Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File:                     6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier:          3uoyjKWUoHZnfo7e6LcnN0VRuuLXw9K7xZrSeoKT8Ew=
Subject key identifier:   0C:A9:9E:C1:1D:3D:57:63:D6:74:D2:02:7C:DC:50:3B:4F:1A:70:20
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number:          0144
Signing time:             Fri 17 Apr 2026 05:06:23 +0000
Manifest this update:     Fri 17 Apr 2026 05:06:22 +0000
Manifest next update:     Fri 24 Apr 2026 05:06:22 +0000
Files and hashes:         1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: AhZLKfcxud0DuQEx9JtCgdEHdY3stZQZJK990NG2xpI=)
                          2: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU=)
                          3: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs=)
                          4: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: 0oj6DB6AcAI80O6cWTUs9uNP0wv1u3q24kvlcmDmd+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Apr 17 05:06:22 2026 GMT
            Not After : Apr 24 05:06:22 2026 GMT
        Subject: CN=69e1bfcf-94cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:52:46:00:9f:c6:3b:44:cf:8c:2c:6f:6a:
                    c3:1e:90:3f:26:f4:74:c1:5c:6d:22:c1:29:82:2a:
                    c3:b1:36:5f:ef:3b:d2:05:82:20:35:0c:e7:a4:b7:
                    f3:1a:a8:97:44:97:f0:8a:90:ed:4f:13:1b:34:f4:
                    2a:d9:a0:50:b3:e0:7a:0a:6e:30:c7:a0:01:0c:ae:
                    a2:53:e6:53:b9:e5:7b:d9:a0:66:8a:ee:16:3b:66:
                    71:19:8a:61:6d:66:ef:23:c0:cc:e1:8b:1c:53:e2:
                    55:a9:d1:f8:f5:29:0c:81:9d:36:87:7d:ad:c7:6a:
                    b4:8c:26:8f:8e:7a:b9:a5:1b:ff:fe:5e:f3:ee:69:
                    56:4a:b2:00:8e:6c:43:99:b6:b6:ec:d6:7a:40:46:
                    09:f0:e6:cf:c7:04:f3:f5:6b:81:6c:12:e6:60:d3:
                    32:34:f3:83:d9:68:bd:2f:35:6e:62:7a:28:6d:66:
                    6c:bb:d8:36:de:37:0c:c1:07:51:96:c9:41:3d:3d:
                    3c:76:0a:d6:a1:d1:77:bf:bf:e6:7b:37:55:87:15:
                    fc:a3:2a:f0:34:34:58:ee:18:86:4e:f8:e3:c2:67:
                    75:53:42:39:0f:3a:d6:2f:7e:b8:03:4e:6f:a7:01:
                    27:67:4d:9b:d1:e3:03:57:b9:e4:b2:f3:20:84:b8:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:9E:C1:1D:3D:57:63:D6:74:D2:02:7C:DC:50:3B:4F:1A:70:20
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:33:f4:c3:50:3d:b2:c5:01:76:ef:09:2d:cd:17:98:0c:
         87:61:81:a9:d6:45:40:07:bb:e6:9a:06:11:77:e6:9b:0b:93:
         7d:72:ba:ed:9b:f7:35:52:ba:00:82:e5:ce:37:52:e1:d2:30:
         b2:d4:ca:04:10:f2:98:b7:25:7e:3d:d6:8d:ba:f6:bd:13:3f:
         dd:61:ce:70:17:57:2a:b9:8e:46:d5:b1:1d:4b:89:5b:47:3a:
         e6:88:3e:f9:95:e4:e2:8b:49:e3:a3:f5:9e:26:20:2e:c0:2b:
         e2:91:88:20:9a:94:a2:4f:13:78:64:0a:fb:3b:e1:e0:a9:9d:
         8e:99:99:7f:c5:6f:bb:cd:fa:e5:cd:6b:17:b7:4c:49:ab:57:
         3a:b8:ea:d5:8e:92:87:59:4c:80:77:fd:3c:4f:93:13:4b:58:
         be:6b:cb:86:2a:12:e1:08:1b:e0:01:12:3b:b5:64:31:c7:dc:
         58:90:c4:1f:d9:dc:4d:a9:47:78:c7:86:8f:a6:1e:54:d5:ac:
         48:8f:a2:5f:87:c6:f7:18:ea:0a:52:84:21:9d:bc:c9:cd:21:
         c5:39:b2:6d:7a:e6:65:e6:e1:20:50:95:e0:80:0c:7e:b0:b8:
         01:10:5e:5f:c0:29:cf:8a:15:b3:e5:d6:34:79:ae:47:e1:e3:
         de:c5:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:55 2026 by rpki-client