Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
File:                     df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json)
Hash identifier:          LFYEMB9R3uaqbSvH4EcVugdW1rsLA91zACaHD54P+Vc=
Subject key identifier:   22:13:4A:73:E5:A4:E0:CA:7B:C0:58:38:BC:2E:7E:73:CA:65:6B:79
Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
Certificate issuer:       /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
Manifest number:          D6
Signing time:             Sat 13 Jun 2026 06:49:51 +0000
Manifest this update:     Sat 13 Jun 2026 06:49:51 +0000
Manifest next update:     Sat 20 Jun 2026 06:49:51 +0000
Files and hashes:         1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: /cMdz1zl37oLX53jllO/j8lpWc7yg9gxihWoAAdxV4g=)
                          2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
        Validity
            Not Before: Jun 13 06:49:51 2026 GMT
            Not After : Jun 20 06:49:51 2026 GMT
        Subject: CN=6a2cfd8f-4650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:8a:35:a8:7a:3e:cc:fe:60:4e:7d:2e:24:
                    da:54:55:5f:e6:94:64:0f:6a:f3:69:67:87:f5:09:
                    b7:48:95:38:fe:97:1d:76:5e:78:57:66:41:fb:85:
                    7d:8f:b7:00:ef:d0:5e:51:3e:9d:8e:b5:2c:6c:11:
                    6b:2c:9d:26:7f:2d:1b:33:10:bc:23:5d:f3:1a:72:
                    3c:d7:fc:b7:3e:61:c8:21:ab:0b:13:bd:3a:7f:97:
                    ef:e8:22:83:af:08:3c:e1:d2:b2:37:41:4d:1e:8d:
                    55:72:3e:6e:fb:04:eb:4d:6f:77:af:30:2e:be:15:
                    8c:6e:43:8a:05:d9:ac:6a:df:3f:e4:3b:2c:1f:be:
                    a5:27:d9:bf:f8:b6:47:a2:25:61:20:01:35:f5:67:
                    8c:6b:c9:a8:07:95:19:3c:35:84:db:42:40:14:c9:
                    1d:de:25:27:5a:bb:e4:fa:6d:6b:cf:36:53:1d:44:
                    93:51:c7:08:24:65:fe:32:62:be:f5:2e:58:d1:b9:
                    ff:08:ed:a9:dc:4b:ff:79:96:5b:90:de:4a:4d:fc:
                    01:84:71:6b:a4:53:76:77:f2:aa:91:b8:48:b9:ab:
                    b9:11:0f:45:48:b1:b5:55:43:41:c1:4f:03:61:28:
                    d3:b1:43:78:c1:a5:21:65:13:20:c0:79:51:79:ac:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:4A:73:E5:A4:E0:CA:7B:C0:58:38:BC:2E:7E:73:CA:65:6B:79
            X509v3 Authority Key Identifier:
                keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6f:ce:93:14:a4:f5:b7:e1:9a:8a:45:1b:1f:6e:68:df:4e:
         91:63:f0:cc:0b:b4:ed:39:4d:27:a4:14:20:7b:7d:8d:12:70:
         45:56:32:f8:d4:fa:47:dd:43:12:40:74:ec:c9:43:34:f3:5f:
         03:ba:35:2e:de:4c:a7:a1:32:df:5e:e1:f8:6a:6b:e6:c7:c9:
         7c:c5:38:c7:46:fc:45:bd:b0:49:4f:ec:ac:94:32:63:43:b9:
         84:ad:79:c3:10:68:b1:0d:df:45:0a:22:94:f0:c3:a7:7e:f6:
         7d:1a:6a:c5:8f:f8:0b:2f:3d:f7:0e:c5:e6:50:8b:61:af:d4:
         ba:19:d5:f3:4f:8b:2b:9e:2b:d3:53:c7:84:d3:b6:f8:65:2d:
         3e:30:1b:33:4e:b4:07:ba:45:c9:fe:6e:9a:20:76:50:d1:74:
         3a:21:3f:e3:4b:6c:5e:51:74:59:d5:de:86:97:ae:b9:a8:fb:
         c0:d5:c3:ed:64:18:66:0c:5c:0f:e2:03:3d:df:a2:0b:c8:ef:
         32:ba:1c:25:88:de:ea:95:f5:f3:a2:29:99:71:fc:da:f4:26:
         22:4c:10:4b:c4:87:18:57:41:a4:75:8d:f6:c5:12:3b:c4:cb:
         65:08:a8:7d:38:b3:e0:31:dc:84:57:69:35:7a:ce:4b:26:5b:
         02:7e:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:23 2026 by rpki-client