Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
File:                     6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft (raw, json)
Hash identifier:          /zjEKnqKuG75+2cOQ0nNxQLVxuW2o447mOxkJCibHPw=
Subject key identifier:   60:AD:27:BE:B3:AE:17:A9:7A:AC:FD:0A:61:BD:20:FA:56:86:38:E5
Authority key identifier: E8:6B:2A:08:1B:4C:FC:A8:0C:A8:BD:C6:61:48:C9:56:FA:78:EE:74
Certificate issuer:       /CN=A919B59F/serialNumber=E86B2A081B4CFCA80CA8BDC66148C956FA78EE74
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
Manifest number:          34
Signing time:             Sun 01 Mar 2026 10:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 10:01:38 +0000
Manifest next update:     Sun 08 Mar 2026 10:01:38 +0000
Files and hashes:         1: 6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl (hash: tkwu6WbtFdUpiLFM+z7xHXWPdGAzqRBO+fZmMWXmnKs=)
                          2: 44AC4920C8F411F0B2A04129C4F9AE02.roa (hash: ZCYK+OMfucCWSUmvJyn+aEP/3WxYDb55XSzl4bwuHVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl
                          rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B59F, serialNumber=E86B2A081B4CFCA80CA8BDC66148C956FA78EE74
        Validity
            Not Before: Mar  1 10:01:38 2026 GMT
            Not After : Mar  8 10:01:38 2026 GMT
        Subject: CN=69a40e82-6d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:98:de:83:c7:13:d5:a3:79:e6:60:87:09:
                    3c:f9:51:15:a1:83:7f:3a:36:85:26:07:ef:db:e5:
                    9f:82:8f:f9:76:be:59:81:26:67:56:47:23:2c:66:
                    df:b0:2d:9b:f4:3c:4b:cc:45:13:4a:1d:87:1b:06:
                    84:19:76:b2:17:05:26:10:e0:4a:d3:3f:2e:ff:e0:
                    ae:e9:12:36:59:81:ac:fd:35:91:69:30:d5:c4:e5:
                    ac:f1:f7:fe:90:0d:39:4e:8e:08:bd:5e:b6:bf:bc:
                    20:a6:3a:8c:b0:37:f6:aa:45:1e:79:d8:ea:89:9f:
                    73:f9:d5:a3:7e:93:a1:88:65:e1:a0:75:db:70:87:
                    10:96:63:38:6c:c7:9c:bb:74:66:fb:60:1e:7a:35:
                    0e:59:66:68:61:0a:03:c2:0a:d5:be:a4:89:28:16:
                    f6:bf:88:28:38:29:39:eb:86:00:3e:54:42:cf:26:
                    2d:59:ac:29:e1:6c:ff:c8:f8:f9:9e:0c:b5:75:12:
                    d7:2f:9b:50:eb:62:1a:c2:f0:fb:3e:7f:1c:54:dc:
                    e5:31:30:fd:fa:d6:b8:03:a6:29:7c:5e:c2:6e:b9:
                    84:00:0d:aa:af:69:09:84:20:b5:8f:e2:8b:92:94:
                    03:c1:70:a9:93:b4:8e:43:08:10:e5:57:5b:07:a9:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:27:BE:B3:AE:17:A9:7A:AC:FD:0A:61:BD:20:FA:56:86:38:E5
            X509v3 Authority Key Identifier:
                keyid:E8:6B:2A:08:1B:4C:FC:A8:0C:A8:BD:C6:61:48:C9:56:FA:78:EE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:fa:82:09:79:a5:9a:80:80:fb:d2:53:31:0e:4b:9e:90:
         ca:9d:b3:dc:c3:d2:91:df:dc:ef:27:53:1f:79:e2:4e:18:43:
         3b:74:0d:fa:e2:0c:c5:28:1a:a3:35:7c:8a:64:05:94:7f:47:
         da:5b:50:c0:b7:86:24:57:32:20:9a:d7:43:67:2a:57:1b:d1:
         08:f0:11:b0:bc:4d:f8:06:be:87:83:0c:b2:7a:a6:c4:8d:b2:
         e3:8b:96:c3:88:d2:8e:5e:96:4f:ef:5b:23:a5:9e:00:20:a9:
         2b:57:5f:ee:f6:f0:99:be:31:a2:25:d9:62:a2:ff:65:00:e0:
         57:9f:3b:82:fb:52:f6:6d:9b:4e:47:d0:8f:39:be:53:df:1b:
         63:68:21:28:a8:55:e0:1e:7f:e5:95:43:25:b9:ab:4d:43:cf:
         ad:b7:bb:09:3e:53:79:09:da:ec:8b:93:69:6d:82:de:b0:2c:
         d4:df:c7:e4:23:bb:a7:16:f2:6e:d8:64:5f:3b:83:5a:4b:ed:
         ab:76:d5:7f:cd:4d:14:5a:a8:55:ab:2b:7c:22:6d:57:02:d2:
         b4:56:db:08:ad:69:06:e6:fd:f2:e9:35:c4:6f:67:ea:20:61:
         a7:76:5c:16:c5:27:ba:c7:c6:e1:16:4a:56:6c:09:63:aa:19:
         6b:b0:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:30 2026 by rpki-client