Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File:                     6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier:          4ZfBpZXLUvKogB890Kq+NoEZy4LGj2XZFasfgr1TG2A=
Subject key identifier:   EC:7B:E1:3F:77:81:A0:B2:AF:C7:64:C8:37:64:F6:0C:39:B8:5F:02
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer:       /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial:       353A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number:          3533
Signing time:             Thu 16 Apr 2026 14:49:41 +0000
Manifest this update:     Thu 16 Apr 2026 14:49:40 +0000
Manifest next update:     Thu 23 Apr 2026 14:49:40 +0000
Files and hashes:         1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: Lz6YI/XSMHEzxHrsT4M34g8OLast2O5NP4q2Xxcy0kc=)
                          2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13626 (0x353a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
        Validity
            Not Before: Apr 16 14:49:40 2026 GMT
            Not After : Apr 23 14:49:40 2026 GMT
        Subject: CN=69e0f705-bcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:79:49:95:27:15:0f:df:02:33:16:be:76:c8:
                    eb:34:75:04:a9:66:d1:23:d3:49:9f:c2:44:a4:28:
                    ba:4c:ef:d6:0b:d1:4e:a1:4d:64:a7:1e:58:e2:c6:
                    b6:85:c5:84:25:97:a5:34:16:f9:b2:d0:87:47:f1:
                    9a:52:cb:80:98:ce:aa:70:ed:f9:8f:98:11:b2:5d:
                    f1:73:a4:18:3a:e5:cf:5b:00:d9:80:fe:d0:7e:10:
                    5e:c0:02:a1:62:fe:1a:ff:1e:35:03:b9:87:bd:03:
                    4d:8c:f0:0b:44:45:b3:c7:93:d9:04:2c:66:eb:ae:
                    8c:a7:72:55:64:4b:7c:fd:16:be:2a:e8:0b:27:c7:
                    9c:da:c4:b9:c5:90:54:40:7e:07:b0:9f:8a:23:4b:
                    c0:e7:b8:76:bd:d3:bd:34:37:4d:2f:c6:c1:cb:7d:
                    e1:d6:a2:5e:78:e3:a4:8b:70:8d:fc:f0:bb:23:3b:
                    e1:b3:59:44:b3:62:cc:20:fe:53:2c:5a:5c:c9:63:
                    de:0e:de:4c:ad:fc:ce:f8:5f:7a:78:3b:4a:d7:20:
                    cc:e4:ad:ae:b6:63:ee:b9:a3:c0:d0:3f:d5:bb:8c:
                    a0:2e:05:95:58:68:b7:ea:71:32:41:4a:85:1a:9a:
                    a3:1c:2a:da:80:e6:5f:34:57:0a:28:64:08:5e:02:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:E1:3F:77:81:A0:B2:AF:C7:64:C8:37:64:F6:0C:39:B8:5F:02
            X509v3 Authority Key Identifier:
                keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:e6:52:ed:78:d9:c7:08:6e:88:bb:fe:2f:5f:de:86:2f:
         5a:f6:49:f5:12:27:fa:32:0b:a3:84:e9:1d:63:74:20:20:53:
         9c:d1:16:6d:e1:12:f9:09:7f:7e:b8:4a:e2:2d:45:1b:01:c3:
         54:15:ea:92:ff:51:33:8b:a2:9c:a9:85:27:e8:b4:f9:82:ba:
         71:8f:36:bf:e8:91:51:50:b1:03:80:de:9f:1b:81:e6:41:7e:
         79:a0:60:53:7f:5b:73:53:a1:69:15:b9:9b:28:a0:0e:69:fe:
         5f:c4:26:88:7b:08:e7:eb:c7:74:75:1c:27:30:4a:4c:1b:84:
         ed:f7:94:75:fd:47:6b:41:eb:d1:3a:b6:c8:5f:54:b8:a1:02:
         3b:fc:76:93:15:d6:52:3b:4c:12:5c:6d:0f:1a:77:d5:50:ec:
         82:5b:a5:58:0b:bb:f5:13:f0:f3:ae:50:52:e6:74:2d:38:2a:
         48:c4:e5:58:3a:f2:2d:4c:8a:e7:15:96:f9:33:fb:c2:5f:d0:
         0e:cd:a0:a1:f0:52:aa:8b:38:ab:45:bc:18:4b:e0:aa:1d:35:
         d5:e9:3e:52:f2:ae:fe:3f:ce:bd:9c:62:4b:f1:2f:c8:38:23:
         02:19:34:20:44:e9:3f:14:33:d7:45:df:20:c1:37:b8:9a:9a:
         c1:07:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:39 2026 by rpki-client