Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File:                     6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier:          f2cKWXbZYOBTp5Yb5+dMx1aLSSa9a/lvjWCVz+4hoPY=
Subject key identifier:   CA:4D:5E:41:A7:AB:0B:05:32:CA:12:67:64:84:6E:16:95:D4:21:83
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer:       /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number:          0317
Signing time:             Wed 25 Mar 2026 00:48:21 +0000
Manifest this update:     Wed 25 Mar 2026 00:48:20 +0000
Manifest next update:     Wed 01 Apr 2026 00:48:20 +0000
Files and hashes:         1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: VIIA62dzoekSrxwoi6+ow6/xrjHQ+t4sdRMdEl+ajE8=)
                          2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: 9pyk61d8cpOYY/9bR1+9dkSENPysOmYNLIQsHypTK/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
                          rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
        Validity
            Not Before: Mar 25 00:48:20 2026 GMT
            Not After : Apr  1 00:48:20 2026 GMT
        Subject: CN=69c330d4-f9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:a6:66:e8:74:b5:6b:5d:d6:63:d2:32:08:
                    09:15:4e:9e:4e:ac:58:ad:bc:bd:e4:a5:f0:9e:8b:
                    5d:7f:97:39:c9:1a:24:49:14:35:bd:bf:b7:ff:47:
                    25:d3:31:72:b0:5e:c2:97:ae:d4:7d:95:9c:12:08:
                    23:fb:d0:b8:7a:74:0e:0c:0e:29:90:32:8b:dd:5a:
                    79:ee:ac:18:ed:39:14:b2:77:da:6f:8d:64:c2:5a:
                    81:0a:51:0c:22:11:b1:4c:e1:2b:32:65:a6:60:8b:
                    36:ed:5f:d4:31:10:5b:3e:07:7d:87:ea:37:8d:01:
                    6b:57:89:3f:e7:30:d4:0c:dd:fc:57:9d:81:90:7e:
                    53:93:61:b2:b7:e1:af:91:76:89:06:ce:8a:96:ae:
                    48:51:69:4a:ab:30:d8:0a:91:3b:d4:36:18:96:2a:
                    01:2a:22:61:44:44:49:c5:73:27:f0:c7:dc:4c:31:
                    5b:47:e5:dc:c1:10:e4:f7:92:f0:d1:9e:94:ea:79:
                    e3:9d:5e:97:8f:f2:31:89:f1:de:92:8c:64:e7:2e:
                    08:bb:78:0e:13:c5:fa:70:9e:3a:f4:53:52:f7:16:
                    3a:37:7e:09:fc:31:99:f8:83:f3:22:f1:99:f9:8c:
                    f1:9a:55:af:6b:da:11:ea:d2:9e:3a:4b:56:6f:49:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4D:5E:41:A7:AB:0B:05:32:CA:12:67:64:84:6E:16:95:D4:21:83
            X509v3 Authority Key Identifier:
                keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:40:0d:0e:d7:1c:7f:8f:e3:d9:08:70:b1:a7:f2:53:c8:
         c6:a4:ac:31:1b:a7:12:66:b3:15:b6:87:66:21:d0:30:e8:95:
         2d:63:82:6d:e3:22:70:ff:2e:b4:a5:f5:47:0f:d3:43:a1:54:
         cc:ea:40:25:78:ae:68:0d:e6:4d:04:ad:f3:c8:7c:8e:1f:d9:
         29:f3:89:f7:77:93:68:67:36:04:b5:7c:e1:cb:fc:fd:10:d9:
         03:8f:75:c1:8d:9b:07:4f:f9:d7:25:b9:bc:51:53:fc:32:e1:
         f4:3b:a5:64:58:30:69:71:ed:db:c5:1f:5b:1a:5d:95:2c:5a:
         1f:89:c2:6a:6e:32:93:ae:e9:a3:48:1e:15:ed:fa:02:cb:2c:
         ec:9d:94:4d:50:f4:38:67:dc:19:8d:d7:2e:52:f7:7f:fd:15:
         3b:c4:7f:80:b8:9f:52:71:a7:58:32:07:22:fe:38:59:11:92:
         b7:f5:db:34:06:f2:8b:90:e5:81:ab:7b:cf:70:ba:b9:76:2f:
         19:dc:bc:99:c2:db:43:8c:25:a9:e2:26:11:84:b0:5c:bf:6a:
         3d:2b:84:ce:0b:46:11:28:60:13:42:50:ec:3f:ab:80:3b:f1:
         4a:94:1b:7f:27:c7:86:16:44:4f:1b:f8:8a:4c:70:6c:9c:a0:
         8a:b6:4e:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz
RTk5N0Y0RDAwHhcNMjYwMzI1MDA0ODIwWhcNMjYwNDAxMDA0ODIwWjAYMRYwFAYD
VQQDEw02OWMzMzBkNC1mOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst+mZuh0tWtd1mPSMggJFU6eTqxYrby95KXwnotdf5c5yRokSRQ1vb+3/0cl
0zFysF7Cl67UfZWcEggj+9C4enQODA4pkDKL3Vp57qwY7TkUsnfab41kwlqBClEM
IhGxTOErMmWmYIs27V/UMRBbPgd9h+o3jQFrV4k/5zDUDN38V52BkH5Tk2Gyt+Gv
kXaJBs6Klq5IUWlKqzDYCpE71DYYlioBKiJhRERJxXMn8MfcTDFbR+XcwRDk95Lw
0Z6U6nnjnV6Xj/IxifHekoxk5y4Iu3gOE8X6cJ469FNS9xY6N34J/DGZ+IPzIvGZ
+YzxmlWva9oR6tKeOktWb0mfCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpNXkGn
qwsFMsoSZ2SEbhaV1CGDMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD
OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4
UFZOWDgzREhaWmMtbVg5TkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFZ5ADQ7XHH+P49kIcLGn8lPIxqSsMRunEmazFbaHZiHQMOiVLWOCbeMicP8u
tKX1Rw/TQ6FUzOpAJXiuaA3mTQSt88h8jh/ZKfOJ93eTaGc2BLV84cv8/RDZA491
wY2bB0/51yW5vFFT/DLh9DulZFgwaXHt28UfWxpdlSxaH4nCam4yk67po0geFe36
Asss7J2UTVD0OGfcGY3XLlL3f/0VO8R/gLifUnGnWDIHIv44WRGSt/XbNAbyi5Dl
gat7z3C6uXYvGdy8mcLbQ4wlqeImEYSwXL9qPSuEzgtGEShgE0JQ7D+rgDvxSpQb
fyfHhhZETxv4ikxwbJygirZOUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:27 2026 by rpki-client