Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
File:                     C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json)
Hash identifier:          eDv6EecA8EBS0/3kwFDCwjIQBhK0dqNn5ol30TjaVNQ=
Subject key identifier:   34:D2:13:FE:C6:1A:A2:D7:3C:01:3E:4C:78:16:6C:1C:B4:28:68:39
Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
Certificate issuer:       /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
Certificate serial:       0619
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
Manifest number:          0611
Signing time:             Sun 26 Jul 2026 23:42:33 +0000
Manifest this update:     Sun 26 Jul 2026 23:42:33 +0000
Manifest next update:     Sun 02 Aug 2026 23:42:33 +0000
Files and hashes:         1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: FkrXZRkjMTmx0AbaeS0YNCzrqUmhjEHfuCaM//lhHp4=)
                          2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: Y4F1ja4wcw1eseQD+81vZYB519DcIWC7aDAimVmHoaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl
                          rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
        Validity
            Not Before: Jul 26 23:42:33 2026 GMT
            Not After : Aug  2 23:42:33 2026 GMT
        Subject: CN=6a669b69-ebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:75:1d:d6:09:f8:60:e2:97:20:26:05:a0:
                    18:88:31:70:fd:f2:39:e3:ad:9c:96:d4:54:38:53:
                    c8:5d:0b:9b:a8:c8:b5:6f:78:0a:0e:9a:49:89:df:
                    58:49:2f:e4:d0:7c:06:de:ac:43:6f:82:74:27:c7:
                    aa:87:e8:4e:4f:2f:7b:4d:6e:bd:bd:3c:b0:4e:a3:
                    f3:51:31:54:fc:b6:18:24:db:cc:b0:0f:02:e8:0b:
                    3e:4d:07:db:10:6d:e6:49:3b:71:56:b0:67:53:0f:
                    5c:c4:67:8c:30:2e:f2:6f:d1:aa:9e:a3:0d:a2:89:
                    e5:96:e9:09:07:18:ff:8b:45:66:7c:0d:74:49:32:
                    bb:10:09:eb:d0:3f:41:99:87:f1:05:4c:41:4a:4a:
                    13:7d:fe:4e:fd:d9:4b:8a:8a:4b:da:8d:a0:47:c3:
                    e1:92:6b:4a:11:45:61:94:2b:5d:eb:9b:61:25:c7:
                    25:dd:aa:db:28:59:c1:17:b3:9b:9b:b2:fe:da:cc:
                    44:87:3c:66:a2:28:ba:76:8a:46:43:4c:f1:08:e0:
                    a6:18:09:40:27:ec:53:ee:e3:5b:2d:18:88:5a:57:
                    0e:b8:34:1b:c3:b2:a1:d3:8a:9b:e4:b5:e2:d5:8b:
                    11:1b:4e:03:6c:71:25:af:14:17:1e:8b:e5:29:78:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D2:13:FE:C6:1A:A2:D7:3C:01:3E:4C:78:16:6C:1C:B4:28:68:39
            X509v3 Authority Key Identifier:
                keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:84:df:a0:f9:11:3d:4a:90:64:2f:60:9b:86:07:28:0b:
         07:5d:56:9a:96:21:0d:29:ba:a0:db:94:38:eb:98:39:35:ae:
         ea:50:64:87:b9:fb:4e:6a:55:5e:8f:43:28:41:60:d1:32:58:
         11:b5:5a:60:53:1c:34:bc:ea:0c:f7:03:da:c1:9d:4b:4e:ab:
         f3:f1:20:d4:b5:fb:a1:d1:cc:21:77:98:be:f4:28:1a:03:1a:
         bc:5d:9a:37:af:c2:8b:5a:d8:03:8b:16:c4:f9:7a:bf:6b:3e:
         a1:12:57:6b:30:a1:60:c7:2f:75:cf:5e:4f:3b:da:ff:1c:a6:
         f3:b0:b8:02:9f:89:18:ec:40:29:f2:15:39:6c:f4:65:42:74:
         7a:82:8d:62:95:29:2d:fd:2a:1a:a8:28:79:63:31:c7:7f:ba:
         55:e0:a7:a1:40:d2:24:f5:d7:4e:19:9a:f7:36:e4:4e:a0:a3:
         b8:e4:9a:11:d8:0c:db:a0:0c:5c:00:03:7d:dc:34:db:c3:81:
         53:95:b1:0c:05:af:4c:df:59:02:84:eb:7c:d4:75:fa:1f:ae:
         f5:92:19:94:66:81:2b:2e:a3:95:c6:b8:96:f3:ad:9c:15:72:
         d5:65:73:b8:33:ea:98:6d:94:5f:04:44:4e:99:e0:8d:12:bc:
         be:12:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:39 2026 by rpki-client