Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File:                     a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier:          ZfSMvPHR5IXtukm5iAIZTmNfxeDEApWBQwKgP2zGomE=
Subject key identifier:   F1:F6:AD:C1:6F:5F:09:7A:D7:A3:8E:F7:67:EB:D1:E7:14:82:5A:4C
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer:       /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial:       3550
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number:          3534
Signing time:             Mon 02 Mar 2026 02:42:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:42:52 +0000
Manifest next update:     Mon 09 Mar 2026 02:42:52 +0000
Files and hashes:         1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: e3M9MiYPSQ0QA0Nt3QaKN5zQLchIewEOrIZ6+tqT30k=)
                          2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: tckSAKTOei05940ALy4Vf/C0qPnj/LXYBJGPT90xVGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
                          rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13648 (0x3550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
        Validity
            Not Before: Mar  2 02:42:52 2026 GMT
            Not After : Mar  9 02:42:52 2026 GMT
        Subject: CN=69a4f92e-3c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:33:41:1a:f8:a2:ec:b0:d8:94:1c:2b:f1:
                    1e:da:f3:f4:d5:ae:5a:f7:6e:52:18:d1:ca:c6:9c:
                    05:76:46:17:88:72:86:d5:bd:0b:95:c6:a6:fe:fb:
                    37:f7:55:59:bc:e7:0f:d9:70:e0:ea:68:d0:77:54:
                    ed:c7:75:df:bb:0b:25:6a:35:bd:05:7b:cc:86:a0:
                    36:8a:61:b3:d6:a0:b1:2e:cc:ea:08:06:57:e7:f1:
                    be:7b:28:bc:fd:e8:09:14:30:cf:da:13:f0:89:56:
                    b7:4a:d1:5c:90:00:e9:d5:cd:54:da:97:fb:90:00:
                    ca:5e:e8:c7:74:d7:80:af:db:39:56:71:d8:6d:33:
                    75:16:55:48:32:74:22:d0:c2:73:8e:33:a4:e5:ac:
                    4f:45:1a:29:aa:30:4e:38:e9:7a:a1:ea:cd:a2:15:
                    a5:54:c3:f7:fa:7a:a6:f7:e6:89:0c:de:ab:e8:5d:
                    b1:ef:ed:7d:92:53:98:2b:41:3d:c4:52:78:7e:f3:
                    34:39:98:c7:e6:18:71:77:26:9f:9d:06:bc:18:7f:
                    ee:90:e6:d0:5e:43:26:e6:94:44:d9:48:8a:20:98:
                    15:77:ed:07:ba:1d:46:cd:8c:b7:a3:30:30:ec:36:
                    6b:db:17:85:f2:01:c8:29:9d:2f:f0:00:88:91:46:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:AD:C1:6F:5F:09:7A:D7:A3:8E:F7:67:EB:D1:E7:14:82:5A:4C
            X509v3 Authority Key Identifier:
                keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:8f:36:89:0f:0b:60:1e:03:4f:ad:d0:af:6a:73:54:dd:
         75:f3:ab:6b:c4:f2:08:bc:d9:1b:94:10:3d:28:86:bc:ec:c6:
         a0:3b:59:6e:bb:96:c9:46:02:37:66:af:5e:ad:3f:31:a7:f8:
         74:f5:99:25:9f:8e:3a:4a:a1:06:a0:5b:71:a4:f1:53:3a:6b:
         cf:99:68:0b:1f:f0:11:07:76:7d:2f:20:50:ff:82:5b:bb:53:
         b0:9b:58:ab:0b:65:36:bc:6d:32:71:9b:47:a0:41:22:a7:08:
         e5:46:ff:a9:7d:bc:a9:52:a7:1a:81:5f:d4:f9:ed:a4:eb:40:
         c6:32:98:bd:9c:10:ab:38:8f:99:22:52:ee:b7:e0:10:60:d2:
         40:3a:db:33:0a:e2:cd:fd:00:4d:24:1e:0c:67:8d:37:5d:03:
         77:97:d5:4c:d6:3c:21:21:15:1f:34:a3:f3:cf:05:78:2f:fc:
         cb:3f:14:ed:d2:c0:d8:78:de:7c:e4:33:ad:dd:e2:69:c4:4d:
         38:bf:9c:49:fa:43:9a:cb:9e:39:a6:24:c7:cd:5c:c2:e8:9d:
         55:6b:35:5b:09:27:3a:5d:60:53:0c:96:f9:73:d8:b5:fd:53:
         1c:9c:75:6e:0b:3e:6f:35:46:b0:21:3a:71:8e:ab:ac:4d:e2:
         f2:fb:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:25 2026 by rpki-client