Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File:                     6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier:          YbVHR+OY4JEjiZsZ5rfFjnb0SxbMAOGPh1r25nDMYxg=
Subject key identifier:   5C:85:03:9C:21:DB:60:79:00:E1:E3:19:51:10:36:4B:8D:67:FD:90
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer:       /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number:          C7
Signing time:             Sun 01 Mar 2026 08:18:18 +0000
Manifest this update:     Sun 01 Mar 2026 08:18:18 +0000
Manifest next update:     Sun 08 Mar 2026 08:18:18 +0000
Files and hashes:         1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: h8Aa7meNg7dku+4LCaBZ2kN+CQghIzwTkhFVpc70fao=)
                          2: 535D1F52069511F090414823C4F9AE02.roa (hash: cTLSMvFIXN6jCHrcjPzoduXJWG7klrm3S6xJZL67oJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
                          rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
        Validity
            Not Before: Mar  1 08:18:18 2026 GMT
            Not After : Mar  8 08:18:18 2026 GMT
        Subject: CN=69a3f64a-ea24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:dd:00:81:8f:aa:b9:c0:0d:15:f1:61:fb:
                    df:2f:f3:2a:26:ad:0b:8e:4a:4f:0e:44:b0:ed:fc:
                    85:9a:ff:2b:fc:bd:e7:55:4f:8c:cd:fc:91:f3:cc:
                    f7:19:cd:37:32:9a:6f:57:da:1b:da:d0:0d:fb:2a:
                    43:b4:85:01:dd:26:ee:72:90:26:30:e8:5f:b2:36:
                    ef:80:91:62:dc:fc:6b:20:00:7d:2e:da:a2:76:53:
                    2b:cb:97:3a:e8:b3:d6:01:43:f7:2f:2d:07:13:31:
                    a1:41:46:fb:4a:e5:c9:d2:2e:44:e3:e9:90:96:22:
                    47:07:43:21:c2:b4:09:8b:47:ac:04:52:8d:83:dd:
                    e9:ae:45:0d:48:17:0d:f9:e9:41:ba:80:c0:53:87:
                    e7:db:37:ac:3a:0b:ab:9a:a1:05:1a:f6:26:8e:4b:
                    28:90:65:e6:c1:cc:98:e3:40:36:83:df:a3:e3:af:
                    4b:03:27:dd:a3:2e:71:62:55:7c:0c:ec:bc:fa:b1:
                    ed:05:17:66:82:6d:8e:c0:21:9c:80:ac:ce:6c:6b:
                    e5:40:0b:74:ea:27:7a:60:86:15:21:ac:95:35:79:
                    1d:98:95:84:4a:e8:9c:65:b9:a1:08:99:2d:22:f5:
                    48:3d:c4:54:83:45:2f:99:e2:ec:b4:cc:4b:5a:a0:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:03:9C:21:DB:60:79:00:E1:E3:19:51:10:36:4B:8D:67:FD:90
            X509v3 Authority Key Identifier:
                keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:3c:d4:5c:76:7c:af:29:77:4a:32:3c:2a:41:00:21:9b:
         d7:a0:7f:e1:03:1f:0d:90:34:e9:af:48:a0:b2:4a:08:d4:49:
         b9:ca:be:2c:ac:08:fb:90:d0:7d:93:51:ec:aa:e7:08:8d:d0:
         5d:09:f4:f5:66:46:3b:42:da:7a:1b:80:fc:2a:00:42:d3:c1:
         e0:49:e6:7f:cf:9a:89:d0:a8:65:42:a2:be:bd:40:6e:44:53:
         23:4e:ba:b6:8f:59:0c:16:94:45:1f:8b:46:25:b1:d3:2b:df:
         a2:49:dd:71:53:61:ac:f2:31:f7:09:84:a1:64:72:32:43:98:
         f3:f4:f8:ed:52:24:87:1c:bb:00:48:29:83:41:3b:70:ad:96:
         dc:6b:e6:50:a3:ef:09:56:f7:7e:b2:c2:46:a6:87:4b:12:ba:
         dc:36:c7:92:65:ec:9e:be:a7:b4:93:11:01:73:61:3c:6d:72:
         b9:e4:64:f8:63:53:bd:66:bd:00:aa:83:1d:ae:32:c2:2d:4d:
         94:23:15:d9:54:f1:88:f7:0c:12:ce:f1:74:03:11:dd:2b:79:
         0b:b9:25:b9:54:ce:de:e9:f5:a7:64:a9:4c:a8:b7:2c:48:42:
         58:3d:3c:27:29:c0:c7:f8:85:63:e9:95:0e:f3:a7:7f:80:1b:
         5c:2a:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:06 2026 by rpki-client