Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File:                     a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier:          SqDzH1pYXVliBTM8NKtgEmjX60trzjoKARP3K/Xol+c=
Subject key identifier:   DB:71:56:99:84:B2:E3:CA:8B:52:29:E0:39:BA:C1:E3:96:A9:1D:DA
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer:       /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial:       3568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number:          354C
Signing time:             Thu 16 Apr 2026 14:42:47 +0000
Manifest this update:     Thu 16 Apr 2026 14:42:47 +0000
Manifest next update:     Thu 23 Apr 2026 14:42:47 +0000
Files and hashes:         1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 0z8jxonBiVmkL2Ce30NzhkpNO0CJkx767HDWRrKTCMg=)
                          2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: tckSAKTOei05940ALy4Vf/C0qPnj/LXYBJGPT90xVGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
                          rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
        Validity
            Not Before: Apr 16 14:42:47 2026 GMT
            Not After : Apr 23 14:42:47 2026 GMT
        Subject: CN=69e0f567-222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a0:0e:3a:a6:a6:f2:20:1b:df:28:8b:cf:3b:
                    99:26:3b:13:6b:c9:d3:77:47:99:39:bb:95:29:27:
                    fc:9f:e4:7f:bb:c5:3c:64:ac:84:6b:ad:67:d6:43:
                    27:ae:a6:62:da:14:79:ec:1c:37:14:70:7c:a7:ee:
                    4b:11:8f:d3:81:25:22:18:ae:9b:78:f1:ee:3c:ee:
                    f9:1e:0a:f6:b3:a9:81:62:14:50:3a:0f:c2:fc:eb:
                    62:9b:b2:67:79:c6:31:84:74:09:ec:e9:47:08:93:
                    f4:b2:4a:92:75:72:70:5d:b8:db:d8:c4:0f:1c:9b:
                    00:44:74:2c:11:a9:b3:50:5e:57:1b:9b:11:3c:b1:
                    3b:54:73:91:30:c2:43:6d:fd:36:76:15:7c:7b:bd:
                    e5:f6:c1:c5:d9:c9:2c:c8:58:bc:51:f8:82:8a:ec:
                    8a:5a:ab:90:1b:87:6d:b3:c9:7a:bb:fb:91:42:00:
                    10:a1:fc:fd:8d:7e:d4:66:94:ab:6e:16:e2:f0:37:
                    4b:f3:a4:75:7f:23:b8:9a:d9:bc:2b:ba:81:1f:a7:
                    34:7a:2f:15:40:cf:65:96:65:16:c0:6f:9c:28:6d:
                    a7:8e:ed:63:9b:48:80:a8:ed:8a:f1:29:00:dd:52:
                    ec:56:3c:35:ac:c0:38:0b:7b:02:a2:46:2d:0e:84:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:71:56:99:84:B2:E3:CA:8B:52:29:E0:39:BA:C1:E3:96:A9:1D:DA
            X509v3 Authority Key Identifier:
                keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:72:c7:0c:48:b3:af:cc:c7:c0:6a:d4:5d:9a:81:eb:b1:
         c3:f3:76:5a:49:2e:32:86:2d:66:c7:ad:b2:29:c7:5d:56:b5:
         75:d6:1b:43:c1:60:25:5b:61:7a:92:11:85:47:5c:bf:03:58:
         9e:69:2e:f3:cb:87:53:8f:ed:8a:bf:e0:7f:1f:1e:b7:54:aa:
         b1:d7:d1:6b:2f:b9:95:11:75:3f:4f:bb:4b:45:2a:9e:6f:5e:
         dc:31:91:65:1e:2b:20:7a:cd:65:66:bc:ef:04:80:20:e9:fc:
         c5:cc:54:4a:03:78:5d:16:24:cc:56:b6:5e:a9:a9:ab:54:67:
         b2:83:36:8b:a4:fe:03:c1:41:4d:19:98:e6:bb:2e:0a:32:d7:
         82:69:c1:43:57:b7:90:0a:27:bd:08:92:0b:09:2f:c7:5c:b8:
         85:27:0c:4d:01:e0:45:bf:ba:2a:eb:a8:57:22:7c:6b:10:9f:
         1e:b8:de:2b:04:07:84:9e:6e:22:ca:1c:bc:67:05:d2:42:73:
         db:58:36:fc:cd:3c:29:dc:56:28:c5:72:85:13:29:e2:aa:35:
         c6:14:d0:c5:71:f2:c8:20:e4:be:01:61:8b:2c:68:ee:58:40:
         33:92:a6:41:55:4a:f0:44:7d:dd:5b:26:08:01:ba:fd:26:bf:
         d2:81:a9:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF
MEE0MTkzMjEwHhcNMjYwNDE2MTQ0MjQ3WhcNMjYwNDIzMTQ0MjQ3WjAYMRYwFAYD
VQQDEw02OWUwZjU2Ny0yMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6KAOOqam8iAb3yiLzzuZJjsTa8nTd0eZObuVKSf8n+R/u8U8ZKyEa61n1kMn
rqZi2hR57Bw3FHB8p+5LEY/TgSUiGK6bePHuPO75Hgr2s6mBYhRQOg/C/Otim7Jn
ecYxhHQJ7OlHCJP0skqSdXJwXbjb2MQPHJsARHQsEamzUF5XG5sRPLE7VHORMMJD
bf02dhV8e73l9sHF2cksyFi8UfiCiuyKWquQG4dts8l6u/uRQgAQofz9jX7UZpSr
bhbi8DdL86R1fyO4mtm8K7qBH6c0ei8VQM9llmUWwG+cKG2nju1jm0iAqO2K8SkA
3VLsVjw1rMA4C3sCokYtDoQhNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtxVpmE
suPKi1Ip4Dm6weOWqR3aMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE
OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5
b2h5MHZ1djAzMHpncEJreUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQC5yxwxIs6/Mx8Bq1F2ageuxw/N2WkkuMoYtZsetsinHXVa1ddYbQ8FgJVth
epIRhUdcvwNYnmku88uHU4/tir/gfx8et1SqsdfRay+5lRF1P0+7S0Uqnm9e3DGR
ZR4rIHrNZWa87wSAIOn8xcxUSgN4XRYkzFa2Xqmpq1RnsoM2i6T+A8FBTRmY5rsu
CjLXgmnBQ1e3kAonvQiSCwkvx1y4hScMTQHgRb+6KuuoVyJ8axCfHrjeKwQHhJ5u
IsocvGcF0kJz21g2/M08KdxWKMVyhRMp4qo1xhTQxXHyyCDkvgFhiyxo7lhAM5Km
QVVK8ER93VsmCAG6/Sa/0oGp1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:34 2026 by rpki-client