Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
File:                     6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json)
Hash identifier:          jumnaGGphMfecbeNVPKXsw/0jt9ERz3Te9wdaiK6LOw=
Subject key identifier:   73:0E:81:B8:00:0A:1E:26:05:92:01:07:3B:A5:1C:CD:46:CE:D0:01
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Certificate issuer:       /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
Manifest number:          018B
Signing time:             Wed 25 Mar 2026 04:20:21 +0000
Manifest this update:     Wed 25 Mar 2026 04:20:21 +0000
Manifest next update:     Wed 01 Apr 2026 04:20:21 +0000
Files and hashes:         1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: Q2Qgy7vmFLPtBTEsUnog5kxAfMljp3rc5JhdoyBmslM=)
                          2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: D3M6RgEMS/cnXn4C0dQrw4CN7MjJVHae7RPRWxMOHy4=)
                          3: 8F65EB2E222711F1BF2828673E3D8C67.roa (hash: lbA9Px2UoRTadBs1CPvctpCZJJPWkiWDLjTBRVSajVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
                          rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
        Validity
            Not Before: Mar 25 04:20:21 2026 GMT
            Not After : Apr  1 04:20:21 2026 GMT
        Subject: CN=69c36285-822f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:dc:05:a1:a8:24:92:82:ab:46:c3:90:90:
                    4d:c1:98:50:09:78:fd:15:04:1c:0d:5e:60:6e:5c:
                    7f:42:c8:82:73:df:bc:97:1b:76:1e:bc:8f:56:43:
                    2e:b1:a7:8b:4c:bd:51:3a:85:ba:80:29:9d:75:f7:
                    88:d7:85:5e:ea:f0:e8:26:fb:69:50:ff:cc:7d:b8:
                    08:64:01:35:b1:30:e3:e5:87:c0:00:9f:db:f3:e4:
                    47:1f:04:d8:93:64:22:0c:be:b8:06:d0:71:26:2c:
                    ad:f2:7b:62:a9:dd:93:95:4c:e2:9f:67:e1:a7:ac:
                    2f:b1:22:80:da:a7:1b:9e:0f:c3:b8:57:29:c6:71:
                    73:3e:24:a3:2d:b7:02:6b:a4:55:13:42:95:cd:7d:
                    24:2c:dc:44:c4:9d:f0:ad:e9:2f:41:e2:67:98:3e:
                    a9:9e:19:06:57:05:59:44:cb:f2:1d:1e:97:99:e2:
                    5e:c3:a0:7e:31:93:b6:70:57:dd:60:ec:25:b3:16:
                    ad:30:4d:30:43:89:d8:f7:ce:fa:0a:24:81:7a:bf:
                    96:74:de:63:1c:ee:06:25:bc:c3:5b:98:85:8e:5d:
                    6a:24:29:17:b3:24:d4:4f:de:66:10:94:58:98:d9:
                    00:1d:64:f6:6a:b2:2a:f5:40:2f:ef:6e:02:2d:13:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:81:B8:00:0A:1E:26:05:92:01:07:3B:A5:1C:CD:46:CE:D0:01
            X509v3 Authority Key Identifier:
                keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:be:dc:63:51:9b:dc:0e:66:a8:dd:0a:2e:17:f1:c6:05:
         01:b0:5d:85:6b:22:40:96:ce:61:b2:d8:63:3c:dc:92:ff:d6:
         ed:7b:55:3a:3c:00:49:b2:01:41:96:cb:13:c9:00:ca:c0:94:
         41:2e:14:3a:24:0d:81:7f:8e:9b:40:dd:64:1d:54:32:ee:5b:
         90:e6:0f:83:c8:23:e5:fa:27:ee:d7:20:47:8c:82:61:b4:12:
         e9:84:38:b2:e6:1d:db:3a:6d:cc:c0:26:b8:6d:2d:2e:e0:1b:
         0e:8c:72:43:03:98:76:19:85:e3:b3:a5:25:77:e2:a9:67:d4:
         dd:10:d7:3f:eb:ec:9f:7e:b4:fc:78:11:f6:0d:0b:d7:bf:6c:
         d1:c5:e0:e9:c2:ea:3c:f1:3c:e6:1a:4e:97:0c:15:7b:b8:8b:
         98:40:1b:81:f9:70:5a:a8:d5:f0:b8:f8:97:66:75:15:21:8d:
         1d:19:a1:58:93:95:19:20:8e:78:28:61:c5:34:54:5d:06:16:
         87:73:0f:48:7e:08:53:68:0a:0f:87:2e:21:4c:47:03:3a:fd:
         e9:1d:3b:57:55:1b:a9:5e:7c:6f:f9:41:ca:d5:24:4e:c5:d7:
         0b:0f:e9:cb:97:99:c3:db:28:65:d5:bb:00:27:1c:22:ee:cb:
         fc:35:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:32 2026 by rpki-client