9f:8a:dd:4c:bd:46:2b:5d:03:04:01:da:86:7a:
         20:5d:05:45:16:9c:db:27:dc:87:37:5d:41:c0:12:b6:78:46:
         47:99:7d:c6:1f:49:85:4b:bd:ff:4a:40:96:3e:73:ba:29:21:
         cc:ec:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:48 2026 by rpki-client