Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
File:                     6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json)
Hash identifier:          OgIUOY8OtXgXM1DY/4azTeAy0lcklJiDKqCeVn1yZQM=
Subject key identifier:   DC:5C:9E:5A:02:95:25:8B:FC:F3:09:08:F6:77:0E:77:AF:AE:95:A7
Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
Certificate issuer:       /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Certificate serial:       07FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
Manifest number:          07EC
Signing time:             Mon 02 Mar 2026 02:07:05 +0000
Manifest this update:     Mon 02 Mar 2026 02:07:03 +0000
Manifest next update:     Mon 09 Mar 2026 02:07:03 +0000
Files and hashes:         1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: 8RTmkVK8nW29hkiunZUPRkdcRzQUALjhqAnya45yvdY=)
                          2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: Vx9CSg1xbwu8Z8j5boN4uWmjJECKQuxgQNUIUyPWiKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
                          rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
        Validity
            Not Before: Mar  2 02:07:03 2026 GMT
            Not After : Mar  9 02:07:03 2026 GMT
        Subject: CN=69a4f0c8-1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:20:ba:fe:61:5f:d2:9d:3e:2a:ea:f7:55:
                    fd:12:18:74:93:e3:cc:9e:bf:f4:3b:99:23:a4:a3:
                    45:e9:34:2a:3c:a7:74:32:c3:24:75:b9:0e:b8:49:
                    4f:1f:56:20:e6:c5:eb:7a:40:a8:e7:da:e5:ca:4f:
                    46:f9:db:04:84:bf:12:fa:ff:3f:ec:7d:60:46:03:
                    98:d7:e1:ca:4f:12:a1:d1:b8:ce:a6:1b:44:21:ba:
                    76:1f:d7:c3:09:b6:ed:c5:41:7d:08:99:7d:fc:0b:
                    17:27:52:8f:27:27:a2:8b:8f:1e:7e:31:25:33:fe:
                    e3:a9:80:5f:b8:6d:17:52:97:f8:77:36:b1:97:ba:
                    6f:a5:86:a1:a8:84:29:69:00:fb:fe:f0:4e:0b:2c:
                    cd:36:d1:c5:bd:d7:82:cd:b9:4a:ce:9f:01:3d:bf:
                    24:5e:6a:44:ef:0f:83:53:e9:97:3b:11:70:13:0b:
                    c6:e9:6e:6a:48:1b:19:72:59:b0:16:4b:96:23:2a:
                    95:4e:59:04:76:f5:ad:d8:83:8d:f2:f2:7a:ab:52:
                    54:2d:32:74:e1:c2:80:87:5a:69:ba:11:ed:01:5a:
                    8d:2a:f4:da:0f:3f:4b:08:72:90:b1:4a:cf:d6:06:
                    c1:11:cd:ce:44:e5:16:5b:9a:b9:84:0d:92:d9:81:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:9E:5A:02:95:25:8B:FC:F3:09:08:F6:77:0E:77:AF:AE:95:A7
            X509v3 Authority Key Identifier:
                keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:53:c5:57:ad:19:e3:2a:c4:1f:3f:b9:2c:61:0d:0d:80:c9:
         f3:02:29:ba:8f:b7:1b:fc:46:bc:27:81:f2:57:fe:f4:2e:bb:
         c4:a5:c7:dd:a1:4c:ba:41:5b:e7:2c:d1:10:61:fc:53:51:47:
         df:08:f0:73:dd:6e:65:03:91:d4:e1:03:67:c0:15:54:4b:7b:
         76:38:ea:04:d6:2d:4d:8d:ea:18:0a:cf:c0:af:82:9f:7d:0b:
         89:c3:82:8c:dd:32:16:5e:2f:bf:30:dc:62:7b:b1:9d:0a:b4:
         80:f6:f8:6a:71:74:5a:f4:52:65:da:03:05:06:a6:b1:de:67:
         93:8c:a9:d7:1e:4f:0f:19:41:4e:c5:77:0c:a4:fe:a8:41:d1:
         74:05:e7:6d:fa:05:f2:d7:ff:5b:1d:30:1e:7a:da:31:3a:ec:
         46:ee:87:f5:1c:50:37:12:a5:47:95:39:fb:80:47:1a:fc:68:
         31:ce:91:4a:9c:64:72:fa:ac:55:62:01:94:94:0a:3d:4b:53:
         7a:73:08:ab:c0:18:85:e3:d9:2c:c7:ab:d2:35:95:ee:06:f2:
         8b:f1:c7:3e:d9:87:fd:b9:94:fe:0f:4e:a6:51:14:6b:66:7a:
         7e:1a:01:2c:d1:a1:c6:c0:6f:6a:ab:cd:66:6a:96:d3:5a:9d:
         73:2f:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:43 2026 by rpki-client