Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft
File:                     b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft (raw, json)
Hash identifier:          dL7MCXPVi0H1b6GZ4KBzMnZG/cB5ham4v/8qXJ4Wfns=
Subject key identifier:   06:84:E8:AB:B0:3D:68:6C:AB:39:F7:E0:7C:EE:AB:B0:41:B7:CE:41
Authority key identifier: 6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA
Certificate issuer:       /CN=A912876D/serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft
Manifest number:          BC
Signing time:             Mon 27 Jul 2026 09:11:03 +0000
Manifest this update:     Mon 27 Jul 2026 09:11:03 +0000
Manifest next update:     Mon 03 Aug 2026 09:11:03 +0000
Files and hashes:         1: b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl (hash: 5inEEnX2Apl+7wLP7dDgK/CnU+4+4z6sQljHmaIU4NE=)
                          2: B30F869670E511F08CE5B42CC4F9AE02.roa (hash: 6kIHGcuMJXy7cOPZ71v96alp4gU/F+rdvF2zfZD2ezA=)
                          3: C5ZLo30WwJ6ABX93uMx3AJ1kHYA.asa (hash: AL5RY0m1vg8vavd8Y4LFtJQ5Fc1ejX9LpR8zsd5SUAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl
                          rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912876D, serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA
        Validity
            Not Before: Jul 27 09:11:03 2026 GMT
            Not After : Aug  3 09:11:03 2026 GMT
        Subject: CN=6a6720a7-fb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:2a:01:05:f5:36:98:64:31:06:b6:32:07:
                    d1:52:19:e1:17:0c:98:47:8f:60:68:2d:56:5b:43:
                    6e:f1:d2:1d:2b:49:ea:9d:d0:ba:11:85:a7:cb:a8:
                    6d:a2:b3:1f:80:21:51:f5:9d:c4:19:0c:fd:82:b0:
                    5e:a1:8b:da:44:d9:4c:10:17:14:90:fe:c8:9a:9d:
                    79:d5:bc:69:69:7e:a3:4b:d3:da:ef:89:fb:19:43:
                    98:cb:27:be:b9:a6:74:73:0b:8d:f8:32:98:3d:c8:
                    d0:e5:6d:f1:d2:8f:d7:9a:a3:71:0e:6b:37:06:d4:
                    c6:c1:b0:f3:d1:ab:2e:ff:1e:02:37:eb:08:8c:9c:
                    e1:3f:36:c2:ca:c6:2e:0a:6f:d7:64:ba:b9:28:37:
                    e1:d2:6c:9a:db:38:cc:2e:de:02:65:7e:cb:28:c8:
                    a5:ce:8f:f6:63:ac:2d:0f:e6:73:9e:10:ac:7f:65:
                    f9:cd:a3:26:17:ee:eb:c0:81:ef:b9:98:76:47:56:
                    06:8b:db:f4:3a:25:14:f6:74:2e:70:9f:44:a3:69:
                    4a:ff:28:43:5b:51:a1:e5:1d:fb:ce:37:90:65:d1:
                    2d:44:cf:ee:f7:f4:0a:44:f1:84:fd:c6:39:67:22:
                    7a:f7:a3:b7:8a:85:67:84:60:12:ce:b9:25:25:cd:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:E8:AB:B0:3D:68:6C:AB:39:F7:E0:7C:EE:AB:B0:41:B7:CE:41
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:a2:fe:fb:9c:dc:48:8d:ab:08:f7:1d:ea:c6:39:c9:c1:
         92:be:e1:3e:90:42:19:ed:ec:0b:39:cc:a4:87:3a:6c:53:04:
         04:d4:24:56:71:92:92:d3:76:b3:dd:b7:40:c6:51:3c:43:46:
         1a:14:b1:88:69:0c:32:e0:d0:96:1d:bf:11:63:c9:72:a3:7f:
         73:ca:fc:21:1a:8f:4f:58:9f:88:da:c4:ff:37:30:ee:c9:e6:
         c2:99:6b:37:47:25:46:53:9b:9b:1a:da:b5:de:50:bc:9a:a7:
         66:a1:00:52:26:c3:73:49:7c:6f:ec:86:96:3d:d6:b6:ca:3a:
         bb:88:31:22:76:de:a2:38:15:60:d6:27:62:69:18:63:d5:5f:
         14:d4:68:4b:a0:ec:68:1a:cd:25:81:cb:40:c8:38:9e:db:24:
         00:a9:8a:1c:4d:dc:9e:7c:c6:57:78:6a:ce:b7:70:78:91:f3:
         d6:f7:b9:f3:7d:65:ef:cc:3a:05:71:67:32:32:5f:70:7a:bd:
         10:47:c7:cf:67:41:90:3a:6d:b9:5d:f9:54:23:c3:d4:1a:cc:
         0c:19:25:89:dd:10:1b:58:d7:47:5e:43:71:56:99:27:5b:88:
         b3:76:64:92:44:5e:ad:87:8f:53:b1:94:83:e4:cb:e0:3b:da:
         b6:6b:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:13 2026 by rpki-client