Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
File:                     6WIIUNtVhbEpkxUEf1odX72KpjA.mft (raw, json)
Hash identifier:          mvY8GFHiTs/fX8jLmi+jnLu992YRhyk0h8OfPIkPC6I=
Subject key identifier:   D0:D8:E5:6D:B5:F4:D9:F8:85:44:DF:DB:A1:26:F1:54:BF:4F:80:D5
Authority key identifier: E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30
Certificate issuer:       /CN=A915974C/serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
Manifest number:          24
Signing time:             Mon 11 May 2026 09:06:31 +0000
Manifest this update:     Mon 11 May 2026 09:06:30 +0000
Manifest next update:     Mon 18 May 2026 09:06:30 +0000
Files and hashes:         1: 6WIIUNtVhbEpkxUEf1odX72KpjA.crl (hash: +WgAi4cLZ9sy88ESQzjZvXFic7wL4Q8vhIOPB3qDzss=)
                          2: DAB6E11C251211F18B72873CBF833773.roa (hash: nxb1U9KV8D4GDxFWHrc+spPZIPBjyjFY/XbY1esDxwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl
                          rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915974C, serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
        Validity
            Not Before: May 11 09:06:30 2026 GMT
            Not After : May 18 09:06:30 2026 GMT
        Subject: CN=6a019c17-5117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:97:a2:be:d7:55:35:84:45:09:c4:3a:e8:fe:
                    11:0a:d4:01:20:a1:6c:f3:c0:06:c9:33:fa:6e:e3:
                    6c:f2:c2:b7:7d:90:d0:07:98:6e:97:f7:f5:51:9b:
                    a6:c0:7a:b6:36:93:df:0f:46:93:2c:e1:3b:97:dc:
                    ce:6f:62:9f:05:f4:c8:50:dc:aa:2e:fc:88:7d:66:
                    60:9d:d1:69:49:4d:83:c2:5b:eb:c6:8b:b0:e3:17:
                    48:39:3b:e9:8c:26:ff:45:d6:1a:bb:b2:78:41:2e:
                    8c:77:3f:c7:db:b4:90:ed:bb:1d:32:e7:df:c0:61:
                    f5:b8:0a:18:fc:c3:09:a8:dd:a5:f0:3d:88:74:81:
                    ad:6d:84:2d:2e:7b:00:de:85:f7:d2:27:90:34:40:
                    d7:ad:16:d8:b3:50:5f:ce:55:c8:9f:be:aa:25:1e:
                    c6:5c:1e:ec:ba:33:99:77:e4:58:8a:00:ec:07:7b:
                    8c:ce:90:d5:31:13:2b:1e:9d:09:d3:af:95:4a:53:
                    d6:b9:1a:48:ce:9a:b8:c7:93:38:7f:2b:5e:7a:f6:
                    13:e3:20:62:88:f7:82:6d:31:a1:eb:30:49:c5:9a:
                    74:a4:d4:d4:26:21:a8:77:25:e9:45:27:bd:84:69:
                    e2:8e:33:70:02:b7:1a:9e:cd:e4:10:95:e7:ef:b0:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:E5:6D:B5:F4:D9:F8:85:44:DF:DB:A1:26:F1:54:BF:4F:80:D5
            X509v3 Authority Key Identifier:
                keyid:E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:c2:39:a7:79:c3:d0:31:6a:a2:62:41:15:a2:b8:07:1a:
         b2:5e:aa:5b:dc:df:5e:a7:b6:5a:26:29:9f:b8:f4:f0:09:c3:
         d3:36:02:32:53:02:0a:86:b6:04:4f:f1:b9:a9:34:2b:be:b6:
         79:78:44:96:e9:06:90:90:64:43:db:3e:81:20:65:e3:9e:c4:
         f2:c3:6e:ce:d6:b4:d5:c8:38:5d:cc:1a:d2:16:f1:f4:a6:fb:
         9f:f8:3f:4f:2d:78:23:91:1f:22:61:49:e8:8e:66:3d:3b:09:
         6e:c2:26:02:97:26:ab:40:df:16:60:f9:0e:ff:cb:41:5a:d3:
         c8:35:da:4e:a0:37:94:35:9a:0d:0d:f5:5c:20:dc:f8:4c:be:
         33:f8:9f:90:11:db:7a:f4:88:d5:f9:b4:99:98:c5:21:4b:33:
         ee:d5:7c:9c:e5:7f:88:bc:d6:6f:fd:56:71:ca:75:6a:bb:85:
         f2:3a:86:12:c1:11:5e:b7:ba:ca:b0:2b:d0:99:86:3c:ce:e7:
         03:13:82:55:88:eb:cf:66:a5:d9:18:7d:dd:05:2f:a8:9e:92:
         e5:3b:6b:6c:e1:5e:10:37:e2:ca:54:56:46:62:47:20:cf:69:
         a6:ff:14:f4:35:cf:b6:09:bc:72:c1:9e:94:79:c8:bc:bd:54:
         02:3a:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:38 2026 by rpki-client