Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          XnrdDt+E6+ZMuTPYGGbXQt2jbvnzDnK+kz8dIiXg+3U=
Subject key identifier:   E1:10:FC:DC:0B:C1:6E:79:98:60:1B:7C:57:4F:67:96:1B:FE:12:E4
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0DAC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0D9F
Signing time:             Thu 16 Apr 2026 17:52:03 +0000
Manifest this update:     Thu 16 Apr 2026 17:52:02 +0000
Manifest next update:     Thu 23 Apr 2026 17:52:02 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: hyAiKYUoG6ubobcI+42UvZdlFtg82G8zTpxWvt5UwKY=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: aQ8cA00GJjluwPOIwcjxSsjlMHR7a0I4vLY3lPAB7wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3500 (0xdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Apr 16 17:52:02 2026 GMT
            Not After : Apr 23 17:52:02 2026 GMT
        Subject: CN=69e121c3-5ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:a0:5e:49:f1:13:02:0a:67:b9:3c:11:e9:
                    91:e2:56:e5:9f:c1:67:ec:ec:80:19:79:b0:4c:1b:
                    ad:36:4b:a3:c5:6b:9b:91:01:0f:b4:dd:8d:2c:6c:
                    4a:04:09:1b:81:e1:8e:f1:89:76:c0:fe:64:46:68:
                    ca:78:09:3e:dc:a3:22:e2:47:fd:52:2f:b2:64:5a:
                    15:c9:a2:91:7c:10:96:e8:c3:fe:b0:40:90:b2:69:
                    96:48:ca:20:62:f9:f7:a3:70:1a:9d:56:72:35:34:
                    64:5c:c4:ad:ed:8e:08:43:3f:b6:04:66:ae:a3:ff:
                    a8:af:fc:f3:ae:fe:ea:29:96:97:20:a1:04:4f:8e:
                    9f:53:2b:64:d3:69:95:38:1b:2b:e3:5f:83:61:64:
                    c7:3f:24:e6:3e:6f:d4:54:c3:97:17:0c:0d:23:2d:
                    a1:c1:eb:8a:65:cc:3e:cc:f8:a2:63:2f:9e:d6:cd:
                    89:26:4c:46:03:0b:3e:b4:6f:c1:42:00:99:a0:ec:
                    1f:96:f1:c5:05:41:8f:3a:5a:a9:1a:c0:52:e3:94:
                    8d:22:ae:bc:2f:eb:7d:92:72:86:0a:3b:92:36:96:
                    77:52:2e:51:42:64:61:c5:5a:09:80:3f:38:26:db:
                    46:a2:84:96:77:ce:42:f0:48:dc:05:b3:54:4e:1d:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:10:FC:DC:0B:C1:6E:79:98:60:1B:7C:57:4F:67:96:1B:FE:12:E4
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cc:37:fa:ca:2e:a8:3a:a7:45:19:60:f1:ea:3e:f6:04:2c:
         d5:5f:cd:06:ac:d2:cf:ff:05:fe:fd:fb:39:72:2a:91:d7:dd:
         2f:e0:c2:4e:2f:6b:3d:16:7b:ce:e2:34:63:9c:3d:2d:d5:ae:
         7b:18:a7:a0:a8:1d:c2:ea:14:e2:7f:23:14:81:8f:07:d8:5a:
         b1:91:9c:08:f5:86:d8:c0:39:97:29:cf:4c:10:91:51:c9:da:
         68:8c:c9:d7:a6:76:ce:e4:ca:ea:a7:9b:7a:a4:e4:5e:0b:57:
         20:16:a1:dc:57:16:5e:b1:31:46:46:3f:7c:a6:9a:c7:54:5b:
         ce:39:0d:3b:0c:50:bc:b4:13:2b:e6:ed:51:fb:30:62:e2:02:
         2b:7e:c3:ae:13:31:ff:7b:83:4c:0e:3d:85:25:0d:ec:38:56:
         eb:2b:c6:16:a6:1b:8d:df:e1:c8:e0:08:98:a7:c7:3b:c9:24:
         54:d4:37:4f:ea:13:88:cb:8d:43:5d:4f:7d:cd:df:a1:90:99:
         57:5c:3f:8d:47:2d:fc:5c:01:99:97:9a:a7:cb:0d:dc:7e:db:
         c4:bd:c6:94:4f:27:e7:d7:22:0b:88:bd:c7:61:19:bb:5d:c6:
         19:5e:e1:bd:50:a3:a7:84:c9:b1:14:03:1f:7c:aa:5a:0f:31:
         f8:f3:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:25:56 2026 by rpki-client