Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File:                     6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier:          8nTRLECvFBvdUtMWCX9IJNZDwPCdegd3ZVDIcEUF04U=
Subject key identifier:   9C:BE:AF:B8:48:4B:42:3E:23:F1:BB:BD:F7:57:3F:D4:F5:94:3E:D4
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number:          0121
Signing time:             Fri 17 Apr 2026 05:25:50 +0000
Manifest this update:     Fri 17 Apr 2026 05:25:50 +0000
Manifest next update:     Fri 24 Apr 2026 05:25:50 +0000
Files and hashes:         1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: DjjFmn+hA+iG0SUePKMrfrnvLT986ZpO/6oDAIhnHkM=)
                          2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: VOtKNjMmkgJqiloUEhTwsaTLIqFH0cNEwhb31cZXP9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: Apr 17 05:25:50 2026 GMT
            Not After : Apr 24 05:25:50 2026 GMT
        Subject: CN=69e1c45e-8dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:42:c4:1e:db:95:f9:f5:51:53:7f:7e:8c:
                    92:52:7b:1d:c9:1d:81:bd:32:18:cb:b3:4c:be:2d:
                    41:d7:8d:b2:6f:2c:d5:c3:25:0b:27:45:a2:a7:0d:
                    f1:1d:c3:92:36:1d:f6:a2:8e:6f:70:7a:73:63:ae:
                    0d:ac:e0:c5:2d:a0:7b:c8:19:c6:c3:0a:af:95:f3:
                    68:8a:9b:df:72:30:31:4c:eb:98:04:77:fb:34:9f:
                    d0:62:f3:04:ac:4a:74:fc:f3:81:04:a9:d2:75:3e:
                    0f:27:9c:4b:50:40:6d:5e:2d:84:2e:9b:17:91:a7:
                    2d:bc:9f:46:fa:ff:fa:38:d5:87:92:f8:e3:a9:bc:
                    91:aa:3b:c1:de:84:15:10:8d:a3:25:9e:9a:8b:e6:
                    af:39:8a:b4:9b:f3:da:59:05:18:e2:5d:04:a6:5b:
                    08:30:ba:75:5e:78:dc:97:c0:0a:80:83:d9:62:f9:
                    60:74:e3:9b:ac:49:ac:76:27:c7:6a:c9:16:97:9b:
                    28:8f:71:e0:4d:02:6d:4c:fd:82:ce:b9:e5:64:0c:
                    db:6c:c2:2f:d5:a7:63:e2:a0:26:48:a1:6e:db:43:
                    ec:fc:01:c3:09:19:19:91:1d:9b:5c:43:0e:b5:7b:
                    52:e7:c8:52:32:7d:fe:c9:44:7a:a8:40:45:ee:6d:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:AF:B8:48:4B:42:3E:23:F1:BB:BD:F7:57:3F:D4:F5:94:3E:D4
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:40:3d:01:d5:99:25:85:82:45:37:5b:33:5e:dd:70:63:ea:
         90:a1:11:b4:14:e4:97:4b:1d:8a:52:12:a3:ac:68:dd:90:1d:
         b8:06:ab:a8:8f:36:c6:8f:a3:f9:40:ff:2e:41:9c:68:de:22:
         fc:15:9d:11:6e:73:12:3d:e4:2b:f0:76:9e:bb:44:09:93:b2:
         d6:b9:52:a1:9d:38:7b:01:81:a8:ea:3d:d4:49:a4:9b:dc:fb:
         6b:52:3e:ed:7e:c2:e2:58:59:37:3a:6e:a4:3e:bd:27:47:71:
         cf:61:02:22:20:b8:71:43:c5:25:74:61:c4:32:c2:e4:22:b6:
         fe:01:33:f6:b5:8e:c3:85:4e:d1:4f:93:91:05:e2:c9:f6:33:
         d1:e7:6a:cd:7e:93:2c:e1:5a:47:0c:00:a5:eb:15:21:9d:4b:
         fc:37:54:8d:61:89:ad:27:18:87:ca:5a:22:0f:b2:0b:76:4c:
         b5:d6:6b:4b:fa:84:7a:44:13:5b:80:c5:9b:2e:6d:a4:de:3f:
         b4:bd:fe:70:3f:8a:04:af:dc:a7:2b:fa:6a:f0:94:5a:3b:20:
         06:dd:e0:17:f9:03:a1:ae:96:d3:0c:af:95:41:dd:4f:d8:c7:
         98:e8:99:78:2d:1d:06:58:e6:dc:1b:c7:7a:96:7c:84:d5:4f:
         17:06:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:15 2026 by rpki-client