Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
File:                     6WIIUNtVhbEpkxUEf1odX72KpjA.mft (raw, json)
Hash identifier:          ZXm+nCt3QQj5az0D/K8Rlprl63iienAp9298B76TF6A=
Subject key identifier:   92:96:30:EA:57:86:8D:98:C4:D4:15:C9:F3:50:3D:F0:AF:BD:B2:DA
Authority key identifier: E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30
Certificate issuer:       /CN=A915974C/serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
Manifest number:          17
Signing time:             Wed 15 Apr 2026 08:39:04 +0000
Manifest this update:     Wed 15 Apr 2026 08:39:04 +0000
Manifest next update:     Wed 22 Apr 2026 08:39:04 +0000
Files and hashes:         1: 6WIIUNtVhbEpkxUEf1odX72KpjA.crl (hash: 0lUTGHBgPeO6HRmwC76qBtusEq5AvNchj+fDtIkd/3s=)
                          2: DAB6E11C251211F18B72873CBF833773.roa (hash: nxb1U9KV8D4GDxFWHrc+spPZIPBjyjFY/XbY1esDxwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl
                          rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915974C, serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
        Validity
            Not Before: Apr 15 08:39:04 2026 GMT
            Not After : Apr 22 08:39:04 2026 GMT
        Subject: CN=69df4ea8-3062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:40:13:91:cc:bd:0c:0f:d3:dd:67:70:52:
                    62:30:ae:98:15:7d:86:5d:93:4f:c4:9b:c4:6e:23:
                    64:21:26:bf:ff:44:5a:a5:39:f9:ad:54:3d:86:f4:
                    64:ce:6b:ec:6e:f0:74:27:37:ad:54:a8:f9:f7:0e:
                    08:5e:81:18:67:73:30:4a:3e:fe:d7:95:53:37:64:
                    c4:bd:3c:be:af:51:33:5f:34:ec:c8:5f:8c:66:7c:
                    86:c2:c4:7a:a1:84:e1:33:01:ff:ee:e7:7e:91:50:
                    40:65:75:73:01:f8:f4:2b:0c:d8:15:56:2d:fe:5d:
                    51:b6:9f:0a:bd:51:7a:ee:d8:5c:44:2a:f5:03:e5:
                    e8:22:9c:fd:02:b4:ea:29:06:0a:61:3a:38:51:cd:
                    5d:24:2a:10:5c:99:f4:f4:12:e4:0e:3b:01:f8:7c:
                    18:2e:9d:d7:7c:52:5d:bd:8a:83:19:99:58:51:39:
                    4b:69:1f:fd:c7:2c:c8:5d:cd:61:58:0a:d9:96:10:
                    23:b4:b4:9b:a0:8c:1c:c5:26:c4:33:3f:f0:31:ad:
                    d4:f5:6f:12:87:ba:9a:88:2a:2f:b9:05:cb:94:a7:
                    07:8f:51:97:81:cb:6b:38:1f:36:a2:dd:1a:a9:d2:
                    17:3f:8a:e5:2d:10:58:1f:2e:06:7b:3f:41:ca:22:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:96:30:EA:57:86:8D:98:C4:D4:15:C9:F3:50:3D:F0:AF:BD:B2:DA
            X509v3 Authority Key Identifier:
                keyid:E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:ad:b1:d9:cd:af:42:7d:36:e3:f4:e5:54:5e:42:e2:d8:
         b5:64:cd:10:71:04:60:cf:50:f5:2a:d5:b8:98:10:94:7a:70:
         b2:05:14:3a:c9:78:a6:32:ca:c2:08:4e:6a:ac:ca:c0:d8:ea:
         e3:bb:ea:5c:3f:d2:6f:ec:43:94:fb:5e:d9:2b:cf:9e:21:a5:
         72:ff:82:1a:51:57:a4:08:f3:2c:c9:67:20:5a:75:be:29:01:
         fb:b8:62:71:02:e7:69:b9:81:33:94:95:36:16:6d:39:d0:a6:
         1a:c0:63:95:a7:ea:b8:c2:1e:7f:60:58:5a:bd:ca:ba:20:67:
         f8:dd:de:75:19:a4:e4:f7:9f:0a:7e:94:8b:eb:bd:29:db:5d:
         e4:0f:8b:09:31:76:45:b4:40:f0:bb:ef:73:1a:0a:f1:90:45:
         45:8e:c9:a9:ef:54:cd:22:08:66:53:a8:10:7d:a5:2b:ae:f3:
         3d:3a:4b:ed:2d:e8:78:60:0c:ae:54:97:cf:8a:80:24:39:93:
         2a:31:98:c4:d3:39:33:4e:1a:90:0f:4a:2e:e3:53:21:fb:24:
         c1:78:11:32:fb:90:79:1e:fa:07:be:86:93:ff:5e:ef:4c:5a:
         c0:0f:43:8b:55:1d:90:46:9c:80:a4:44:49:b6:21:37:b4:61:
         fe:d7:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:57 2026 by rpki-client