Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
File:                     6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json)
Hash identifier:          NMkWyuNmN/BM5FJ0JZuW+Lhh18KfJtmiiwQzmDtK5zc=
Subject key identifier:   9B:20:2A:B8:2E:C8:8B:04:E9:AF:81:8C:9E:4D:5E:79:46:AC:07:C3
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Certificate issuer:       /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial:       0DE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
Manifest number:          0DDD
Signing time:             Tue 24 Mar 2026 17:43:59 +0000
Manifest this update:     Tue 24 Mar 2026 17:43:59 +0000
Manifest next update:     Tue 31 Mar 2026 17:43:59 +0000
Files and hashes:         1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: U/vkpp9kh6gMgfH6AgTdxLtnw/0XoM+UqgG8CTNaTRU=)
                          2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: 4MHc3bVw/NtrKfjmybu70HNT0EGK7HkVXnBEAVy19Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
                          rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3561 (0xde9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
        Validity
            Not Before: Mar 24 17:43:59 2026 GMT
            Not After : Mar 31 17:43:59 2026 GMT
        Subject: CN=69c2cd5f-198d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:b5:a2:c8:5d:af:f8:26:11:78:4b:f0:9e:
                    4e:54:30:3f:2a:06:f8:45:20:c3:cb:39:d7:49:5c:
                    b8:4a:5e:c1:87:4f:dd:1f:b4:2b:62:7a:51:9c:08:
                    3f:16:9e:e3:91:ef:fb:76:31:09:c6:09:f7:1f:f7:
                    d6:0e:cb:9e:5a:a3:42:b5:33:f2:49:fd:8f:37:96:
                    6b:9f:05:1a:b0:38:f4:5b:43:77:2a:97:31:0b:34:
                    24:99:a9:f2:95:ef:7a:03:3d:7b:52:43:72:e2:96:
                    da:96:d1:44:bb:35:cd:fc:3d:4e:1e:12:0a:79:22:
                    3f:20:fc:a7:28:81:ad:26:bc:00:ab:7d:9a:1f:49:
                    90:30:9a:a6:8b:01:ec:d1:e4:58:2c:b1:55:27:45:
                    69:41:3f:ed:8f:52:b6:6f:61:65:3f:b6:80:d3:71:
                    96:1c:03:2e:be:d9:f7:6f:f1:cb:ca:55:74:53:71:
                    0b:fa:1f:bf:12:49:38:40:7f:02:97:ef:23:08:31:
                    56:04:a6:e4:5b:ce:8f:59:a6:90:21:c0:ca:04:9f:
                    2a:4b:9f:e7:cd:5b:c5:1a:c5:e6:5c:b4:dd:f2:d0:
                    99:66:81:b3:27:eb:e3:de:4d:fb:af:6f:62:a7:38:
                    3b:41:0d:e0:8e:59:bc:fe:45:70:0c:16:61:3c:e4:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:20:2A:B8:2E:C8:8B:04:E9:AF:81:8C:9E:4D:5E:79:46:AC:07:C3
            X509v3 Authority Key Identifier:
                keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:86:56:e9:f4:4b:00:1b:0c:b8:e1:f8:28:a3:06:47:3e:
         3b:6a:2b:c1:af:e0:ee:53:c9:27:ba:04:46:86:97:4a:39:a2:
         f3:00:a9:e2:26:cf:8f:c5:ee:50:9b:d8:e3:d6:46:63:62:67:
         a7:07:0d:4f:65:ac:74:5d:5b:99:f2:3e:7b:2d:8a:46:20:dc:
         99:3e:bc:bf:3e:d0:b8:c9:55:1d:a6:88:14:f8:c5:13:dc:d0:
         fb:a2:e5:c1:88:74:f1:a7:68:d3:5b:98:ce:fb:bb:7c:21:fc:
         0f:f9:69:15:e2:9c:b8:fe:aa:aa:42:c4:00:fc:ad:12:79:38:
         8f:39:5d:11:d8:47:57:8b:f3:e5:92:c7:fc:e1:f0:e8:10:19:
         18:88:40:32:3a:e6:0c:d4:7f:b6:4d:63:28:a0:9a:6c:cf:a0:
         4e:c0:a7:80:73:df:f9:72:36:ec:cd:7e:8e:ce:10:7e:a8:48:
         be:12:b5:cd:b0:8d:ca:4a:ef:48:25:ff:87:29:77:85:7e:36:
         96:c5:90:88:b8:38:2c:ad:47:89:a5:bb:8a:76:0f:0a:94:e5:
         05:dd:e1:09:91:6d:6f:fb:a9:d8:62:19:ea:05:ab:d4:75:b3:
         40:a5:a8:3a:a9:2b:f1:5b:0e:d6:3d:f8:1a:a3:51:ad:74:0c:
         b4:a3:81:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2
MkZDODFGQkQwHhcNMjYwMzI0MTc0MzU5WhcNMjYwMzMxMTc0MzU5WjAYMRYwFAYD
VQQDEw02OWMyY2Q1Zi0xOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHa1oshdr/gmEXhL8J5OVDA/Kgb4RSDDyznXSVy4Sl7Bh0/dH7QrYnpRnAg/
Fp7jke/7djEJxgn3H/fWDsueWqNCtTPySf2PN5ZrnwUasDj0W0N3KpcxCzQkmany
le96Az17UkNy4pbaltFEuzXN/D1OHhIKeSI/IPynKIGtJrwAq32aH0mQMJqmiwHs
0eRYLLFVJ0VpQT/tj1K2b2FlP7aA03GWHAMuvtn3b/HLylV0U3EL+h+/Ekk4QH8C
l+8jCDFWBKbkW86PWaaQIcDKBJ8qS5/nzVvFGsXmXLTd8tCZZoGzJ+vj3k37r29i
pzg7QQ3gjlm8/kVwDBZhPORLaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsgKrgu
yIsE6a+BjJ5NXnlGrAfDMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0
NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy
Y3B3MVlxTkctMjlpX0lINzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWu2GVun0SwAbDLjh+CijBkc+O2orwa/g7lPJJ7oERoaXSjmi8wCp4ibPj8Xu
UJvY49ZGY2JnpwcNT2WsdF1bmfI+ey2KRiDcmT68vz7QuMlVHaaIFPjFE9zQ+6Ll
wYh08ado01uYzvu7fCH8D/lpFeKcuP6qqkLEAPytEnk4jzldEdhHV4vz5ZLH/OHw
6BAZGIhAMjrmDNR/tk1jKKCabM+gTsCngHPf+XI27M1+js4QfqhIvhK1zbCNykrv
SCX/hyl3hX42lsWQiLg4LK1HiaW7inYPCpTlBd3hCZFtb/up2GIZ6gWr1HWzQKWo
Oqkr8VsO1j34GqNRrXQMtKOB3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:30 2026 by rpki-client