Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File:                     i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier:          uCLNmBPwMTLmB4h2NHmbxyVRXIH3enmEPcDarxMmuT8=
Subject key identifier:   21:8B:0B:D6:ED:59:76:DA:03:B7:01:61:A9:11:C5:AC:F0:35:0F:B2
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer:       /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial:       3567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number:          3566
Signing time:             Tue 28 Jul 2026 14:33:16 +0000
Manifest this update:     Tue 28 Jul 2026 14:33:15 +0000
Manifest next update:     Tue 04 Aug 2026 14:33:15 +0000
Files and hashes:         1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: +5etNLWXrLAkYG7uUfHIN7xi51gmF3vDWp9AiHT0eG4=)
                          2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13671 (0x3567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
        Validity
            Not Before: Jul 28 14:33:15 2026 GMT
            Not After : Aug  4 14:33:15 2026 GMT
        Subject: CN=6a68bdac-1f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:a5:0e:c5:43:81:49:1b:05:aa:52:ac:1c:
                    46:60:16:87:fb:89:f4:ab:c5:0a:96:05:b1:0c:f5:
                    d7:1f:cd:2d:85:43:fa:ec:fd:4a:ce:6e:2a:c9:a6:
                    b3:cb:4e:85:96:e0:8a:36:2a:a6:1f:24:8e:9b:9a:
                    62:0a:57:0a:e7:38:35:35:b4:88:06:73:c8:32:d7:
                    77:6c:df:8f:b0:9a:b0:71:87:19:fd:79:81:e1:6c:
                    f7:4a:d5:c8:7f:ca:19:4e:79:b6:4a:d3:51:a9:26:
                    f8:60:4c:8e:43:85:93:c1:05:e7:ad:4a:b1:76:e6:
                    f5:b1:7d:f1:82:91:ad:29:9f:9f:e8:4b:f3:3c:0f:
                    51:4a:e3:34:a4:20:cb:3f:81:b5:f7:6a:bb:92:3f:
                    05:8e:e6:f1:87:31:73:39:40:70:6b:04:59:85:15:
                    8d:17:42:53:c2:64:f5:09:0a:23:1b:ce:5e:c0:64:
                    cd:6f:5e:e8:5b:cc:04:e7:0c:21:ad:d6:1f:a5:e7:
                    bc:d7:28:f4:2f:81:96:f9:a3:a5:7e:91:3f:94:38:
                    2d:42:9c:98:b7:18:4a:0e:a1:dd:e5:28:95:ea:0c:
                    2e:f4:33:cc:81:ba:82:9a:51:b6:61:88:0c:5a:09:
                    19:f3:f4:5d:f1:27:b5:d5:27:92:18:3c:1c:c6:ad:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8B:0B:D6:ED:59:76:DA:03:B7:01:61:A9:11:C5:AC:F0:35:0F:B2
            X509v3 Authority Key Identifier:
                keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:53:92:67:49:4d:f7:85:c4:39:f7:8a:67:da:94:9a:21:6b:
         67:15:05:e2:b8:cf:56:7a:3c:a9:a2:97:1f:ac:8e:ad:92:5f:
         bc:9a:a7:08:fa:1c:7d:5d:20:8a:7a:36:b3:63:21:56:c5:56:
         b4:ca:21:94:69:f2:d3:63:84:bb:fc:9c:1f:a0:b6:cd:91:50:
         a7:48:5a:57:a7:8e:53:ea:64:fa:24:20:ad:47:0a:bb:56:20:
         af:26:19:f3:10:53:41:da:ab:b1:2a:cc:b2:1d:a6:e0:5a:1b:
         f4:97:50:6e:12:94:b3:11:33:e1:b7:e1:f7:92:65:77:34:f0:
         60:4f:5b:67:1b:5c:38:e9:d2:f8:f6:4b:dd:dc:b5:7f:86:93:
         2d:0e:b3:a7:3d:15:20:9c:f0:1f:de:b8:08:4f:0d:1d:e4:b5:
         da:59:41:9c:37:29:da:a7:e4:e5:99:8f:03:2d:3c:64:b3:63:
         7c:6d:cc:ef:36:1f:1b:85:73:73:73:81:52:f5:56:41:3c:36:
         4a:3f:59:d4:05:02:f5:35:dd:20:1d:0f:1d:3f:9f:a3:46:f2:
         cf:47:1f:1c:41:38:40:91:03:13:62:a1:fc:ae:88:d4:06:d4:
         23:ce:4d:cb:53:08:e5:a4:45:d9:fb:fd:75:42:42:f5:3a:7a:
         39:d3:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:02 2026 by rpki-client