Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
File:                     6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json)
Hash identifier:          7VSQvsLGTwaBzE5JZsDN/9tg4xyFQ2d9jjyY2kUp6xo=
Subject key identifier:   22:F4:D8:63:AF:A7:B5:64:2E:E6:74:44:3D:C4:72:71:D7:7A:00:65
Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Certificate issuer:       /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
Manifest number:          0138
Signing time:             Sun 01 Mar 2026 06:25:30 +0000
Manifest this update:     Sun 01 Mar 2026 06:25:30 +0000
Manifest next update:     Sun 08 Mar 2026 06:25:30 +0000
Files and hashes:         1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: CnEVYUI4su6s9dOG58LR/OO43TjRctLp8Z54yZumt8g=)
                          2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: uz9vSc9mw92nL6Ktvm9xgb3SiGv4W99WeVuYNZ1qMcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
        Validity
            Not Before: Mar  1 06:25:30 2026 GMT
            Not After : Mar  8 06:25:30 2026 GMT
        Subject: CN=69a3dbda-31c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:20:7d:6d:9f:19:f1:48:28:ba:2d:21:45:
                    98:25:52:09:b9:68:9d:17:3e:17:de:ce:53:77:11:
                    7d:9d:9e:a5:f2:bc:52:90:e0:5d:43:a9:42:cd:28:
                    d6:92:0c:9f:5f:30:d3:26:26:55:86:20:84:b3:0d:
                    42:44:78:93:7c:bd:43:3c:ab:c7:a2:cb:65:da:fa:
                    a6:f9:62:c4:b9:39:32:a1:c7:9e:53:c0:8a:4b:c6:
                    c4:28:65:a6:0c:58:93:2d:38:6a:5d:3f:6b:ab:bb:
                    ec:d9:19:df:ee:da:8c:85:63:e2:51:a6:c6:d8:93:
                    09:be:9a:7b:99:41:02:ff:da:9f:6d:5f:31:31:49:
                    86:d6:bc:32:58:d5:a1:bb:f6:29:3b:7c:c3:c6:22:
                    6e:35:26:c6:25:fd:7e:e5:a4:8e:6c:b1:44:f8:83:
                    6f:11:66:1f:4f:84:86:e7:b6:70:b0:c9:b1:d7:46:
                    3d:3c:b6:13:41:04:42:64:3c:0d:69:ae:07:57:be:
                    9b:df:f3:b0:c5:e1:23:4b:23:8f:20:95:d8:e3:ba:
                    8b:2e:63:63:6b:b7:71:e5:cc:36:81:c0:1b:99:7a:
                    d4:67:72:13:35:22:16:7b:4e:e1:5a:cb:04:85:ec:
                    1f:e8:1d:f2:c5:43:4a:1f:29:dc:de:be:7b:4e:66:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:D8:63:AF:A7:B5:64:2E:E6:74:44:3D:C4:72:71:D7:7A:00:65
            X509v3 Authority Key Identifier:
                keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:34:2e:1a:8f:57:61:2d:26:f5:1e:92:4c:fc:c2:88:cd:
         f6:bb:9a:00:cd:36:0f:15:45:2f:ab:d0:65:3d:9d:1c:12:da:
         06:30:6b:f8:80:ed:94:47:2c:5b:83:96:eb:df:60:0f:18:d2:
         48:92:3a:db:68:41:66:ee:d4:d0:94:c6:e2:24:00:4b:2b:6e:
         cb:05:af:ab:44:c5:5a:a9:41:77:97:21:45:09:9f:a4:0b:84:
         f9:8d:b1:3f:6c:c4:4c:84:52:49:66:6b:45:ce:dc:bc:44:b3:
         46:24:81:03:0d:18:95:f3:fc:72:f6:be:69:b6:62:a5:27:fc:
         fe:f3:6b:fe:d7:f8:d2:2c:b4:4d:13:3f:d9:b7:47:9e:eb:63:
         07:38:91:d7:1e:4e:68:92:66:c7:ad:1b:50:5d:87:fe:51:f2:
         1f:fb:8d:36:88:31:5c:e9:14:80:7d:de:07:ad:73:2f:66:32:
         9f:28:e7:b1:f3:18:33:ab:77:91:11:9d:28:9f:e0:09:85:87:
         98:71:fe:29:37:83:c1:29:1a:dc:15:bf:27:dd:be:63:ea:fb:
         82:d6:54:67:f7:5a:5c:41:7d:99:e0:2f:3c:e8:74:2f:14:05:
         87:a8:97:ae:6e:ae:4d:67:e7:8b:50:d5:d0:81:f2:40:59:37:
         24:be:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:50 2026 by rpki-client