Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          Cg9EJoX3M5xffgslM/MJabXH9v1oMTT/zsnHzDJ4R94=
Subject key identifier:   72:AA:DB:62:62:3A:06:BE:1B:F2:18:A1:11:E7:FA:1B:59:1A:48:F1
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0DC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0DBE
Signing time:             Thu 16 Apr 2026 17:49:25 +0000
Manifest this update:     Thu 16 Apr 2026 17:49:24 +0000
Manifest next update:     Thu 23 Apr 2026 17:49:24 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: qus2kBToMJmITigmsUNZYz3PnEUEQPezHhoeeIp/Oow=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: 5ZMmyMryQucfNp+56gWj7IUfWmQlJppiEYV0jS6pkCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3528 (0xdc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Apr 16 17:49:24 2026 GMT
            Not After : Apr 23 17:49:24 2026 GMT
        Subject: CN=69e12124-7acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:33:8a:42:c6:50:0f:31:3e:61:51:8f:ba:
                    2f:c8:75:7e:0c:f2:5c:ef:51:71:b4:b8:7d:99:5a:
                    bb:59:17:5e:c2:52:96:03:3a:77:fa:1b:ea:53:59:
                    6b:96:f1:c9:76:6c:7e:7f:e0:b2:33:36:05:ca:7d:
                    99:4a:0f:24:cd:84:77:96:3d:23:5c:ba:a1:53:d1:
                    72:0e:9f:a4:10:10:30:c5:53:cf:a1:2c:61:8e:15:
                    84:34:b2:e2:5e:2a:67:18:75:eb:24:9d:ef:9b:d6:
                    f3:02:88:92:29:c9:db:50:dd:af:96:d8:68:13:26:
                    89:15:10:7d:de:4f:3b:42:60:7f:9b:53:b7:b5:05:
                    49:3f:40:65:06:28:18:00:a6:71:74:f6:2a:09:5f:
                    23:9e:81:69:b6:f1:fe:a8:61:f0:fa:81:30:84:46:
                    cc:8b:dc:fc:01:b0:cb:e6:8b:cc:d3:91:d9:45:f3:
                    fa:39:95:f7:f0:1a:4a:06:e0:6f:84:9b:07:a1:8d:
                    dc:eb:17:74:ec:05:a4:f7:2a:3b:52:96:23:20:a7:
                    6f:90:9a:10:00:03:d1:56:74:51:e1:c5:63:87:5e:
                    79:3a:ff:43:62:10:27:0e:67:ad:03:b4:0c:98:95:
                    c9:de:f4:73:84:f0:d6:9a:d9:fb:4d:51:eb:f8:aa:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:DB:62:62:3A:06:BE:1B:F2:18:A1:11:E7:FA:1B:59:1A:48:F1
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6a:69:d2:5c:72:1f:a1:fd:22:80:9b:b0:e1:4f:a1:64:3f:
         ef:0a:83:03:2c:01:71:85:42:0c:15:c7:6d:5a:f0:1f:ca:ae:
         5c:90:4c:29:7a:6d:4a:d3:1e:a2:f7:b9:2b:49:aa:d6:76:f6:
         81:83:b4:75:e9:71:a0:78:cd:a4:6a:35:6d:85:fb:09:28:c7:
         49:e1:7a:b9:bc:c6:a3:d7:73:5b:59:5b:24:5f:7b:b7:ed:25:
         3d:92:83:0b:8a:8f:f4:44:ce:c4:8c:23:05:8e:14:54:be:7d:
         b2:1b:e2:b1:50:c8:ea:88:37:5a:f8:82:54:fd:e4:6a:7d:00:
         39:db:70:4f:31:33:05:03:cd:e8:a0:c3:05:4b:7b:b9:c4:31:
         ae:75:97:c9:44:39:ad:91:47:f0:6d:87:da:e2:8e:f3:9e:e6:
         81:ce:dd:c3:d8:a7:ec:20:9f:aa:0d:25:ca:71:58:67:f6:2e:
         3c:23:67:61:d3:f5:6c:5a:44:71:e4:5d:bf:51:b4:41:d8:e5:
         9d:84:51:94:b1:73:73:ac:07:cd:17:c9:10:7d:04:12:b3:24:
         30:75:6f:7f:ae:a3:9f:73:9e:c8:b0:14:99:39:eb:e6:16:c0:
         65:28:69:d8:07:f0:8d:a7:cf:f7:2a:1f:5f:cd:26:9c:15:7f:
         b5:72:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:12 2026 by rpki-client