Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
File:                     6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json)
Hash identifier:          o0B/RHv+JXl/sZfseOUoYGWdt6US2AhGb3yJUUKQimw=
Subject key identifier:   F0:DC:E4:C7:EB:79:36:F3:B9:99:B7:4E:6B:E7:60:95:6E:20:13:F4
Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA
Certificate issuer:       /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
Manifest number:          18
Signing time:             Fri 17 Apr 2026 08:42:17 +0000
Manifest this update:     Fri 17 Apr 2026 08:42:16 +0000
Manifest next update:     Fri 24 Apr 2026 08:42:16 +0000
Files and hashes:         1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: xqH2oM6aNcGpimqSx6S8WwxJSedzssNCvSDU5HHWqw8=)
                          2: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: fYSO4EkACFFF5hAoMPUl96CHjFMY11d2KjA4W0FFZmw=)
                          3: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA
        Validity
            Not Before: Apr 17 08:42:16 2026 GMT
            Not After : Apr 24 08:42:16 2026 GMT
        Subject: CN=69e1f269-4709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:fa:6a:1c:fd:d3:af:89:20:2b:b7:2d:36:
                    02:e1:0c:c1:61:95:74:41:1f:23:88:2d:77:70:9c:
                    29:16:81:ec:b9:88:21:93:3f:80:68:de:d7:f6:d1:
                    57:c9:8d:7e:1c:7d:f5:37:ce:17:09:be:3f:1b:1a:
                    f8:c1:b9:58:8e:2c:36:8c:70:aa:4d:36:50:2d:ad:
                    98:fb:1d:1d:45:86:aa:4f:dc:e1:d7:a0:c0:64:a4:
                    f9:1f:8d:5e:d2:3b:7e:9a:db:34:09:b8:21:ce:e6:
                    4a:b0:a1:c9:34:70:11:c9:f5:22:19:d4:62:b1:54:
                    4d:7a:87:64:2c:3c:53:19:e1:bb:af:09:e8:b5:b6:
                    25:e7:d4:35:9d:67:5d:b1:4f:89:d5:cc:22:c6:6e:
                    4b:ed:4e:fd:be:a4:f8:84:05:00:5e:7d:e2:67:7a:
                    aa:0b:5d:44:6c:9f:a9:f2:cd:ef:8b:29:a6:6b:96:
                    30:07:e4:f1:59:4a:26:f4:cb:7f:08:2d:30:ec:cd:
                    47:b9:6f:82:05:ae:dd:d0:c5:fd:5e:be:32:7c:1c:
                    10:d1:0b:b0:bd:b5:86:a9:39:94:76:72:12:9b:ba:
                    39:0d:cb:64:bd:69:b2:11:1f:bb:99:c1:fd:6a:ca:
                    3e:05:a9:c9:11:dd:e8:73:a8:c2:68:10:c4:cf:79:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:E4:C7:EB:79:36:F3:B9:99:B7:4E:6B:E7:60:95:6E:20:13:F4
            X509v3 Authority Key Identifier:
                keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:a6:cb:08:6f:fa:e5:bc:12:84:cc:06:0b:95:05:2f:63:
         d6:b2:4e:6d:a8:26:92:44:3e:3a:5a:69:86:ef:25:ac:19:40:
         6f:77:da:8a:bd:07:88:a5:e3:03:57:fe:70:68:e2:a3:ab:bb:
         34:33:17:9e:76:f0:52:fc:9c:25:77:c8:1d:07:b2:fd:a3:6e:
         75:0b:06:89:18:9a:27:18:1d:09:77:d0:e5:5b:8f:d6:8e:2d:
         ab:e4:34:17:3d:90:d2:c7:b6:1b:e7:32:a9:24:12:6d:e8:c0:
         ab:bc:5c:49:5b:0e:f7:b9:b8:61:75:54:6f:d4:80:a7:8c:b4:
         f3:bc:b7:dd:2c:b0:5d:9b:3f:d2:90:f3:dc:e0:f4:04:48:d0:
         7c:74:7a:f5:18:d4:dc:40:9d:fd:41:85:3a:b2:79:82:1c:fd:
         ca:e8:0f:a5:8a:0c:99:45:cc:13:e7:29:85:0a:8b:f2:79:fc:
         10:96:43:2d:9a:5c:28:0f:a3:6d:44:e6:2f:39:08:0b:a9:86:
         a3:7e:9c:2a:28:f3:78:06:d9:3c:d0:14:dd:11:23:a5:90:cd:
         18:98:5b:00:1e:2f:cf:d3:df:47:38:d3:25:9b:06:bd:4e:cb:
         c7:92:c6:0d:1d:b8:81:15:3f:67:c4:48:a0:3e:4e:08:86:7a:
         b8:e2:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:39 2026 by rpki-client