Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
File:                     C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json)
Hash identifier:          nTPJe6pwX0c54Osy/DMlOxoJBHUaqdDkKAo3DexFZzw=
Subject key identifier:   7D:5D:D1:F8:CE:4C:8E:BF:E0:7B:E3:2F:13:72:F7:09:7B:F2:92:9E
Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
Certificate issuer:       /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
Manifest number:          05DC
Signing time:             Thu 16 Apr 2026 22:54:42 +0000
Manifest this update:     Thu 16 Apr 2026 22:54:41 +0000
Manifest next update:     Thu 23 Apr 2026 22:54:41 +0000
Files and hashes:         1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: GaLDwWUsoBU9j9UkIsUtBQ/m4FumZhhQyfc7fPF0trU=)
                          2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: 1ZvrMdlGFQCTMD5ecs7oG/S3sWlG0zTg+VziefWYDWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl
                          rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
        Validity
            Not Before: Apr 16 22:54:41 2026 GMT
            Not After : Apr 23 22:54:41 2026 GMT
        Subject: CN=69e168b1-cefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:3c:40:95:34:14:28:16:ba:49:77:2f:47:
                    a6:c4:52:2c:24:73:9e:38:ca:95:fb:f9:ef:c5:5d:
                    49:03:e9:33:7d:4c:4e:3f:11:3b:33:d3:ae:e5:cb:
                    70:58:21:a1:7b:bc:ab:26:8d:37:f9:b1:cc:8a:cb:
                    ba:05:08:b3:48:6a:08:77:02:e2:71:c3:3e:f9:be:
                    d7:99:eb:d3:53:11:e7:76:4a:e2:ed:7c:21:77:c6:
                    74:cc:2e:5d:d2:d1:e9:b4:02:e1:90:eb:7e:6e:d8:
                    56:47:9d:94:e9:b8:aa:22:fb:bb:2a:0e:93:d0:1b:
                    12:71:a7:24:ba:d0:1c:00:3c:1f:4d:df:25:3e:34:
                    4e:6f:ae:b5:e6:cf:26:76:25:64:87:96:09:4b:0f:
                    8f:a0:f8:a0:81:e3:b3:90:fd:fe:09:e8:ab:9a:52:
                    d3:e9:aa:56:e4:75:d1:df:7a:2c:e6:41:7a:55:35:
                    15:a3:fe:2b:cb:4c:98:45:7c:27:f4:c2:f6:68:bc:
                    35:2d:d2:36:88:eb:11:e2:58:66:f2:8b:0c:85:ed:
                    61:8c:13:a8:b9:a9:9a:63:68:50:c6:13:83:c7:93:
                    6c:f1:d3:15:dd:26:8b:41:fa:53:30:26:60:fa:d5:
                    e8:3a:29:6c:83:0a:72:b5:b7:05:d2:13:d8:d1:b8:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5D:D1:F8:CE:4C:8E:BF:E0:7B:E3:2F:13:72:F7:09:7B:F2:92:9E
            X509v3 Authority Key Identifier:
                keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:0f:08:d5:39:80:0d:47:f8:07:68:05:3e:37:a9:8d:5b:
         4c:5e:24:f7:c4:e4:9a:ca:0f:b6:56:27:ed:19:ce:a7:5b:a8:
         05:7c:33:0f:79:d0:11:77:8f:c9:81:8d:00:b2:94:1b:8a:7a:
         31:8c:89:bc:45:b6:ce:96:8f:54:b5:7c:13:93:59:2e:a8:30:
         aa:73:30:9a:dc:d7:c3:fb:ad:67:c0:54:0a:6f:03:19:27:d8:
         cf:ab:e9:a4:cc:52:84:b4:77:10:f0:42:f1:52:07:fe:a6:8f:
         33:c8:25:ac:da:7f:ec:cc:bb:a4:21:09:5c:9c:7b:80:72:6e:
         03:fb:42:b8:57:df:4e:ed:84:82:db:6f:b6:c0:9c:43:46:c3:
         28:55:b4:32:42:5a:f1:ef:fc:11:b9:89:32:e8:0b:dd:af:f6:
         c8:45:c9:0c:57:cb:27:fc:52:55:13:af:67:a3:52:8e:95:70:
         2f:12:e0:09:ce:78:d0:da:b2:93:b2:a8:53:2d:bf:6d:17:82:
         c5:60:1c:7a:57:11:5d:88:80:06:ef:0a:47:47:a5:54:86:8f:
         e9:77:eb:3f:24:e0:bb:57:1d:ba:bc:6d:1b:a0:c9:3c:c8:42:
         71:31:b9:6a:26:38:0c:cb:e2:b4:40:70:c1:f7:64:c5:79:97:
         17:6d:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:51 2026 by rpki-client