Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          uYWKrL2SCWOtltlDYLWL9b4B+tntZVNg96X3n+aTReU=
Subject key identifier:   56:71:97:FD:99:CD:44:6B:3C:94:13:C7:10:0C:EB:75:6F:C8:6A:08
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1BAF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1BAA
Signing time:             Tue 24 Mar 2026 16:10:56 +0000
Manifest this update:     Tue 24 Mar 2026 16:10:56 +0000
Manifest next update:     Tue 31 Mar 2026 16:10:56 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: SWHL3pg2zqamTFOgymZiQTaHkYZreDc6izk6zW1kmUY=)
                          2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: t80tcfh1wapFWD/hgCnkYH948NOtpZNQBi/Hg1KijJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7087 (0x1baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: Mar 24 16:10:56 2026 GMT
            Not After : Mar 31 16:10:56 2026 GMT
        Subject: CN=69c2b790-764d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:51:4d:32:36:a3:5b:cd:2c:88:fe:47:04:48:
                    43:af:bc:22:4b:fa:11:33:c7:31:71:76:23:d2:b8:
                    e9:f6:c4:bf:57:d8:5e:af:6f:c7:5a:29:67:22:e0:
                    b9:f1:92:c8:fe:3c:5d:10:c0:f1:f5:f4:70:05:b5:
                    1c:32:c9:77:3f:68:a4:28:6f:a0:73:39:6d:74:ab:
                    ce:75:3b:db:d2:5a:5e:2e:db:e3:7e:27:b3:fb:54:
                    3e:8e:0d:39:c1:8b:09:53:75:be:00:c6:2b:00:a2:
                    51:04:cd:0b:7a:2b:40:7d:1f:5e:54:f5:94:bc:ea:
                    38:ac:b5:63:59:9d:48:03:ee:2a:21:11:90:d3:27:
                    6f:61:51:a2:b6:e8:ef:7e:7c:04:ad:27:8a:3a:80:
                    a4:1f:36:3e:a7:55:05:b8:af:be:9e:97:4f:cc:21:
                    9d:d9:07:cb:2c:94:f9:f8:5e:00:b4:14:b8:05:0f:
                    e1:b4:2c:a4:81:5d:ac:15:7c:2e:a4:20:1c:05:cc:
                    8e:3a:d1:0b:eb:8b:4f:7c:19:0e:ff:1a:de:bb:fc:
                    7f:bb:96:18:bb:f5:c9:d4:57:e0:32:e2:75:a0:44:
                    3d:ef:af:94:a8:b5:95:78:1f:28:d1:07:6b:17:54:
                    b5:2b:b7:cd:49:46:25:c0:22:70:bf:3e:78:06:85:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:97:FD:99:CD:44:6B:3C:94:13:C7:10:0C:EB:75:6F:C8:6A:08
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:a1:b7:a5:d1:fa:50:df:58:bf:f8:28:e2:c9:40:05:30:
         b0:4d:31:04:75:fe:d9:78:bf:a4:34:d8:91:5d:1a:ed:fa:d1:
         c4:65:9d:0c:9b:91:fa:27:0b:28:67:f2:70:1c:f5:ca:88:e7:
         34:c9:11:93:a0:2a:c7:fa:3e:67:92:3f:e3:b6:2e:ed:45:4a:
         2f:6b:78:95:97:37:5b:14:de:e5:ba:a2:83:8a:ba:aa:12:95:
         89:59:25:e3:a4:9b:74:ec:01:b8:a9:7c:9b:76:66:9a:ff:a4:
         0d:52:89:95:5b:28:dc:6e:62:75:a0:be:d4:e2:93:98:34:dd:
         8b:99:c3:64:c7:b4:2a:5f:e4:69:b1:77:51:df:8f:0f:ef:a6:
         26:19:2e:70:fc:50:87:9b:32:d6:cd:62:3d:1b:b1:f8:d8:8c:
         d4:59:5f:7e:06:58:db:95:5f:fa:87:58:15:25:51:40:e2:b2:
         d0:e5:de:bd:b9:a0:75:50:1b:76:f4:25:34:de:1b:b1:53:3b:
         3e:3b:c7:9b:a9:27:ed:20:d5:f7:13:00:20:20:25:b7:20:e2:
         1b:8c:94:d7:6a:ca:cb:42:63:a9:11:71:38:e0:64:dc:7c:6a:
         39:ab:5f:72:8f:c5:d0:60:4a:04:b8:fe:68:91:4d:ca:56:d7:
         7a:c3:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:22 2026 by rpki-client