Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
File:                     q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json)
Hash identifier:          xdJ+JJdSP1+RMmHBQ7PwSBImF8q2wNY99AbHBL/oW9g=
Subject key identifier:   DC:77:E7:C7:7C:F5:21:BD:C4:3E:AD:FF:51:AC:A6:CD:FB:01:0C:AD
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
Manifest number:          06CC
Signing time:             Tue 24 Mar 2026 21:57:18 +0000
Manifest this update:     Tue 24 Mar 2026 21:57:17 +0000
Manifest next update:     Tue 31 Mar 2026 21:57:17 +0000
Files and hashes:         1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: zVqsLUAZghPs+67rImB9PRJ8NFhKpIR/o1dKDsMaUAg=)
                          2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: DdjZ6jJIRlM0zFTD4fhExwYeqEzrIafQSwbZlhASnAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Mar 24 21:57:17 2026 GMT
            Not After : Mar 31 21:57:17 2026 GMT
        Subject: CN=69c308be-4225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:99:e4:df:25:0f:23:ef:02:87:62:bd:4f:
                    c4:dc:d4:ad:2e:7c:d5:d2:6b:df:d1:03:c9:6b:f7:
                    41:b1:6a:a2:46:02:12:58:8d:c8:ca:72:6a:85:2f:
                    55:0c:23:87:d3:f2:15:5b:78:07:8f:2b:89:87:8d:
                    3f:ed:63:68:79:9c:3e:58:b9:ec:80:60:05:a4:03:
                    60:9f:f2:f2:5a:e2:eb:c4:e8:e1:7e:03:6a:6a:ea:
                    a4:4c:cd:9b:1a:f2:91:64:95:3b:ad:e1:f6:69:d3:
                    13:d4:b9:2e:91:37:d3:a0:a4:62:0a:d5:a4:17:9f:
                    8d:01:d8:a0:8b:ef:1c:61:0e:f2:8c:3b:6b:d9:bf:
                    77:27:e2:bb:22:ce:c0:18:0d:c3:f4:3c:6d:7c:a0:
                    3c:1f:15:d2:02:c9:af:46:56:d4:65:18:cf:73:c4:
                    4e:ab:4a:df:53:58:dd:79:59:df:02:52:40:f3:27:
                    8d:14:5d:b7:c0:bc:46:bd:52:57:f8:97:fc:af:e6:
                    4c:7a:9d:b3:2f:d8:5e:21:e3:99:a9:c5:7c:1c:97:
                    58:42:30:e7:85:ab:a6:b9:5f:25:b0:c4:e8:bc:07:
                    78:73:eb:d7:f8:59:fa:0f:ea:06:d5:74:bc:40:c8:
                    87:f6:3e:80:c1:07:42:80:7f:4d:55:06:e0:6f:32:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:E7:C7:7C:F5:21:BD:C4:3E:AD:FF:51:AC:A6:CD:FB:01:0C:AD
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:89:3e:18:a6:b1:3f:5b:c3:4a:a5:b6:2c:23:0c:ab:2f:b2:
         f5:b0:00:3f:a4:09:99:4d:03:d6:ad:77:a2:6d:ae:c7:2a:43:
         e7:40:83:de:5f:64:79:5e:d9:c1:75:dc:32:d9:d3:e0:dc:aa:
         51:30:ac:cf:38:06:7c:10:ae:98:30:54:de:29:50:87:48:e2:
         d1:4c:7f:0f:20:f3:81:25:27:35:9e:bb:18:66:52:bd:fc:82:
         dd:35:74:9d:ae:0d:de:57:e5:60:e0:5e:5d:64:70:ff:71:5b:
         11:da:46:c2:bb:18:8c:af:20:e6:47:41:d5:ea:55:27:0e:5d:
         fe:35:1b:6b:1d:2c:65:2b:ba:5f:af:ce:71:44:8e:f2:44:7c:
         dd:41:21:a5:4a:05:b3:83:8a:79:d4:0e:fd:cc:d0:e8:4d:27:
         0b:8f:2b:d7:52:4d:1c:ce:54:2a:21:3e:3b:4a:55:de:60:19:
         2a:7f:1c:df:ee:95:1e:d2:3f:e2:83:fc:93:a3:a3:4a:44:ef:
         3d:7d:76:04:96:d9:b5:78:ce:ec:d8:ce:6b:47:b2:8c:2c:d8:
         af:db:20:7b:1e:71:80:5a:27:cc:7a:53:e0:30:16:e8:8a:24:
         c3:58:97:cd:f0:b6:4a:cd:e3:a7:d4:9e:97:c4:96:29:b3:b2:
         34:cb:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:46 2026 by rpki-client