Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File:                     6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier:          4lvAv8vlFp9L/2SowpJgRSP6DflLajsYgYuzlreVmfE=
Subject key identifier:   3F:4D:12:35:81:AB:98:67:D1:42:DD:12:6E:44:21:23:4D:C1:D4:8F
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer:       /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number:          0265
Signing time:             Sun 01 Mar 2026 02:42:58 +0000
Manifest this update:     Sun 01 Mar 2026 02:42:58 +0000
Manifest next update:     Sun 08 Mar 2026 02:42:58 +0000
Files and hashes:         1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: z5W3am50nhZol4MdvNhds7L7d6kuo3jwZNyhT/MFbG8=)
                          2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
        Validity
            Not Before: Mar  1 02:42:58 2026 GMT
            Not After : Mar  8 02:42:58 2026 GMT
        Subject: CN=69a3a7b2-8649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1b:df:e0:a7:85:e3:fc:6b:e8:22:32:e7:0e:
                    30:3c:5a:b9:5d:a4:63:35:73:86:e1:81:be:b8:f3:
                    69:c7:f5:f1:f2:57:06:2c:79:a0:9a:54:bf:2b:f6:
                    fd:d3:c0:8d:99:c3:ed:3a:45:a1:f9:29:36:6f:02:
                    c2:47:e0:55:b6:d4:42:e4:7f:ec:55:13:ec:a2:26:
                    de:0a:83:94:a7:07:20:f5:41:04:79:0f:61:ee:13:
                    35:ab:99:c6:94:d0:10:f1:83:63:4d:9d:d2:43:f2:
                    57:3c:9c:5a:f0:f1:ef:fc:08:62:25:e2:6e:80:30:
                    c4:f7:e7:92:0d:f1:e1:a0:bc:75:4e:cd:42:1c:e0:
                    b3:98:e4:cc:66:ff:f8:3a:56:20:c1:e0:5d:10:7e:
                    d8:9d:d4:05:ff:dd:d1:70:74:da:a0:5b:2d:dd:9b:
                    30:37:33:51:8e:a3:35:55:67:31:22:a9:5d:a3:d8:
                    03:9e:50:b3:f3:b3:f5:2e:67:22:86:b6:86:85:80:
                    74:c8:17:15:b4:df:b0:11:1f:ce:df:b2:68:02:34:
                    73:49:44:05:2b:0d:7a:d7:45:03:4b:71:62:69:96:
                    69:2f:bf:8e:3f:89:f9:b1:63:da:72:95:fc:fe:c1:
                    48:f6:3e:a9:4e:9b:16:8e:11:9a:79:45:0a:df:ec:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4D:12:35:81:AB:98:67:D1:42:DD:12:6E:44:21:23:4D:C1:D4:8F
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:5e:05:f0:92:1b:41:a0:8c:86:46:6f:56:c8:ce:c0:c9:
         ba:b0:da:92:04:e0:f0:05:3a:89:be:74:17:ea:fe:6e:d1:50:
         2c:f7:16:b2:71:e1:b5:2c:d4:a9:7b:81:3a:15:83:72:c0:e8:
         87:ad:48:2b:f6:ba:2f:34:7d:3a:7f:b9:cf:f2:0e:66:b7:14:
         4c:b6:53:ed:d5:85:7d:52:e4:11:8e:47:93:00:ea:6d:bc:7e:
         d8:f4:ba:cf:de:55:ca:c1:20:30:47:5f:16:c8:12:e3:74:12:
         15:ff:0d:b2:20:71:f5:27:4a:4f:d2:0b:63:21:30:30:fa:31:
         61:cf:b9:68:4d:76:e9:54:73:59:b0:e8:01:c8:82:15:4d:8c:
         51:33:66:87:1e:8c:5d:77:2f:95:73:3b:05:64:0b:14:b4:88:
         d5:70:d9:e6:7c:27:dc:c4:b5:64:3b:6e:11:0e:46:e9:e0:d0:
         6b:03:da:4e:ca:7b:9a:d0:42:8e:29:f1:e2:a3:bd:68:f7:9b:
         e8:b4:22:aa:56:a2:54:28:ad:f2:9e:ad:6e:f1:23:ac:2e:6e:
         16:51:ef:6e:c0:e7:93:ed:13:ad:c6:22:14:d3:3a:5e:1b:4a:
         d3:74:0f:0e:4d:4c:5a:9b:30:37:f3:ab:6e:4a:ce:4a:ca:d5:
         2b:a9:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:12 2026 by rpki-client