Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          rGj+umud/GnI/Tikc09/HMFBZOXtGGVCKHcoQdUKdR8=
Subject key identifier:   7B:45:05:DD:1D:91:66:F4:41:B2:88:82:B5:39:EB:2F:E8:7E:C9:94
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0DE3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0DD5
Signing time:             Tue 28 Jul 2026 18:01:55 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:54 +0000
Manifest next update:     Tue 04 Aug 2026 18:01:54 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: Ou7XQ16kmcv5+L4tbN7FSf1YhO/xT2M0Y1PtNxUTErg=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: QXg7M2m5LXshgGCvqZUQtcfpkkmWRWbqZY6mP6sNKfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3555 (0xde3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Jul 28 18:01:54 2026 GMT
            Not After : Aug  4 18:01:54 2026 GMT
        Subject: CN=6a68ee93-7bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:07:a8:2b:8a:a9:91:e1:57:a0:ee:e1:70:
                    97:a3:d1:1f:2e:ef:d3:c3:49:13:3f:b9:a2:c2:94:
                    e0:b4:f9:f2:00:b1:25:21:67:f2:29:e2:aa:2b:bb:
                    33:53:98:7b:93:99:17:d2:2e:78:74:0c:41:3c:bf:
                    02:d5:e0:a6:d1:b1:36:35:fc:c1:da:db:ac:e1:86:
                    87:cd:04:b0:58:d9:39:63:d2:dc:d3:d8:5c:6b:b7:
                    43:38:99:3e:20:c1:13:52:21:13:71:5e:8f:7e:77:
                    21:4f:69:cc:1b:ec:59:ad:cf:95:45:4d:99:1b:86:
                    67:f7:41:fa:cd:12:e9:28:48:01:f9:d6:e3:6e:8e:
                    11:f0:0d:cb:1a:0c:ab:ae:df:a3:d0:87:1a:03:e1:
                    4b:70:a7:18:3a:92:3d:47:b6:aa:9a:6a:5b:7d:ce:
                    d9:64:71:9e:d4:ba:c5:44:71:d1:80:22:9b:b5:04:
                    47:42:ba:0c:eb:e5:fe:0d:ce:d4:99:fc:cb:2b:3b:
                    30:a5:0f:09:1e:54:96:0f:35:91:42:df:e8:7c:51:
                    b3:4c:5f:f1:ac:df:61:b6:ff:1d:d3:14:6e:61:e1:
                    a1:5d:67:ca:2e:de:b5:3c:0d:56:46:6c:b2:e6:0c:
                    dc:ab:65:d1:99:07:43:35:28:1c:2f:74:2a:fd:45:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:45:05:DD:1D:91:66:F4:41:B2:88:82:B5:39:EB:2F:E8:7E:C9:94
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:70:30:8b:fd:47:83:f0:36:bf:d3:80:1e:af:b6:ec:5d:
         85:f3:e9:36:fe:56:a5:7d:5a:57:2e:6d:0c:a6:d0:29:e8:15:
         28:35:f2:d8:9c:2b:ae:8b:d5:04:ff:7d:00:4f:22:91:6e:30:
         51:e5:f8:82:60:19:e8:48:2d:37:fe:d4:c0:f8:90:09:59:ec:
         7e:9c:b3:f8:b4:d7:57:2c:93:8e:66:04:00:c1:54:da:21:2c:
         65:c2:dc:a8:25:ae:73:6f:03:d5:d3:ba:67:03:ab:0c:4e:b0:
         a6:65:16:47:97:85:c1:ca:1c:1f:fb:ff:49:3d:84:e9:19:5e:
         d0:80:09:27:0b:77:97:8b:f7:54:95:ac:16:e6:57:02:18:7a:
         88:7d:d5:5b:81:e4:ec:f7:75:4d:c5:fb:ab:e9:ac:c5:07:a4:
         3e:b8:6b:aa:69:71:c6:83:33:e7:6a:33:b7:1e:c7:b0:27:56:
         cd:b9:d2:99:78:ee:fe:e3:ac:e4:01:57:79:6e:82:b3:a8:1c:
         60:50:19:15:62:5d:44:02:c7:bb:35:e1:02:93:2f:59:5e:cb:
         53:49:41:2c:7b:50:f5:62:cd:72:64:65:ac:62:35:14:8c:b6:
         44:bf:8c:51:4c:86:32:5f:91:87:28:90:50:d0:32:c7:84:a4:
         8e:bf:3f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:22 2026 by rpki-client