Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
File:                     M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json)
Hash identifier:          P+7zvEkeqSoAqTRYrYeUDVXSqi5LJ+0rKZFIq8RNShA=
Subject key identifier:   88:2C:06:6C:E3:BE:00:14:2F:14:BF:92:1C:BE:BE:93:B1:D6:48:19
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Certificate issuer:       /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial:       0C6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
Manifest number:          0C63
Signing time:             Thu 16 Apr 2026 18:35:34 +0000
Manifest this update:     Thu 16 Apr 2026 18:35:34 +0000
Manifest next update:     Thu 23 Apr 2026 18:35:34 +0000
Files and hashes:         1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: l0THxNx867g+yPW5OF87tQQs5OUSI0l5HOE4krvNP9A=)
                          2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: 8VC3Iar+Y3S8HPOKyWalo2kgaJJ+RCJUC6oDDTxpM3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
                          rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
        Validity
            Not Before: Apr 16 18:35:34 2026 GMT
            Not After : Apr 23 18:35:34 2026 GMT
        Subject: CN=69e12bf6-aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:6c:03:bf:73:f8:07:37:6c:b8:3f:fa:dc:
                    1d:12:d5:9d:57:7c:a1:e9:8b:37:32:aa:7e:eb:82:
                    80:dd:4c:e7:a0:69:de:4d:c7:fd:aa:d0:ba:7a:33:
                    a9:8d:c6:78:44:13:08:81:45:7d:dc:37:d4:98:fd:
                    f9:0d:1b:87:05:06:42:b8:45:66:4d:9d:9b:3c:e0:
                    d9:4a:f1:c2:d0:08:97:cc:50:83:0b:c0:be:5f:05:
                    c5:7d:35:33:5a:2b:ba:47:b0:3b:f9:10:ae:51:da:
                    56:ef:46:af:81:74:bf:63:4d:89:fd:5b:36:05:b1:
                    36:17:46:89:6a:50:36:1e:c1:f6:c0:59:77:39:a4:
                    ec:60:ed:04:29:0f:b4:05:57:d1:c1:25:d3:67:b6:
                    c0:25:4b:83:cf:89:c0:a3:fb:41:35:aa:b8:97:ff:
                    50:6c:f8:f0:b3:f9:ba:c2:32:fd:75:b3:1f:af:96:
                    01:ad:31:fe:d0:81:8c:c6:cc:9b:1e:05:9e:1e:98:
                    99:c7:1a:b3:c9:46:f9:1f:db:eb:2d:56:af:76:2a:
                    26:d5:51:76:70:b7:5c:ca:11:91:15:a9:e7:2c:d6:
                    26:8f:5c:f4:5e:c5:e4:e8:b2:c0:d5:23:54:ed:b9:
                    ad:63:19:8a:82:59:8b:b0:ab:cf:50:a3:1e:0a:dc:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2C:06:6C:E3:BE:00:14:2F:14:BF:92:1C:BE:BE:93:B1:D6:48:19
            X509v3 Authority Key Identifier:
                keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:be:02:00:6b:93:f8:c8:96:07:e0:43:42:1c:45:56:f7:
         e3:e0:fd:18:05:fc:0d:8d:b9:4a:25:60:6c:fc:74:46:87:41:
         b0:48:e1:e1:c0:4d:e6:ac:8e:46:6a:ed:8f:c0:f5:2a:93:d9:
         c6:5f:8f:4f:e8:b0:70:85:60:9e:b1:69:c2:d6:48:77:0c:65:
         6d:32:81:e3:42:0f:b4:be:9d:33:68:0c:78:06:ac:4c:74:06:
         23:00:26:8a:1a:97:72:83:ff:74:4f:b5:d9:65:69:5d:6a:5d:
         7c:dc:22:cd:39:37:d9:29:9c:d8:98:37:82:58:b3:4f:7a:24:
         a4:6b:04:9f:16:61:ae:16:f8:81:4c:d1:82:fc:af:d2:f4:b7:
         ef:c2:72:09:d4:37:75:36:0e:62:ba:0b:42:33:e4:23:36:13:
         61:d9:27:1a:e0:ab:3d:78:17:f9:89:9b:11:18:dc:49:27:50:
         05:5a:da:9d:c6:8b:7e:17:37:a5:a8:77:0b:cc:71:62:2b:d0:
         07:da:57:39:2f:2e:01:02:27:4f:da:29:e6:6c:81:93:46:ff:
         29:11:17:b2:34:21:41:4c:d8:e4:66:46:b3:26:f9:cf:03:be:
         47:fb:47:47:b6:76:91:f3:28:03:3c:bf:f2:17:5e:e2:2c:32:
         f5:da:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:27 2026 by rpki-client