Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
File:                     q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json)
Hash identifier:          jokqIXZaObhgg1J44lI6HxaS07XILjYW8rVdOf+af6A=
Subject key identifier:   68:C7:8A:44:BB:CA:12:DB:65:11:D0:46:23:0A:32:06:FB:23:58:9A
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       06DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
Manifest number:          06D8
Signing time:             Thu 16 Apr 2026 22:07:28 +0000
Manifest this update:     Thu 16 Apr 2026 22:07:28 +0000
Manifest next update:     Thu 23 Apr 2026 22:07:28 +0000
Files and hashes:         1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: bjuBjpoPSCpeq2NtaXNvfTSl6+c5LxI4ce4kpAtLCNg=)
                          2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: DdjZ6jJIRlM0zFTD4fhExwYeqEzrIafQSwbZlhASnAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Apr 16 22:07:28 2026 GMT
            Not After : Apr 23 22:07:28 2026 GMT
        Subject: CN=69e15da0-ed69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:0e:b2:cc:8a:d9:f9:fa:d1:53:75:34:7b:
                    ac:8d:d8:ba:37:b3:35:f6:65:56:4c:77:61:50:59:
                    15:ca:2a:b2:d4:14:c4:9a:c5:09:ab:b9:cb:59:cf:
                    32:f4:1d:14:cd:12:4b:3e:df:d8:1a:ee:36:a0:5f:
                    00:ed:fe:a3:5c:c0:46:24:62:15:07:77:dc:9e:53:
                    53:1c:b3:d6:c3:24:fe:3c:b1:72:b4:34:e4:88:c4:
                    d1:2f:e5:34:f0:ba:de:82:19:af:7f:58:70:96:0e:
                    a1:5f:4d:1d:e8:14:d1:d4:0c:2a:b3:74:db:14:34:
                    37:0d:ea:9d:3a:de:d3:1b:31:69:bd:dd:66:8c:5e:
                    a8:0d:58:6a:49:d6:60:7f:48:00:2b:06:8d:9f:e1:
                    f8:96:93:49:3e:59:63:f0:aa:1b:99:53:5f:ce:29:
                    4c:b8:60:f9:80:81:91:8f:17:7c:61:4e:80:9b:6e:
                    4f:1c:e3:08:2c:ef:01:e3:7b:53:99:a2:40:4b:bc:
                    72:79:b1:41:94:77:8b:61:3d:d6:c8:cb:fb:b8:49:
                    69:98:02:b6:75:ba:04:7d:15:f8:45:1e:6d:1d:ea:
                    6c:36:5a:4e:8e:67:9a:d7:fa:4b:b5:47:3d:71:7a:
                    a0:fd:14:dd:f9:95:75:67:f2:8d:1f:32:cc:2a:3e:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:8A:44:BB:CA:12:DB:65:11:D0:46:23:0A:32:06:FB:23:58:9A
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:a5:76:0e:9f:cf:71:22:7d:31:d5:4b:6b:18:bb:0c:0d:
         6d:31:d1:84:6e:9f:81:0b:44:a9:5d:4a:50:6d:7e:a0:0f:cf:
         0d:05:86:97:f7:f8:12:bc:cd:07:d7:71:ae:9c:5c:c5:96:e8:
         f8:c4:a8:69:57:8d:2a:01:1a:23:9f:6d:5c:0d:fd:ce:7b:9c:
         db:b3:79:4c:4a:76:71:58:b0:76:73:9d:b8:ad:36:50:0f:c6:
         e2:b4:80:d4:7c:90:73:6e:67:19:f0:9a:7e:8a:3c:86:b0:d2:
         64:bd:54:7e:28:db:96:04:eb:53:07:6a:63:29:dc:6c:c4:8e:
         ad:a6:c2:47:b4:be:ea:e2:a4:d7:b0:ed:15:8f:71:86:55:08:
         4c:3c:e0:30:a0:ed:d3:7a:c6:f1:3c:3f:a4:84:06:87:23:bd:
         59:a8:5a:a6:48:72:95:82:ca:10:3c:dc:7f:66:5f:c4:c1:e4:
         d3:37:1d:28:8a:d1:5d:27:ea:74:99:09:00:72:5e:7a:c7:2b:
         0c:31:64:b7:1e:26:0e:a8:da:73:6d:d3:8a:9b:87:36:61:b3:
         1f:a4:c0:26:12:e7:59:9a:94:8c:3e:9a:d6:34:03:f6:9a:e7:
         d9:2c:a9:fd:0f:cb:1b:54:df:e7:34:13:77:b6:73:e4:43:c2:
         2a:16:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:37 2026 by rpki-client