Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
File:                     6_vUy5tYrAgtPzgph6WXpYyWupE.mft (raw, json)
Hash identifier:          9+AQq2e/w6VphW3VHWgieYWCDiO5iX1rBjlUPFevQ54=
Subject key identifier:   2B:89:A6:71:C3:F5:6B:2D:09:F8:E5:8F:61:9C:D2:58:29:9F:14:6E
Authority key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91
Certificate issuer:       /CN=A91EFCFF/serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
Manifest number:          0126
Signing time:             Fri 17 Apr 2026 05:23:50 +0000
Manifest this update:     Fri 17 Apr 2026 05:23:49 +0000
Manifest next update:     Fri 24 Apr 2026 05:23:49 +0000
Files and hashes:         1: 6_vUy5tYrAgtPzgph6WXpYyWupE.crl (hash: Toi/4i8wF7G+933B4g7WQ9yRuIgCZwHyl8GcjZ3mIrU=)
                          2: F042F19A911311EF9A1A7F54C4F9AE02.roa (hash: IYfrmkXj2ACflCUxznIdR4k4x5Hn31JP6Azde1AKBz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl
                          rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFCFF, serialNumber=EBFBD4CB9B58AC082D3F382987A597A58C96BA91
        Validity
            Not Before: Apr 17 05:23:49 2026 GMT
            Not After : Apr 24 05:23:49 2026 GMT
        Subject: CN=69e1c3e5-05ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:c7:ff:7d:a9:32:a6:1f:fd:fe:7f:13:28:
                    db:c1:1a:80:c2:ce:89:2c:bf:d1:15:75:82:4a:df:
                    4a:7b:57:3d:4e:be:00:bf:07:29:14:4d:00:4a:88:
                    15:39:70:e2:e7:95:8d:00:da:8f:14:2f:9a:5d:9f:
                    7e:4e:e5:4e:fb:b7:8a:f2:46:6a:53:5c:ba:7d:ff:
                    ed:5b:32:57:ca:b6:d7:3f:17:88:f6:2a:60:4d:dd:
                    0d:9e:62:50:8b:f5:1d:1a:50:ac:ea:20:4f:79:f4:
                    fc:2c:dc:d0:8d:d6:7a:b7:b4:2e:0a:ed:3d:f6:6a:
                    ea:ec:9f:d8:8a:e2:3f:af:cc:49:61:51:dd:5e:7b:
                    45:61:50:9d:b4:22:a9:58:64:cc:20:72:d3:51:fd:
                    8a:34:c0:ed:f8:43:29:9f:99:07:12:19:80:08:c9:
                    af:b5:2c:19:ac:d4:81:71:3e:de:ed:0f:de:81:00:
                    a7:f6:1a:5b:8e:d8:bf:50:d4:79:df:30:8f:ad:83:
                    13:f2:2d:45:04:d4:c3:35:ce:49:95:86:00:f6:03:
                    66:47:d3:af:dc:30:c8:6e:6e:7c:d7:f9:36:0e:51:
                    50:46:d3:85:86:76:f6:49:50:e0:ce:18:0b:b0:89:
                    4c:56:20:d4:70:7d:04:dd:f3:b7:38:ba:77:61:21:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:A6:71:C3:F5:6B:2D:09:F8:E5:8F:61:9C:D2:58:29:9F:14:6E
            X509v3 Authority Key Identifier:
                keyid:EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:4b:18:44:32:35:fa:4a:b8:8c:79:1b:f5:6f:b2:28:4f:
         99:1a:91:f0:e5:0a:ab:cf:af:c0:f1:9f:bb:44:db:3a:8f:b0:
         5d:da:08:5b:ba:c6:55:8d:df:f1:5e:84:a5:39:f5:fb:bf:57:
         06:0f:84:20:c6:4e:a2:c2:b1:6d:8e:9d:11:16:77:20:07:2c:
         1e:8f:64:c3:4a:63:2e:ce:0a:b5:6d:e8:88:55:7b:f2:93:21:
         b4:6c:2f:bf:f3:75:0a:2c:42:0d:d0:86:6d:50:3a:8f:cb:97:
         4c:6e:63:72:25:34:9e:0b:cd:5a:89:dd:30:f2:91:ea:b2:59:
         2f:ef:d9:98:b2:eb:16:8e:1a:fc:43:a9:43:e4:dd:0e:b9:da:
         19:4e:b6:e5:3f:e7:e2:c2:5c:cc:88:4f:55:cd:80:c3:87:75:
         33:4d:7c:eb:3f:a3:c3:37:d9:d6:6e:ef:58:2d:c7:6f:90:79:
         8a:44:d2:ea:df:c3:c1:58:95:73:d7:70:03:93:96:79:a9:3d:
         3e:14:d5:da:39:67:54:f2:02:78:b6:0a:ef:fd:ae:1d:91:f2:
         12:80:0b:b8:06:2c:a5:6e:cf:6b:e7:34:a3:f9:a4:bb:a7:18:
         fc:16:07:8d:21:ea:b8:a8:e0:4b:98:45:8b:cb:3b:c8:76:d1:
         51:49:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:44 2026 by rpki-client