Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
File:                     _6CVovSifKRjG8I55X56QFtFa_8.mft (raw, json)
Hash identifier:          9Hfns+u83mvoqO1M/RYJELPcXq4DqzrdbQCkfycU28Q=
Subject key identifier:   AA:37:2A:FE:5D:0D:2B:B1:97:97:52:6A:8D:8B:E4:38:A7:80:30:5D
Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
Certificate issuer:       /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Certificate serial:       0656
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
Manifest number:          0649
Signing time:             Thu 16 Apr 2026 22:36:54 +0000
Manifest this update:     Thu 16 Apr 2026 22:36:54 +0000
Manifest next update:     Thu 23 Apr 2026 22:36:54 +0000
Files and hashes:         1: _6CVovSifKRjG8I55X56QFtFa_8.crl (hash: t7rW/dIfLuKT9OuHxB+YEzZMWLvZvRw4U/2EY2TId10=)
                          2: C05B301CB1DF11F082E88220C4F9AE02.roa (hash: uq5ZQfrgVdDfVt6sG5O/qTn9GaYg/Ej9gjTiFR1F2oY=)
                          3: C708809CD06E11EBBBC4C43DC4F9AE02.roa (hash: 3GC3+eHRqU5OT1Z5r0cqMgRnkqFGVtKD6vlWLBTkS5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl
                          rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B346D, serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
        Validity
            Not Before: Apr 16 22:36:54 2026 GMT
            Not After : Apr 23 22:36:54 2026 GMT
        Subject: CN=69e16486-3ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:e0:93:63:ba:76:ed:22:33:0d:ef:f9:05:
                    13:55:13:76:5a:da:f6:fe:2e:67:04:56:60:39:55:
                    fe:c8:ba:a3:eb:81:62:81:3c:cc:c9:19:8e:47:b1:
                    cd:48:9c:09:32:1f:de:49:78:21:4f:03:e8:f8:f5:
                    7b:c3:f8:c8:4e:46:6d:44:dc:83:37:9a:1b:d4:51:
                    c4:8c:ff:45:52:02:3e:b9:60:66:f8:58:76:06:33:
                    bf:3d:c1:1b:01:95:00:79:ee:f1:4e:40:9e:61:15:
                    21:74:5d:3b:80:92:f4:ce:01:11:ad:01:ff:db:2d:
                    7b:6a:9b:08:9c:cb:cd:60:75:2a:79:b4:f6:d6:6f:
                    a5:39:20:03:bc:e7:aa:a3:76:b5:85:08:08:c7:46:
                    1d:aa:09:c6:44:bb:17:98:91:22:cb:ad:51:ca:08:
                    4c:f9:cf:b5:55:7c:4e:88:d3:fb:06:a3:0d:26:76:
                    87:24:0f:ff:f1:dd:ef:cc:cc:16:c4:df:51:0f:e1:
                    9a:59:37:00:72:bf:75:02:fc:4d:2a:6e:83:9a:ec:
                    8b:9a:4d:3d:f3:d4:b1:94:39:87:61:bb:ed:9b:ae:
                    11:2e:cb:89:2b:85:53:51:0e:77:f1:c3:b8:76:b8:
                    b2:46:bb:d3:00:18:c4:34:d3:72:10:40:17:d6:1d:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:37:2A:FE:5D:0D:2B:B1:97:97:52:6A:8D:8B:E4:38:A7:80:30:5D
            X509v3 Authority Key Identifier:
                keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:12:b9:cc:3a:c4:8a:fc:57:09:26:7a:81:14:dc:57:22:
         d6:50:bd:42:2b:d1:f7:56:57:ac:df:65:1d:2c:d3:d7:91:55:
         93:f1:7f:ed:69:c9:25:86:75:03:c9:45:1f:02:68:fc:0f:43:
         13:f8:2d:07:02:b2:76:3a:e8:2c:8b:5b:64:e8:11:ca:3c:7a:
         8f:a0:10:2d:11:b0:91:d3:b7:12:6f:6d:65:1d:64:82:f6:36:
         73:4e:69:ef:a8:26:92:2c:41:99:33:13:b0:16:b0:32:3c:48:
         8b:f2:17:78:55:4a:66:74:0d:39:a9:06:ce:fb:3d:9e:af:55:
         73:b4:bb:fc:94:8c:37:15:54:44:51:03:70:15:94:4f:11:eb:
         76:b7:81:c6:55:14:b9:77:2e:15:c8:d2:11:ce:b6:93:93:33:
         62:26:ba:5e:6b:55:42:12:8c:53:fd:fd:c0:fb:5e:16:e0:a2:
         38:ac:b8:7c:4e:e7:91:6d:7f:81:3d:a5:ca:bd:b0:8a:5f:f4:
         d1:36:de:62:ce:53:ca:23:20:5a:5c:a0:fe:e9:ae:2a:74:78:
         42:da:2b:a2:27:79:dc:cb:fa:0b:f4:b0:71:f5:86:eb:78:5c:
         0f:40:b5:6e:ba:96:ee:cc:47:cd:dd:56:1e:49:96:64:67:28:
         5d:b3:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:33 2026 by rpki-client