Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
File:                     E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json)
Hash identifier:          oT1iIFPkGAK1kNjHBZTXbsIuJCoO1nIHSxuMqTedmxo=
Subject key identifier:   68:8A:74:62:90:0E:07:A9:87:80:71:EC:94:32:3F:15:20:75:3F:67
Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D
Certificate issuer:       /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
Certificate serial:       09E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
Manifest number:          09DB
Signing time:             Thu 16 Apr 2026 19:47:28 +0000
Manifest this update:     Thu 16 Apr 2026 19:47:27 +0000
Manifest next update:     Thu 23 Apr 2026 19:47:27 +0000
Files and hashes:         1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: mr66s9KWqMOnDnTdBjmSIoiqDUbx8DwIrRtanSV+j7M=)
                          2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: SVzX59W+CPv65LLMpCc6LvlXAGdMvOIsb6gRbCn0mAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
        Validity
            Not Before: Apr 16 19:47:27 2026 GMT
            Not After : Apr 23 19:47:27 2026 GMT
        Subject: CN=69e13cd0-6f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:e0:9a:03:33:8a:8e:f5:83:4c:84:af:40:
                    ad:b3:86:a8:9d:f9:84:c5:c0:b5:0c:cb:e4:72:c4:
                    ed:8d:58:71:4f:fb:c7:10:23:e1:16:83:29:69:33:
                    a7:4d:35:35:ed:b2:81:1f:04:d5:75:f0:62:04:c6:
                    34:9a:66:0f:55:bc:81:08:76:67:76:bd:5a:44:54:
                    65:3e:de:69:e9:42:3b:86:ad:ee:f6:c5:54:aa:eb:
                    62:d7:29:18:ea:12:77:c0:84:f0:9b:90:a7:16:3c:
                    06:fd:c4:ef:cd:69:df:02:99:84:05:d3:07:74:d2:
                    e4:27:66:53:6f:6d:4a:d1:9b:0c:1b:2a:c8:86:45:
                    b2:5f:62:e4:99:2d:4f:e4:9f:55:2c:31:a0:63:7b:
                    f3:d6:6a:9b:95:c4:26:49:86:a0:9b:b7:d8:ec:50:
                    e1:ad:58:47:56:1a:39:18:9e:e3:8d:d6:5c:0f:ec:
                    48:7f:1d:f8:07:07:ee:ff:42:88:76:3d:a3:4a:4e:
                    03:df:6e:e5:87:73:27:67:08:ec:60:c4:60:e3:2d:
                    9d:45:ce:d0:3c:81:79:69:03:fc:e5:2c:83:95:97:
                    57:e1:37:90:75:bb:54:3e:13:38:a8:8c:b9:0a:7b:
                    1f:da:6c:b5:0b:75:01:f0:e9:cf:da:e1:aa:a8:7a:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:74:62:90:0E:07:A9:87:80:71:EC:94:32:3F:15:20:75:3F:67
            X509v3 Authority Key Identifier:
                keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:9d:66:d7:1a:c3:fc:da:86:6e:56:6b:b5:95:67:ff:e3:
         40:12:46:5c:8d:75:74:63:27:28:b0:14:aa:bf:71:d3:64:35:
         cb:8d:53:16:08:56:96:52:e8:ad:7b:df:76:d2:2c:8f:50:20:
         13:c3:72:dd:24:5e:93:8a:19:98:55:db:e0:a4:4d:d8:5f:be:
         37:23:93:75:7f:bf:2b:b6:da:08:02:f7:8f:84:21:5f:92:b3:
         50:7c:93:d9:27:a6:34:5d:36:f1:15:7c:a1:66:b7:25:64:76:
         e3:d8:c2:01:50:b2:bb:60:70:41:51:85:e9:a5:94:a4:d6:71:
         c2:d9:a0:c3:05:72:f3:32:ac:af:02:86:1d:7f:14:40:81:ff:
         b7:93:f7:c6:e7:c4:ec:91:6d:19:47:71:06:9e:71:d6:bd:b2:
         09:f0:de:7d:c0:c8:28:f1:c1:40:67:ed:93:4e:3f:10:59:00:
         16:41:57:d1:69:61:cd:64:38:94:6b:c2:2a:a5:8f:96:80:11:
         67:f5:bb:3b:df:3f:e0:2f:eb:c6:16:cb:5d:71:bf:e6:48:6c:
         a9:e9:ae:85:76:09:6b:bf:ef:37:6a:b2:11:56:fc:3e:27:61:
         7a:7d:07:d8:16:dd:e4:ed:09:7f:b2:2c:a6:cd:cb:27:fe:27:
         41:aa:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:21 2026 by rpki-client