Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
File:                     C6kCx31AoXILQnNsTotcNnjiuRQ.mft (raw, json)
Hash identifier:          UYHq+2u0eJHKe4GfrwsQCiFANqnFwrefa6PQe2yDKEE=
Subject key identifier:   44:B9:78:A6:2A:28:E4:6C:14:E6:08:33:20:55:D5:7F:23:5F:BE:10
Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
Certificate issuer:       /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
Manifest number:          31
Signing time:             Fri 17 Apr 2026 08:24:06 +0000
Manifest this update:     Fri 17 Apr 2026 08:24:06 +0000
Manifest next update:     Fri 24 Apr 2026 08:24:06 +0000
Files and hashes:         1: C6kCx31AoXILQnNsTotcNnjiuRQ.crl (hash: /8mm7mOpXpeoP2Ue4Il9Vs/lXfXj2diBKhn18FbN6tU=)
                          2: 5787CC96FB3411F0A8F597323D6F56BC.roa (hash: lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
        Validity
            Not Before: Apr 17 08:24:06 2026 GMT
            Not After : Apr 24 08:24:06 2026 GMT
        Subject: CN=69e1ee26-ff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:6a:96:b1:e8:dc:16:e7:9d:15:09:b8:54:
                    40:2d:38:dd:bf:ed:05:40:d9:bf:8b:81:83:fc:cc:
                    cc:78:5d:e3:da:cc:df:c0:97:ed:8d:28:ad:a4:44:
                    fc:46:61:ee:8c:dd:60:4c:70:e6:75:14:a7:3f:49:
                    64:11:cf:a4:6c:af:56:3e:bc:fb:2c:29:24:3a:f4:
                    6d:24:11:b8:b2:66:72:f8:c3:ac:b8:97:de:72:bb:
                    55:dd:eb:04:8c:c9:fa:80:43:d2:64:50:2d:2e:c2:
                    b2:be:4f:d3:9a:f0:90:ca:ca:50:8c:06:bb:6b:06:
                    79:51:8e:e9:43:14:4c:38:3b:4c:22:73:fb:2e:c3:
                    bb:84:56:6d:17:01:b5:d2:f5:f0:9c:58:12:37:cf:
                    93:17:85:f0:19:46:5a:2a:ff:fd:02:25:79:2e:c6:
                    a1:71:51:bf:ea:61:46:3f:ed:d8:b3:12:c6:1b:6a:
                    9d:96:88:bb:d4:52:48:a2:a5:df:d0:96:45:58:fb:
                    5d:7a:b8:63:ab:d0:3b:e2:b0:62:29:18:2d:36:25:
                    68:c6:24:b9:ba:cc:99:42:9d:93:5d:28:b4:cf:99:
                    18:ed:39:35:5b:18:82:4a:cf:59:42:63:1e:2f:7e:
                    c3:57:8c:c7:2a:10:44:75:bf:c4:e4:1a:06:e7:0f:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B9:78:A6:2A:28:E4:6C:14:E6:08:33:20:55:D5:7F:23:5F:BE:10
            X509v3 Authority Key Identifier:
                keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:84:a1:60:62:b9:8b:44:ed:55:a1:3c:64:d1:20:9e:5b:43:
         a5:82:5b:d1:06:f0:13:eb:70:52:be:cd:7d:cc:89:de:7a:aa:
         73:eb:19:a7:c9:db:94:bc:ed:53:cb:c8:ec:16:31:a0:b3:c0:
         0f:4d:7f:56:01:2e:7b:3e:63:ff:29:f3:2b:05:17:5a:a3:21:
         31:bd:cf:3e:58:ce:72:bb:80:ec:f5:49:46:9d:ae:56:42:70:
         fc:c0:a1:3b:99:66:ef:46:7c:71:61:95:e5:56:bc:df:44:d2:
         b6:6c:98:60:84:a3:cd:24:65:9e:ea:b7:09:eb:bf:47:70:1c:
         d7:18:5d:aa:dc:1e:ab:0b:fe:99:12:e1:cd:c5:b9:f8:2f:fa:
         23:d0:83:e0:a6:16:40:16:6a:68:bf:2c:9f:4a:c0:a1:11:17:
         c0:44:89:98:f9:1d:8e:fa:dd:7f:c3:89:05:f3:78:08:3c:d3:
         4c:34:14:29:3c:5c:ee:f5:6a:8a:20:b1:6d:30:ec:27:94:df:
         51:fb:8f:ef:cf:d2:58:b0:15:93:90:dc:c2:60:5d:21:fc:ce:
         4f:6f:17:bf:7c:c0:44:f7:de:be:95:d7:65:ea:73:cc:48:55:
         a9:13:a5:70:71:e2:a7:cc:d7:74:47:aa:dc:ef:07:1b:ad:2c:
         55:ae:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:30 2026 by rpki-client