Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
File:                     6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json)
Hash identifier:          TvM9Yv/ck8zLw7uAByFEOWJCiN1+Eavi3nV02N7NOG0=
Subject key identifier:   49:9F:88:5B:B6:A9:50:87:D1:46:9D:3B:A6:44:52:9F:8D:C2:76:12
Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68
Certificate issuer:       /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
Manifest number:          0139
Signing time:             Sun 01 Mar 2026 06:25:54 +0000
Manifest this update:     Sun 01 Mar 2026 06:25:54 +0000
Manifest next update:     Sun 08 Mar 2026 06:25:54 +0000
Files and hashes:         1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: sx/WytdqhfZgpXznUbexvWGeFDbJbvLwxLeciG/2Icg=)
                          2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl
                          rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
        Validity
            Not Before: Mar  1 06:25:54 2026 GMT
            Not After : Mar  8 06:25:54 2026 GMT
        Subject: CN=69a3dbf2-7dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:0c:9f:44:47:f5:7f:1e:7b:4e:34:00:93:
                    e1:a1:3e:46:88:ed:19:ea:b1:53:54:fb:4f:36:55:
                    8a:e0:5a:c3:19:02:9a:b7:16:66:31:58:4b:b3:7a:
                    67:dc:b3:8e:35:90:dd:3e:b5:33:2e:ef:f2:a9:ae:
                    b8:dd:70:9f:79:8a:ac:ec:4a:03:96:a3:bd:54:b1:
                    88:0b:12:62:0b:b4:e2:67:50:ef:8e:ef:6a:d0:89:
                    2e:f2:be:88:46:eb:84:7c:4d:0d:67:05:59:6b:bb:
                    ba:73:7e:f3:99:47:c6:66:03:f7:9e:ad:b8:24:3a:
                    03:37:be:d7:c0:c0:91:67:84:9d:b9:27:21:0e:d7:
                    b7:e6:69:b9:8a:41:40:f7:4f:6a:9c:82:b5:23:94:
                    56:6d:67:8a:2a:e0:64:3c:05:c7:48:f8:93:a7:ba:
                    85:da:7e:e6:d4:8f:6a:cd:11:b0:b6:b1:4a:b5:9d:
                    b8:7e:0d:9e:f3:04:f8:88:c4:89:2e:45:be:7e:89:
                    34:5d:29:e6:4c:ff:79:ea:78:b8:82:62:75:a6:09:
                    36:7a:ee:e9:9a:f0:5c:43:93:32:f0:c1:82:dc:bd:
                    76:9d:eb:19:63:2c:91:e0:f7:ea:26:ba:f5:62:70:
                    b6:81:0d:fb:f2:66:49:d2:d9:26:27:5f:02:3d:54:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9F:88:5B:B6:A9:50:87:D1:46:9D:3B:A6:44:52:9F:8D:C2:76:12
            X509v3 Authority Key Identifier:
                keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:e3:92:e9:41:51:ed:78:99:29:8f:d1:d5:1b:50:e9:6b:
         8c:e7:f0:e6:e8:ed:35:c6:c6:25:00:85:d7:14:3e:ab:cc:68:
         bf:f3:13:65:0a:cc:03:6c:f7:09:61:ae:62:66:5d:0a:99:45:
         aa:a3:97:52:0b:55:4b:b6:cf:dd:67:46:b1:89:f7:c8:8d:00:
         77:32:d5:eb:c7:66:da:8f:b3:25:22:8e:98:f4:c7:d0:64:1a:
         c6:76:e7:a6:8b:f2:82:e6:d2:46:f7:4a:cf:a4:7e:e5:b7:8c:
         08:37:96:5e:75:3d:d4:41:46:8e:49:91:18:0c:1b:10:a4:bb:
         d5:40:b1:cc:04:13:5c:a4:f2:ab:63:e7:da:6b:96:38:5a:6c:
         68:30:11:51:42:1e:82:b8:71:a5:ee:dd:ed:f4:0b:39:38:e5:
         cc:30:d7:57:5a:cf:ce:d4:6c:59:32:ef:5b:02:2b:fd:3c:73:
         81:b0:da:90:75:d9:f5:6c:89:6a:40:14:77:b6:da:a7:7e:02:
         ab:b5:7b:eb:1c:6f:95:9f:2c:13:32:73:e9:66:1f:6e:71:d6:
         89:54:c2:ef:10:99:bf:c6:e7:a5:8e:59:b3:2f:dd:04:81:92:
         4a:32:45:26:6d:2b:5c:49:2e:2d:32:69:73:ea:1a:5a:51:e4:
         d2:28:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:26 2026 by rpki-client