Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
File:                     6SWAZhXd5dmqRq915ntcH7cUamo.mft (raw, json)
Hash identifier:          U4nvzUSQ2S+gSPqusPNcIwqqXVRSrETZm83U37Ayhrs=
Subject key identifier:   F0:43:78:FE:2E:1F:5B:6A:A4:48:85:C9:A3:1F:7D:A7:A9:D2:DE:8F
Authority key identifier: E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A
Certificate issuer:       /CN=A918B3C9/serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
Manifest number:          022B
Signing time:             Fri 17 Apr 2026 02:29:23 +0000
Manifest this update:     Fri 17 Apr 2026 02:29:22 +0000
Manifest next update:     Fri 24 Apr 2026 02:29:22 +0000
Files and hashes:         1: 6SWAZhXd5dmqRq915ntcH7cUamo.crl (hash: RSV8+bXU5SbcbeIoMQon6xp3YPlFLL2+wIvhk2jRmAc=)
                          2: 55DA06F8038D11EE81D68954C4F9AE02.roa (hash: 8ksVrmrZSUCpK+cuwvNDpwzcBP+cM+WrF7ZZ0vjodnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl
                          rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B3C9, serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
        Validity
            Not Before: Apr 17 02:29:22 2026 GMT
            Not After : Apr 24 02:29:22 2026 GMT
        Subject: CN=69e19b03-cf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:f4:57:61:22:18:aa:59:70:a3:49:ce:c2:
                    ac:be:4e:59:60:cf:9f:08:ff:b7:8c:ab:3f:ec:a3:
                    c6:64:2e:e6:01:37:e9:3e:f0:22:6d:2d:06:e4:7b:
                    db:d2:f3:ad:e0:da:a1:71:9e:4a:2d:a9:c4:25:0c:
                    90:73:cb:2e:20:85:58:71:14:74:60:1f:a7:75:a8:
                    78:14:15:7a:74:f0:eb:ff:0a:b7:32:aa:89:65:83:
                    be:f3:2d:c2:b3:63:3a:f4:8e:55:63:25:e1:7b:05:
                    a1:a0:ca:52:79:b7:34:73:40:cc:57:0c:e4:fb:56:
                    50:e1:44:0c:54:df:e7:2f:1f:48:db:c8:79:db:60:
                    ab:32:98:20:fa:14:0c:a9:06:f5:69:a6:e9:a7:db:
                    ca:6b:95:a4:70:68:29:ac:0b:8e:92:09:8a:d8:4e:
                    c9:88:5d:99:62:a6:ba:15:19:8b:68:8a:05:eb:b1:
                    e7:a5:ef:c4:2d:e2:51:47:5f:c9:93:39:58:60:e1:
                    e6:34:97:58:f6:7a:8e:12:a6:4d:a8:bc:7b:34:7b:
                    4f:12:ba:7d:a1:24:6e:c2:f3:09:b7:7a:48:17:70:
                    c7:5f:11:81:cc:db:31:26:fb:aa:cf:96:5b:d4:c5:
                    d7:54:9c:34:e4:38:58:7a:07:7c:5f:97:89:be:bd:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:43:78:FE:2E:1F:5B:6A:A4:48:85:C9:A3:1F:7D:A7:A9:D2:DE:8F
            X509v3 Authority Key Identifier:
                keyid:E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cf:18:14:b2:77:e7:4f:1f:22:6b:dd:43:4c:8d:7e:6e:11:
         e9:53:10:41:ce:71:11:55:c6:f7:d9:47:bd:14:14:d2:2f:a8:
         8c:87:74:ce:87:11:d4:ad:6c:e7:4d:1c:a8:7d:1e:2b:70:31:
         7f:11:0c:bc:7e:b2:89:db:92:e6:c7:bd:84:c8:b4:1c:ac:da:
         c9:07:37:e9:29:79:36:db:bc:54:23:9a:5e:7e:5b:34:2b:2e:
         01:94:14:86:e3:c7:d6:00:a2:0e:3b:4e:d0:19:e8:11:4e:e7:
         8a:f2:40:e1:6b:7f:4a:23:88:96:d2:c7:2a:df:6b:93:a9:fa:
         1d:7f:5e:52:87:d8:61:bb:d0:a6:38:71:1a:1a:c2:4e:a1:ad:
         03:65:f4:66:9a:16:d3:cf:b2:d3:eb:f4:b7:0f:4c:02:1c:2e:
         a3:f7:11:39:20:c2:ab:85:71:91:88:b7:73:81:d3:90:45:b2:
         68:2d:18:7a:e3:4c:68:5d:72:61:f3:0a:77:6e:82:8c:24:6c:
         e7:aa:bf:2b:09:99:4f:f7:96:c8:a4:b0:b8:41:93:20:b5:4b:
         8c:a9:48:85:2f:e6:85:c1:28:5e:29:59:f4:b5:bc:7f:05:eb:
         d2:e0:9f:ec:f7:3a:5c:3c:03:3f:9c:9f:73:c7:3d:4e:6c:10:
         ed:92:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:50 2026 by rpki-client