Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
File:                     6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json)
Hash identifier:          W9sHRwDjvz9808eXhI6/tt+wTUdhbWV8OL5FNje6xVU=
Subject key identifier:   03:DF:3E:80:8C:0D:1B:5A:B5:06:84:F0:58:81:CE:EE:26:F3:29:4B
Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Certificate issuer:       /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Certificate serial:       121E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
Manifest number:          120C
Signing time:             Tue 28 Jul 2026 17:14:36 +0000
Manifest this update:     Tue 28 Jul 2026 17:14:35 +0000
Manifest next update:     Tue 04 Aug 2026 17:14:35 +0000
Files and hashes:         1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: ozRit/AtiKcgfimfod0ErJ3AKUaAJxhQJl5O+t41bPA=)
                          2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: Q+MByc8T2XeogXXlhjKWwZOofAxDdME7Hv2flN/h3ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl
                          rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4638 (0x121e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
        Validity
            Not Before: Jul 28 17:14:35 2026 GMT
            Not After : Aug  4 17:14:35 2026 GMT
        Subject: CN=6a68e37c-2bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:ae:91:c0:0a:7e:e3:7f:f1:26:23:52:1d:
                    2a:08:d0:5b:ff:63:db:30:c6:33:16:0b:94:ee:00:
                    3b:e5:df:d5:11:48:92:de:9f:09:be:b5:f9:28:9a:
                    bb:08:05:94:67:05:c2:12:d8:f8:86:c2:f1:03:64:
                    57:e3:83:8a:96:e9:7b:dd:7d:0f:56:ed:eb:77:ec:
                    6b:ac:d6:3a:f7:3b:e6:d3:32:c3:b5:ab:c8:a1:32:
                    51:98:ef:f7:95:7b:d4:9d:84:66:d3:62:32:6c:95:
                    5d:fa:96:02:46:97:17:ab:bf:85:d0:61:83:12:1c:
                    04:3c:77:57:4c:1b:a8:7e:8e:37:53:2b:fe:e4:fe:
                    19:7a:11:ea:05:da:42:31:cf:25:f5:0b:69:82:7a:
                    56:2c:f2:8d:62:29:86:33:2a:71:0b:0f:3a:cd:31:
                    83:6c:5e:36:2e:82:7d:62:e2:d7:64:8d:80:a3:be:
                    4a:a9:15:16:e7:42:5e:9a:18:92:49:5a:8a:80:fb:
                    04:85:d1:f0:86:3b:ac:aa:f4:91:39:3a:7c:d1:4f:
                    18:52:c2:98:c3:9e:f4:6c:02:93:82:8f:97:f1:67:
                    b9:73:96:25:66:6f:e9:df:df:2b:74:8c:36:59:70:
                    09:88:83:0d:42:71:da:6f:b9:5a:f0:8b:48:ee:be:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DF:3E:80:8C:0D:1B:5A:B5:06:84:F0:58:81:CE:EE:26:F3:29:4B
            X509v3 Authority Key Identifier:
                keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:29:c5:42:eb:8a:45:5a:fb:ac:ef:09:b5:4e:01:e7:4d:ee:
         4f:00:51:c7:a4:62:7b:ba:47:f2:44:85:04:05:bd:dc:51:5d:
         3e:ae:d6:0a:db:7e:37:45:76:9f:af:2d:37:52:ae:f6:1a:03:
         fb:49:55:a7:4f:2d:b1:18:9a:95:e7:9e:d9:e5:3f:70:bf:a9:
         0e:17:2a:91:ee:8b:36:06:dd:60:76:8f:4f:f4:e6:75:fb:41:
         d0:e3:7d:83:65:2d:f0:9c:92:a4:71:cc:c5:7d:d7:2c:f1:1c:
         ba:75:0a:6c:1e:c3:b5:a4:7e:22:44:de:d5:97:99:6e:19:66:
         a1:87:16:c6:a9:54:db:92:92:9f:37:d0:77:b0:cb:67:e4:54:
         50:c1:d5:35:2d:b6:d7:07:a6:e6:e6:20:72:cc:45:b5:2b:60:
         4b:7c:e6:1a:29:17:80:e8:39:6d:cc:28:f0:5f:09:13:f5:1e:
         b0:bf:72:f3:87:42:11:fb:76:af:5d:99:3e:bd:bf:c2:58:d4:
         69:2f:e2:2b:8d:4c:91:a9:bc:81:8b:ad:b8:92:0a:90:f9:8a:
         53:e2:ab:5b:f0:13:88:c2:89:73:fc:a2:47:ab:57:47:99:f5:
         5d:63:66:15:d1:2c:b5:c9:3b:67:07:c7:17:c6:40:f3:19:d9:
         e6:54:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:22 2026 by rpki-client