Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
File:                     6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json)
Hash identifier:          vdd31bMII5HSOSCl1bDlRATR4DxHUrjSc2tJJ+/KeJ4=
Subject key identifier:   25:23:61:B2:13:E5:B4:4E:62:59:A7:41:8E:7E:92:33:79:3B:F4:62
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Certificate issuer:       /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial:       2AEC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
Manifest number:          2AD5
Signing time:             Fri 24 Jul 2026 14:20:35 +0000
Manifest this update:     Fri 24 Jul 2026 14:20:35 +0000
Manifest next update:     Fri 31 Jul 2026 14:20:35 +0000
Files and hashes:         1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: 6EB03yzjnUkYcsw5Eut1Za4CPo2MQ9rjT3fI0t9+LPQ=)
                          2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: MOo6ysw+eJIqeER1QE6gwsHoJJj6Kqs69ruABg8PuRw=)
                          3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: DVZpvVCzYkPeBn6vNOBzvpa+mj4OljNKYga2DEkxt5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10988 (0x2aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
        Validity
            Not Before: Jul 24 14:20:35 2026 GMT
            Not After : Jul 31 14:20:35 2026 GMT
        Subject: CN=6a6374b3-5048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:74:ad:be:d5:a5:9a:2d:a9:66:12:04:7e:
                    9e:3d:79:8b:0b:e2:8a:ba:f5:23:5e:a8:ad:9e:86:
                    fa:42:47:ac:7f:06:a4:c6:ed:9c:59:d1:74:99:59:
                    23:49:c2:03:a3:de:16:a2:b0:8d:9f:75:a6:a6:85:
                    a8:be:79:22:20:4a:6f:28:f8:df:0f:bb:03:cd:0d:
                    a0:5f:da:88:a5:bc:04:00:e8:b4:b7:53:40:09:2b:
                    8b:00:94:24:2d:13:11:7d:f0:8f:ea:bf:e0:8e:56:
                    46:63:4d:51:ad:1e:fa:b3:6c:df:9e:b1:df:a7:0f:
                    b1:a0:37:4f:22:b8:b0:a0:9c:b1:82:b1:a0:a7:92:
                    6c:7a:98:ba:ab:fa:c9:b4:7a:0f:71:d4:1b:18:4f:
                    2b:ff:82:04:51:ad:f3:0e:81:d7:74:e0:58:61:48:
                    6b:0b:23:c1:88:1e:73:99:51:07:52:d3:0a:6e:e6:
                    46:6d:10:f8:06:16:37:bd:8b:0e:57:bb:ee:95:2d:
                    eb:3d:46:10:9f:bc:8a:b8:b2:bf:da:c2:7f:8a:1f:
                    37:22:c1:60:10:34:66:7f:37:cc:84:7a:b8:36:8b:
                    eb:c7:89:c7:f3:e8:d3:1e:78:ee:cf:28:31:1f:12:
                    1d:44:d7:8f:72:28:0a:f6:85:ec:6d:da:dd:5d:34:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:23:61:B2:13:E5:B4:4E:62:59:A7:41:8E:7E:92:33:79:3B:F4:62
            X509v3 Authority Key Identifier:
                keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:d7:fe:da:60:b9:09:07:45:7c:86:d8:d1:fc:54:ff:ab:72:
         c1:cf:c9:8e:0e:bf:7e:75:f4:0d:ce:1a:be:1c:8f:ac:e5:61:
         5a:23:2f:9f:65:df:43:c6:09:5d:f3:ed:62:d1:ce:bf:f0:d7:
         72:9a:a6:3f:f6:1b:73:b2:ae:45:3b:6e:ae:f2:c4:32:18:e0:
         44:57:5a:e8:3f:7a:95:7c:22:39:fe:5b:85:b3:c1:6c:c1:25:
         1f:1f:e1:f0:cd:45:0e:ca:72:f1:c2:53:96:b3:44:95:eb:a5:
         1d:fa:12:46:c7:3d:90:8d:58:4d:70:32:32:08:53:bf:5c:8f:
         fb:7d:73:5c:c7:ba:5b:b2:c8:e4:a9:f8:5b:5b:1e:0b:20:dd:
         d1:14:be:7f:f8:aa:08:9b:b2:b3:f3:41:3c:88:bb:ce:a1:44:
         91:9a:59:05:1d:54:bd:10:05:e6:43:f6:90:11:32:e8:fe:17:
         f7:a9:9e:0b:49:82:e6:4b:0f:41:cb:79:7f:f1:29:fc:81:af:
         6e:98:61:e6:6c:0a:de:3a:e8:fe:5d:8a:0e:a7:7c:a9:ce:5d:
         d8:39:05:b4:11:07:22:d1:fa:42:9b:b5:3d:ae:ac:c0:32:1c:
         49:15:c2:fe:ff:69:78:a5:24:5e:63:71:0e:04:04:bd:1f:74:
         b9:f8:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:03:20 2026 by rpki-client