Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File:                     6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier:          Z0rc1y3tKxE3Gbw4bFC6EXO38wbw2vPdwz2+q5uLU+s=
Subject key identifier:   B6:06:39:79:C8:2A:48:CD:1E:9C:27:69:5E:1E:89:82:24:9D:04:63
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer:       /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number:          E0
Signing time:             Sun 01 Mar 2026 07:52:15 +0000
Manifest this update:     Sun 01 Mar 2026 07:52:15 +0000
Manifest next update:     Sun 08 Mar 2026 07:52:15 +0000
Files and hashes:         1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: SH+1gHjpE8zzHz3iiAwXIvitWrOAzMSFoTxVmdBWhfg=)
                          2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: B0zzX5iDXgPapsRrYTYWSQgEs4jb8ZthX/Rm+C+DCPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
        Validity
            Not Before: Mar  1 07:52:15 2026 GMT
            Not After : Mar  8 07:52:15 2026 GMT
        Subject: CN=69a3f02f-48a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:97:62:33:3f:3e:47:97:65:7e:e4:6d:6e:
                    ed:f8:16:ec:96:0b:fb:ba:3e:1c:ac:13:73:93:69:
                    c6:a6:fa:c0:65:06:9c:00:2f:54:c4:87:44:17:8f:
                    6e:23:72:17:70:b2:59:da:57:d8:ee:82:21:52:78:
                    81:2c:ef:96:4b:16:52:ee:29:94:1f:23:ed:79:3c:
                    64:ad:67:8c:df:80:dd:ee:51:38:3f:5b:37:95:3e:
                    2c:fe:90:af:ba:ba:77:a5:f7:0b:50:da:03:d7:f0:
                    fd:4c:91:52:fa:bd:be:f2:aa:56:c8:8f:b6:bd:9c:
                    fc:ca:94:f3:66:24:b9:de:c2:14:b1:42:bf:85:61:
                    d6:7f:85:13:71:ef:9f:b7:f0:c8:a3:fe:49:af:aa:
                    88:de:7f:aa:d1:be:a9:2e:35:7c:cc:e8:05:9d:b6:
                    3d:3a:57:c1:b5:2f:fc:0c:99:d1:ed:8f:13:52:a1:
                    83:78:46:2f:80:3b:09:15:76:38:4d:86:17:f9:5d:
                    bb:cd:ee:b8:a7:07:06:92:28:6d:ea:aa:b4:81:82:
                    58:0b:e5:69:74:f7:b7:b9:a5:11:65:9c:45:75:e3:
                    92:87:69:11:a6:aa:69:5f:46:b4:a3:43:51:1a:c9:
                    ec:65:bc:5f:97:8c:6e:c0:e7:a7:39:1b:82:68:1b:
                    09:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:39:79:C8:2A:48:CD:1E:9C:27:69:5E:1E:89:82:24:9D:04:63
            X509v3 Authority Key Identifier:
                keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:81:b3:3d:e2:c7:b6:06:2b:54:78:c4:7c:4d:ba:ee:3c:
         57:c4:37:6a:40:59:98:fb:87:ce:73:ac:22:d1:f4:6b:68:d9:
         3c:77:33:97:cb:6f:5f:32:6a:18:dc:46:8e:b7:39:d1:9c:35:
         b1:c4:de:99:23:30:69:05:c1:2f:c4:6d:c8:90:ae:c0:aa:9c:
         bd:77:fb:36:3c:d5:96:4d:a6:ff:98:18:f5:a2:b2:f2:a4:31:
         8c:7f:dc:4d:a6:45:82:b9:62:42:58:a9:b8:c2:e9:c1:46:99:
         7c:95:7b:a5:4e:4f:16:6c:86:57:d5:7e:7d:2f:81:e5:06:52:
         d4:93:f1:f5:6b:1e:97:b2:64:40:4e:0f:8f:f6:b2:a8:84:d1:
         e3:e1:79:ce:a5:73:6e:aa:b5:28:ac:12:a9:dc:16:2d:cb:08:
         66:00:aa:17:ea:34:09:63:18:0f:91:7e:4e:72:6b:55:b0:01:
         3e:48:c1:f0:35:a1:7f:3e:ef:c4:30:db:08:bb:4e:a5:16:19:
         d3:3b:f9:ba:ac:bc:e6:c4:49:6f:37:03:50:76:65:42:58:1a:
         a3:7b:39:07:5b:9e:00:88:92:7e:f5:93:c8:48:bf:ef:b0:10:
         1b:95:4f:32:ca:ba:60:da:c1:b4:0f:4f:c3:a0:9a:2c:49:cc:
         39:6a:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:59 2026 by rpki-client