Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
File:                     6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json)
Hash identifier:          7Tfz2KUU1MBJ+luwKSWTOZgk6BjduPeBCG9cFQ42A7E=
Subject key identifier:   52:E6:09:50:CF:39:77:0F:D3:D1:1E:15:26:B6:71:4C:2D:CE:A0:A6
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Certificate issuer:       /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial:       0E02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
Manifest number:          0DF6
Signing time:             Tue 12 May 2026 17:52:41 +0000
Manifest this update:     Tue 12 May 2026 17:52:41 +0000
Manifest next update:     Tue 19 May 2026 17:52:41 +0000
Files and hashes:         1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: OUBSV5V964vLtd56+X4IJEgm0Rlgk5WGft/yMLVYaro=)
                          2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: 4MHc3bVw/NtrKfjmybu70HNT0EGK7HkVXnBEAVy19Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
                          rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3586 (0xe02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
        Validity
            Not Before: May 12 17:52:41 2026 GMT
            Not After : May 19 17:52:41 2026 GMT
        Subject: CN=6a0368e9-8a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:50:43:ed:34:c3:43:ea:62:49:0a:71:08:
                    54:c2:1f:ae:ca:19:c4:a3:83:ac:86:79:cd:87:10:
                    3a:5a:57:04:c5:f1:ed:37:c8:14:21:f5:83:fe:8e:
                    68:ac:9d:ce:f5:9a:47:c8:0d:73:f5:ac:f0:ba:df:
                    74:5e:54:fa:72:50:c5:0d:ee:3f:2b:83:9b:7c:cd:
                    e0:7c:9c:ec:1b:4b:8d:79:f4:42:25:35:bf:5b:32:
                    58:c6:ea:7b:81:a2:9f:b4:25:2d:0a:20:f1:e9:d7:
                    a2:a5:27:5f:b5:57:cb:e4:ca:4b:00:52:0c:9a:7d:
                    39:6f:5f:05:2b:90:ab:9e:7a:52:0f:4b:7c:e6:78:
                    f4:b2:4e:fe:0b:de:9a:93:64:39:fb:d4:25:34:46:
                    8f:5b:b5:f5:c4:81:a8:93:98:e7:ec:bb:a1:ad:a8:
                    33:4f:14:bc:4a:2d:7a:55:27:3d:38:c6:81:8e:f9:
                    76:9d:54:d6:78:47:e7:8f:5b:dd:76:af:52:15:e1:
                    63:7e:64:db:ba:4d:3f:9c:cb:c3:f6:a0:85:14:8c:
                    e8:8d:b3:00:ea:90:10:50:9b:9f:0d:5d:9c:32:5e:
                    f5:37:94:b7:b0:94:de:2f:b0:a5:ba:88:4a:cc:e0:
                    fb:5d:ad:b6:9f:cc:8f:3b:a0:84:f6:79:50:b1:b4:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:09:50:CF:39:77:0F:D3:D1:1E:15:26:B6:71:4C:2D:CE:A0:A6
            X509v3 Authority Key Identifier:
                keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:92:d1:05:59:f2:fe:95:d2:a6:f3:b1:70:c6:34:0e:7d:
         3b:9f:f6:df:08:68:96:37:7c:12:e0:5e:d1:7f:2f:23:62:a3:
         e2:5c:de:58:82:c5:fc:45:56:ff:1d:2f:f9:17:c7:86:40:67:
         d5:1d:63:c5:0f:6a:f7:66:b5:09:4c:ae:34:1a:97:a0:ea:2f:
         89:ee:30:d1:9e:28:59:d5:04:0a:b1:4f:fa:fb:dd:75:d4:e9:
         13:d4:d7:d4:21:40:25:fd:0f:45:03:93:f5:8a:b9:c1:58:ea:
         08:f2:e3:a8:b0:13:fc:a5:5b:ed:ad:a4:db:fd:5d:d0:51:35:
         5c:e9:07:92:df:75:93:cb:35:f6:11:c7:91:a3:77:75:56:b7:
         01:c3:6c:2b:c4:cb:30:6a:98:95:7d:87:03:49:67:49:99:99:
         de:78:cd:76:4e:1a:49:2c:7d:2e:6b:ee:d4:c0:04:95:2b:20:
         31:c2:f7:d9:f1:a0:1f:5c:ad:38:2e:98:d0:4c:83:12:02:52:
         0c:b9:d5:e2:ff:ce:3d:94:93:f6:ef:e3:ef:da:14:4c:78:f4:
         d8:4a:82:e4:1f:e0:d7:dd:77:02:54:ce:16:6b:77:e8:c4:03:
         63:a5:a1:48:a3:87:98:98:5d:03:27:ff:36:f5:c2:05:89:6d:
         42:41:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:26:42 2026 by rpki-client