Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File:                     6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier:          WdCsiII9WHnBuBq8UVx2F/zT1sAqtgj79FRwzrd/lxI=
Subject key identifier:   8A:55:E9:A5:12:1C:BA:51:05:61:C5:EE:10:51:96:F5:FE:6D:7C:1A
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer:       /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial:       12CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number:          12B9
Signing time:             Thu 16 Apr 2026 16:59:39 +0000
Manifest this update:     Thu 16 Apr 2026 16:59:38 +0000
Manifest next update:     Thu 23 Apr 2026 16:59:38 +0000
Files and hashes:         1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: dKOQrogU6VOhFFuZd/0fdCmmGVJ7B/BmJPXyYu4V9/c=)
                          2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: +CoEOPC9ENpdvVSY9T7CJBQL5WVmw+Ihk9P6+ohhARE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4811 (0x12cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
        Validity
            Not Before: Apr 16 16:59:38 2026 GMT
            Not After : Apr 23 16:59:38 2026 GMT
        Subject: CN=69e1157b-0e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:df:5e:83:13:6b:d4:97:38:62:6c:93:47:
                    20:25:f2:dd:5f:c8:d1:4b:fe:fc:3c:d2:ba:da:bc:
                    fd:76:04:06:32:1e:4e:d4:80:17:36:7e:c9:6b:49:
                    b0:f8:4a:0c:93:c4:45:69:b9:15:a6:b0:11:9d:f5:
                    5e:e2:11:c8:19:4d:cc:a0:e1:f7:0c:f4:6b:da:7c:
                    fd:10:68:75:9d:56:44:8c:81:7e:40:c0:0a:72:71:
                    a7:19:cb:d5:37:91:e4:30:79:9c:e4:1d:7a:14:73:
                    a3:68:88:2d:89:20:e9:3f:e5:e0:af:6e:19:bf:16:
                    fb:63:8b:4b:83:c4:78:ce:e2:b1:0c:82:d4:8e:de:
                    7e:84:82:be:0c:6e:56:f2:40:81:e8:4f:57:7b:95:
                    c8:0b:37:50:f9:93:cc:41:cf:d0:49:df:63:b3:2d:
                    db:4f:75:a7:7f:37:43:cf:61:28:37:95:5e:25:72:
                    b3:95:b5:81:1a:da:23:fd:2f:dc:b9:ed:c6:a6:01:
                    ef:b3:72:f0:1a:dc:00:14:35:9b:5f:a0:61:d5:e2:
                    ac:05:f4:d3:db:e4:f3:44:70:43:7b:63:2f:78:1e:
                    5a:a1:35:98:8b:2f:5d:d1:10:3f:c4:73:eb:ce:5b:
                    26:1a:2f:83:27:4a:2a:10:18:88:89:7c:ac:e5:91:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:E9:A5:12:1C:BA:51:05:61:C5:EE:10:51:96:F5:FE:6D:7C:1A
            X509v3 Authority Key Identifier:
                keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:63:9a:c6:df:e8:c9:f2:9f:55:2f:dd:7b:07:fc:7e:d1:ca:
         e8:b9:b5:43:f5:c8:a4:ff:1a:d6:34:b1:db:8c:02:bc:73:73:
         1f:3b:12:7e:67:5e:79:ec:c7:ff:de:19:53:a1:a2:a8:b8:33:
         ee:78:e7:18:16:ae:f8:e0:d4:e6:41:a2:b3:e0:9d:b2:47:47:
         ee:8a:fe:c8:28:89:08:3e:61:8f:12:e1:db:ba:64:1b:4a:fd:
         47:45:29:28:70:db:1f:bf:87:f6:56:11:90:d7:f6:cf:70:5c:
         94:5b:a7:14:01:8c:19:c1:35:fd:79:61:37:4f:84:16:95:5e:
         25:38:54:bf:c9:d4:e5:1e:0d:5a:64:01:20:3e:fe:ce:ea:6d:
         d8:e3:c1:5a:5a:ed:a0:3c:1b:ff:d9:97:03:18:99:1a:3f:9f:
         9b:1c:f1:e1:26:81:bc:2c:98:ac:b9:41:53:39:1a:6f:16:33:
         1d:52:f3:df:1a:47:85:05:9a:07:b6:37:7e:41:36:99:fe:2d:
         e2:d8:27:2d:39:6e:f2:da:24:c7:dd:31:7e:03:0c:cb:48:47:
         52:c7:91:d2:50:7e:fa:3f:5b:3f:69:71:9b:01:09:b4:be:32:
         c5:7e:60:5a:01:c7:5b:72:9c:b0:76:95:72:11:a6:7f:7b:e1:
         f1:00:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:27 2026 by rpki-client