Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
File:                     6lpgP_sqBA47OEsgYbciJy8KljA.mft (raw, json)
Hash identifier:          rpPfoKe8ECFE8vt0cCct7aL9akwbkBjyQbb/NisXdqg=
Subject key identifier:   42:8B:4F:04:D9:D8:FF:73:BF:5A:A4:1F:1C:07:C2:6F:F9:7D:A4:FC
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Certificate issuer:       /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
Manifest number:          3A
Signing time:             Fri 17 Apr 2026 08:15:28 +0000
Manifest this update:     Fri 17 Apr 2026 08:15:28 +0000
Manifest next update:     Fri 24 Apr 2026 08:15:28 +0000
Files and hashes:         1: 6lpgP_sqBA47OEsgYbciJy8KljA.crl (hash: kNnrtSneogSz7htB2Ju2I5Pm9ZmCh5gJ4Tu33doW0o8=)
                          2: 13C4E664EB7C11F08E054CC1506F56BC.roa (hash: olbzdRL6AsNPeS/zgMXxNELZ6EWkpdF2QWq2F03rVGM=)
                          3: E9AA7826EB7B11F08DB6A8BC506F56BC.roa (hash: QnpiKBICTz8gktVGumWZfFFqtGpL9XWz/57p1aG/fO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
                          rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
        Validity
            Not Before: Apr 17 08:15:28 2026 GMT
            Not After : Apr 24 08:15:28 2026 GMT
        Subject: CN=69e1ec20-7e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:73:ab:d9:8c:55:ae:7f:a9:c0:a1:23:1b:
                    9d:e4:12:5d:d0:f3:46:4f:61:13:28:95:31:ad:f9:
                    7d:0d:3d:59:bf:fc:b5:25:fa:3e:14:e9:20:05:eb:
                    57:16:2a:82:1e:80:45:3d:e8:20:b0:fd:00:6f:47:
                    d3:68:50:67:12:67:67:22:72:5f:71:36:fe:72:54:
                    e6:10:96:52:19:59:26:4d:9a:24:00:e0:d2:45:69:
                    b7:a3:8d:58:32:b8:e8:c0:01:e6:70:09:19:75:a3:
                    ec:18:51:d0:0d:ab:d4:ea:c8:8d:70:8b:f9:9f:e9:
                    ac:d6:bb:51:4b:a3:1d:fd:63:dc:26:85:17:7a:9d:
                    a5:74:22:21:95:9d:84:b3:51:e0:6f:32:84:31:20:
                    a7:a8:7b:32:4f:a0:53:d3:77:5c:4f:b5:88:d0:e2:
                    f1:a1:e9:4a:c9:64:df:7c:90:91:3a:29:72:63:cd:
                    f8:a4:63:36:b9:7b:48:a6:a0:fb:09:05:de:23:a3:
                    ba:aa:3d:f1:83:57:12:cc:a7:b0:27:3e:f1:5f:04:
                    5d:e1:68:b5:79:d5:6a:aa:1a:d8:e8:31:1a:02:7e:
                    74:d5:15:07:c3:91:c5:77:14:fd:65:00:2c:59:6e:
                    72:52:19:37:e2:52:86:df:d2:bb:84:60:33:5b:ab:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8B:4F:04:D9:D8:FF:73:BF:5A:A4:1F:1C:07:C2:6F:F9:7D:A4:FC
            X509v3 Authority Key Identifier:
                keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:00:e9:eb:10:0e:54:4b:63:56:6d:32:ab:b1:cd:36:53:
         49:f5:65:a5:d1:96:c8:98:13:f6:64:f6:fd:e6:fc:9d:0c:fb:
         b3:9c:f1:06:ce:52:67:ac:30:8b:98:d7:43:83:23:b5:28:ce:
         c6:c5:8c:de:44:2f:71:38:58:84:56:fb:32:81:92:b6:ac:2a:
         c8:eb:b2:90:af:2c:bd:bd:de:9e:87:21:e5:18:6b:7e:6b:57:
         9a:c0:59:eb:04:7f:8f:56:25:b7:7b:f8:71:d3:9c:e2:ad:cb:
         6f:ff:60:01:35:f3:55:a1:b4:61:bb:ff:df:d3:6a:96:34:0f:
         91:34:32:8e:81:f0:a2:a7:5f:4f:60:9c:2f:48:a4:d1:de:88:
         85:8a:3a:ec:94:b8:f9:ff:83:c4:0f:ad:83:e1:19:bc:da:85:
         c4:b7:30:e5:f2:c3:51:be:32:da:99:f1:de:34:70:1a:23:da:
         7d:95:76:98:1d:c8:71:b7:16:04:26:47:ec:87:74:71:ab:8e:
         30:bd:d0:ae:33:93:11:27:ff:f2:d3:fc:10:7b:78:34:0a:e1:
         9c:60:9e:ff:68:cd:1c:17:56:46:43:d3:db:11:8a:38:1a:14:
         67:af:39:9b:cf:05:c9:66:96:83:6a:2d:33:1a:dd:36:34:4a:
         e1:ea:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:33 2026 by rpki-client