Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          NVeOpdMlilL/DSwrTT97GYkDm4ojFYOPxuHrs1WjwBo=
Subject key identifier:   34:68:30:AD:96:4C:7B:1F:FB:19:D6:27:79:DE:08:5E:DD:5F:1E:C6
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2ACD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2AA1
Signing time:             Sun 01 Mar 2026 23:49:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:49:32 +0000
Manifest next update:     Sun 08 Mar 2026 23:49:32 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: WY/bfxFihb1oPMrF6ELqQ5j0h3rT2haMDKg9ws8kqhI=)
                          2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: ViUN1ktDgOXxiF30cbqP6I4Vb/rzbxLloaN/i3nx4IY=)
                          3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: k2tDc+ez6BNq63hqlmOcWT3woUQyCLcLZFk7DkkdvX8=)
                          4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: XjnN+h9msR5bdiDBc0pY+bbyuYDH3qgvu5jG8SVLQ0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10957 (0x2acd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Mar  1 23:49:32 2026 GMT
            Not After : Mar  8 23:49:32 2026 GMT
        Subject: CN=69a4d08c-4edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:18:93:92:df:8a:65:4e:15:2c:95:de:e9:
                    cc:00:84:f4:67:24:ae:e7:34:bf:ab:fa:63:db:cf:
                    73:f8:a7:cc:bb:c0:45:9f:4b:bd:8a:3e:2f:d5:71:
                    f1:04:07:8e:ec:ad:b3:e3:d6:d3:67:52:4a:f6:a7:
                    71:24:2c:00:25:90:a8:99:33:ce:ee:be:5a:13:a9:
                    7d:ef:7a:8e:83:57:7e:8c:2f:1e:0e:6a:8b:91:09:
                    ef:76:09:f2:42:6d:21:38:b1:85:fc:11:76:2a:de:
                    a8:91:f2:68:73:95:0f:57:6b:bc:b5:54:9b:4a:31:
                    5e:a6:5a:a3:8f:ef:3d:ec:05:8b:69:53:13:43:24:
                    56:3c:06:9a:eb:de:30:aa:cb:0c:e6:d5:e0:11:5f:
                    da:18:a0:fd:69:91:23:11:75:6c:be:52:cd:8b:84:
                    63:69:00:31:02:a9:8d:0f:ed:fe:2d:4f:63:00:dd:
                    ad:0f:09:72:cb:c1:f8:ec:ac:69:30:1d:d4:4f:1b:
                    5d:6f:97:6c:12:52:4f:96:76:c3:4a:87:e6:79:a3:
                    24:8f:09:2c:95:af:65:6b:ec:5a:c4:eb:2d:34:0e:
                    46:14:18:28:f4:2c:bb:bf:b3:5d:f7:8e:26:a3:fd:
                    7d:cf:64:26:66:1a:cd:14:d7:77:70:f0:51:43:81:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:30:AD:96:4C:7B:1F:FB:19:D6:27:79:DE:08:5E:DD:5F:1E:C6
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:41:4e:ca:5d:85:79:69:52:80:7f:03:b3:05:b2:ba:3d:
         b2:39:3a:a8:2e:a5:a1:71:c6:fd:8d:77:2f:9f:8b:69:b7:7e:
         ac:1c:e4:3d:1b:ad:e2:e0:3c:37:ce:63:ed:45:88:6b:10:02:
         8a:a0:7b:90:c9:5d:bd:b6:88:ea:ec:41:2f:61:28:5a:97:a2:
         9a:0b:9b:6c:02:c1:94:f0:5f:6d:4e:25:34:ef:f9:2a:21:9e:
         16:31:80:5d:1a:90:80:1a:08:c4:2c:0d:be:58:b0:6f:e7:06:
         89:ec:3a:35:da:2d:39:a9:10:db:42:d6:b0:23:c5:d1:c5:01:
         25:de:cb:71:af:b0:28:59:8f:6e:fa:38:e8:e6:5f:42:c4:31:
         56:65:19:4f:bb:5f:c3:5e:b0:a3:d2:34:f8:7a:02:b3:00:ca:
         96:2d:64:1e:1a:5e:af:10:24:6a:89:79:d7:3f:82:33:1a:fd:
         55:9b:25:45:ed:75:80:70:27:dd:c0:a7:3a:3a:92:0b:66:c6:
         b7:f0:66:23:18:be:1a:28:81:01:d9:9d:c1:db:f1:19:8d:d8:
         83:d9:7b:a5:11:58:6e:10:17:02:8c:42:4e:13:d3:da:f7:fb:
         b8:34:24:dc:a1:72:6f:2d:27:85:1b:d5:b9:bd:e3:37:fa:fe:
         a2:8e:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:39 2026 by rpki-client