Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
File:                     6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json)
Hash identifier:          pR+5i6Vr3JuF1tnu6iESr/9hAHN7/Z+YfWeIYWIPNbM=
Subject key identifier:   A6:3B:3D:B0:7D:0C:9E:87:FD:C0:A6:47:D2:51:A1:06:0C:D3:ED:36
Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
Certificate issuer:       /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
Manifest number:          02F1
Signing time:             Fri 17 Apr 2026 02:08:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:08:18 +0000
Manifest next update:     Fri 24 Apr 2026 02:08:18 +0000
Files and hashes:         1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: z0JyF3Vp6sqo8JrzDTupxgfs+wlIO6qmsGOE8F53GmM=)
                          2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: TFmcQAcfne/kujXnOSIqvHGLVj2LAWcXYB93wCfwF/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
                          rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
        Validity
            Not Before: Apr 17 02:08:18 2026 GMT
            Not After : Apr 24 02:08:18 2026 GMT
        Subject: CN=69e19612-60e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:07:d3:1b:b0:12:d2:3f:b7:a2:35:22:43:
                    8b:cc:9d:dc:a6:7a:d0:2e:49:2f:79:8e:92:bc:5e:
                    18:9e:9f:3d:f6:1d:14:33:d8:c9:de:0b:3d:94:ca:
                    7f:b8:d9:8a:08:b8:dc:7a:b4:2d:4e:8b:ec:ee:c3:
                    8c:f5:59:dc:17:63:20:21:b6:fe:69:a0:40:e2:fd:
                    23:8b:e9:22:5e:fc:4d:10:86:75:02:bd:be:23:7f:
                    9a:ba:ea:aa:c7:ea:52:f3:93:b3:0b:ac:df:59:5f:
                    c1:da:0f:ca:75:73:01:ab:dd:8e:6d:e7:62:91:9c:
                    3e:05:16:0c:81:20:35:84:a1:aa:ae:9e:2b:a2:85:
                    40:1e:a1:f6:4c:68:87:55:2b:ee:4c:3e:8f:11:9b:
                    fe:0c:f6:17:46:9e:ab:70:25:97:b4:fd:a0:ae:a6:
                    e7:7a:82:d3:80:87:fa:b7:6a:96:5a:5a:c9:01:3a:
                    f3:9b:6e:df:17:ad:53:b1:a6:6a:8e:22:b2:a6:65:
                    06:b5:02:f9:ae:36:c4:29:85:9c:b0:a8:5e:d7:1f:
                    32:19:96:1b:4f:ee:d6:19:bd:d8:6f:25:21:2f:3a:
                    11:30:49:06:8e:79:05:42:00:44:0c:c7:d0:c3:20:
                    b4:1f:a6:6c:55:f5:57:db:b4:ca:c8:40:ad:64:fb:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:3D:B0:7D:0C:9E:87:FD:C0:A6:47:D2:51:A1:06:0C:D3:ED:36
            X509v3 Authority Key Identifier:
                keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7d:1a:bc:33:50:c5:fc:52:ec:64:41:40:af:00:01:20:2a:
         55:c3:2e:c3:43:de:27:5d:93:16:b9:16:32:95:94:c5:d1:85:
         91:77:91:b9:db:12:1e:ca:f3:43:15:75:03:03:94:5c:7f:96:
         0a:49:e1:31:4b:9d:24:2b:f5:bf:b8:31:de:43:5b:53:74:8d:
         84:b7:1d:30:98:33:c4:16:5f:f6:db:81:bb:2a:3d:49:49:b3:
         6b:0d:52:05:01:ed:36:d5:74:9b:95:26:9a:ee:c7:33:78:3b:
         08:bb:94:3f:93:ed:0e:4d:49:07:61:53:23:52:71:71:5d:8e:
         e9:b1:c2:d3:3d:50:12:d8:f9:74:fa:7f:8d:a2:ed:ed:91:b0:
         71:9c:3e:96:e2:f7:ef:30:83:23:06:1a:75:cb:af:30:8c:cf:
         33:1f:f2:46:ce:9d:0f:4c:d0:76:1a:91:6d:be:ce:ac:57:07:
         1b:56:3a:5c:8e:5f:ba:01:ca:87:bf:2b:ba:de:47:b4:40:07:
         53:08:46:d4:59:4f:ac:ea:6f:41:65:3c:3b:3f:8b:c8:d8:f3:
         3f:24:f3:ff:50:9b:2b:0e:37:96:d5:a3:93:03:20:a6:7a:3a:
         4a:b5:4a:23:ff:cc:4d:6c:e4:cd:4f:2d:4f:e6:a7:56:0f:39:
         24:2f:57:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyQUYxMTAvBgNVBAUTKEU4NDg2Mzc0NDQ5QURFNTU4MUVCNzhDMzk4MkYxREUx
MkE0QTYwMDMwHhcNMjYwNDE3MDIwODE4WhcNMjYwNDI0MDIwODE4WjAYMRYwFAYD
VQQDEw02OWUxOTYxMi02MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttUH0xuwEtI/t6I1IkOLzJ3cpnrQLkkveY6SvF4Ynp899h0UM9jJ3gs9lMp/
uNmKCLjcerQtTovs7sOM9VncF2MgIbb+aaBA4v0ji+kiXvxNEIZ1Ar2+I3+auuqq
x+pS85OzC6zfWV/B2g/KdXMBq92ObedikZw+BRYMgSA1hKGqrp4rooVAHqH2TGiH
VSvuTD6PEZv+DPYXRp6rcCWXtP2grqbneoLTgIf6t2qWWlrJATrzm27fF61TsaZq
jiKypmUGtQL5rjbEKYWcsKhe1x8yGZYbT+7WGb3YbyUhLzoRMEkGjnkFQgBEDMfQ
wyC0H6ZsVfVX27TKyECtZPvInwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKY7PbB9
DJ6H/cCmR9JRoQYM0+02MB8GA1UdIwQYMBaAFOhIY3REmt5Vget4w5gvHeEqSmAD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD
QkExMUVEOUM5QUZBMjVDNEY5QUUwMi82RWhqZEVTYTNsV0I2M2pEbUM4ZDRTcEtZ
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi82RWhqZEVTYTNs
V0I2M2pEbUM4ZDRTcEtZQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxn0avDNQxfxS7GRBQK8AASAqVcMuw0PeJ12TFrkWMpWUxdGFkXeRudsSHsrz
QxV1AwOUXH+WCknhMUudJCv1v7gx3kNbU3SNhLcdMJgzxBZf9tuBuyo9SUmzaw1S
BQHtNtV0m5Ummu7HM3g7CLuUP5PtDk1JB2FTI1JxcV2O6bHC0z1QEtj5dPp/jaLt
7ZGwcZw+luL37zCDIwYadcuvMIzPMx/yRs6dD0zQdhqRbb7OrFcHG1Y6XI5fugHK
h78rut5HtEAHUwhG1FlPrOpvQWU8Oz+LyNjzPyTz/1CbKw43ltWjkwMgpno6SrVK
I//MTWzkzU8tT+anVg85JC9XEQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:15:33 2026 by rpki-client