Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File:                     6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier:          vgXbzqyS9J1ZlBKBAmJb4zTB1BS7blzt6u4X/ouqhs8=
Subject key identifier:   40:6B:8F:72:43:0D:29:72:BE:7E:02:17:8F:6B:D3:46:75:66:0C:52
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer:       /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial:       3557
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number:          3550
Signing time:             Fri 12 Jun 2026 14:49:44 +0000
Manifest this update:     Fri 12 Jun 2026 14:49:43 +0000
Manifest next update:     Fri 19 Jun 2026 14:49:43 +0000
Files and hashes:         1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: ziOrSZbourLGnYkLkPsEwjnNA2rcSLmudhzqJ3VLlUc=)
                          2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13655 (0x3557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
        Validity
            Not Before: Jun 12 14:49:43 2026 GMT
            Not After : Jun 19 14:49:43 2026 GMT
        Subject: CN=6a2c1c88-f5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:ef:6b:d5:5e:22:ef:02:ab:20:90:80:25:
                    ab:8d:0f:34:79:9d:5d:09:b2:9b:49:20:90:7c:d7:
                    04:e8:9a:d2:8c:6c:c6:ac:57:e3:30:63:2d:7b:84:
                    68:26:fa:9d:91:07:23:ff:ed:3a:19:f8:39:ac:fe:
                    c6:56:d1:31:71:96:c9:a5:9b:57:1a:eb:a1:fa:45:
                    fe:42:af:e3:b0:fd:7a:83:40:6a:6a:9b:72:2a:57:
                    55:e5:a6:c3:30:89:bd:d7:00:a9:f3:77:4c:07:03:
                    aa:ec:89:70:fe:df:d0:41:1f:81:7b:de:25:fc:bb:
                    b8:ed:10:c2:84:ac:0e:ac:eb:65:70:e9:73:63:57:
                    4c:83:d2:1a:c0:e9:c8:6b:0e:bc:75:40:2d:99:93:
                    dc:b7:da:03:89:fb:c6:ca:a5:f6:e0:29:43:29:ba:
                    af:66:45:0a:61:de:37:6e:5b:aa:11:97:38:4f:3f:
                    cc:32:fd:59:c0:f8:73:56:1c:13:65:ad:9f:cf:c0:
                    2d:c5:22:cf:07:c7:30:ef:c8:48:cd:11:b8:cf:2c:
                    06:60:ef:01:14:39:74:fa:3d:eb:6c:b8:bf:42:2d:
                    15:16:63:1f:db:91:7f:c0:6d:5c:b4:17:8d:81:58:
                    9b:8d:d8:8a:91:9e:45:f0:93:42:0d:23:2a:fa:34:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6B:8F:72:43:0D:29:72:BE:7E:02:17:8F:6B:D3:46:75:66:0C:52
            X509v3 Authority Key Identifier:
                keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:10:45:9d:f7:f0:f3:20:37:71:71:f7:88:32:3d:2d:31:fd:
         09:40:46:3c:c3:28:f3:f5:99:9a:57:53:69:df:57:ec:68:2a:
         bd:fd:60:49:60:d0:3d:f3:39:0f:b1:c6:1b:86:90:b6:ab:e3:
         5d:bb:1b:6d:a8:f4:59:b1:51:04:5f:95:30:3f:4c:95:67:84:
         47:9e:88:a1:f9:a2:45:2c:eb:f2:e2:14:f9:0d:d9:0c:75:4f:
         38:be:55:ca:99:4b:d0:46:c0:e8:d1:3a:04:96:a5:40:63:5d:
         b0:38:b4:af:0e:29:70:36:2b:2c:a6:7b:1c:95:03:61:39:a5:
         e9:7c:be:bd:9d:fb:3d:f9:78:6c:6c:31:1d:b0:7c:2f:fa:47:
         b8:8f:a7:93:cb:4c:11:7a:16:f8:06:df:9c:58:ea:99:38:b6:
         e9:25:33:06:cc:19:cb:b6:96:fb:3d:8d:59:22:79:cc:e1:4c:
         8f:eb:2d:0e:86:e9:e1:28:e4:01:4f:f5:dd:0e:bd:18:1e:f0:
         92:ce:58:00:24:e6:2c:57:26:bb:2a:8e:38:cf:ba:a7:28:3d:
         6f:1a:c4:9a:92:0c:bd:40:09:32:63:5c:36:d0:50:40:50:a6:
         e3:1a:d1:e1:60:bc:45:a8:8a:76:18:3a:99:21:74:cc:5e:f5:
         c7:a1:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:47 2026 by rpki-client