Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
File:                     --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json)
Hash identifier:          t42W/DMbGkknOZT87qQUC2MSs0p5CDzmanq8vfhOY/k=
Subject key identifier:   50:D1:06:5D:31:1D:0F:B4:81:27:8A:B8:D0:C5:B8:E7:56:4E:CE:D7
Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Certificate issuer:       /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
Manifest number:          1F
Signing time:             Wed 13 May 2026 09:01:51 +0000
Manifest this update:     Wed 13 May 2026 09:01:51 +0000
Manifest next update:     Wed 20 May 2026 09:01:51 +0000
Files and hashes:         1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: h5fOv+D8s178zNi+4bqgDxqaQHELNzC2TwDhGSkVhbs=)
                          2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
                          rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
        Validity
            Not Before: May 13 09:01:51 2026 GMT
            Not After : May 20 09:01:51 2026 GMT
        Subject: CN=6a043dff-7064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:41:33:79:55:74:d8:4e:a2:e2:11:b0:8d:
                    a7:61:8e:90:92:9b:ca:cc:f7:c2:df:60:bf:61:54:
                    c6:a0:60:55:b3:97:aa:2a:a2:61:33:da:c9:50:36:
                    ad:bf:5a:42:b5:e2:5a:57:57:4d:e5:0b:89:b4:86:
                    ed:cc:fb:e3:e6:7e:29:d2:e9:89:00:0f:c6:a0:32:
                    fb:5c:03:fd:df:81:42:3d:7c:ff:e1:e1:fe:63:16:
                    07:4e:17:99:56:d4:d2:7d:84:c1:ca:4c:85:e6:f8:
                    3a:e4:2d:69:b4:84:ce:d8:9c:37:4a:31:73:d4:4c:
                    98:48:a4:bf:f2:65:54:86:76:ba:8a:a8:a3:3d:51:
                    aa:56:c6:a8:e1:20:e2:6d:6a:e1:09:f9:75:19:a3:
                    67:f2:d9:20:20:87:91:e9:a1:1e:ab:d8:a0:be:e0:
                    2c:ca:2e:f6:0e:a3:9f:19:5f:e4:b3:d6:2d:a4:1a:
                    fc:90:3f:e1:ef:4d:6f:65:b0:6f:18:7a:b4:1e:39:
                    39:45:87:66:74:f1:69:5e:33:16:b9:cc:8a:a8:dc:
                    47:7a:27:98:27:14:ae:6b:e3:f1:7a:28:c4:1b:3d:
                    50:d8:d7:45:49:f0:0d:5a:ff:f8:0c:a4:f8:99:27:
                    7b:73:cd:6f:ae:61:15:89:d7:32:51:af:84:b0:04:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:06:5D:31:1D:0F:B4:81:27:8A:B8:D0:C5:B8:E7:56:4E:CE:D7
            X509v3 Authority Key Identifier:
                keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:54:87:7f:68:76:74:be:f0:f4:e6:81:4e:00:49:84:d7:
         2c:44:44:12:5c:0a:82:3c:ad:50:32:b3:35:87:82:ae:e9:26:
         05:f8:06:6c:66:91:24:76:a1:11:dd:08:43:8c:a7:34:bf:70:
         e3:be:b6:ac:9a:b6:17:1b:f8:0c:25:e3:e3:29:24:c7:7f:2e:
         34:7c:60:4b:46:95:8a:c3:83:7b:2c:b1:91:70:19:51:9a:b8:
         26:42:34:bc:0b:25:59:87:63:f5:71:df:63:e5:80:bc:cf:ac:
         07:61:fe:89:2b:ba:70:d4:67:29:79:3c:7a:b4:4d:17:da:c0:
         71:55:dd:76:c0:80:5b:85:c0:21:0b:f9:64:c7:06:31:a9:29:
         18:c5:cb:d3:ab:69:9a:9a:81:30:37:85:f3:f3:d0:58:f0:d2:
         ab:2b:c4:f8:dd:70:a9:b9:91:e0:95:cd:3c:f5:1a:f7:dc:3d:
         80:5d:59:11:1e:e0:3b:83:67:a5:56:82:59:7c:b3:df:1b:4c:
         0f:fa:14:0c:01:8b:1f:6f:dc:ef:f8:e0:28:46:5b:f1:27:c3:
         af:9b:93:de:7c:4b:7a:0c:07:69:db:95:0f:1e:01:b7:b2:1a:
         74:5c:68:e3:f4:af:37:38:2b:b0:1b:61:03:04:67:a6:d2:9d:
         51:e0:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:12:47 2026 by rpki-client