Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
File:                     6WIIUNtVhbEpkxUEf1odX72KpjA.mft (raw, json)
Hash identifier:          OB43/lfAp8c2saI6S3J2F0VmWBJS6OfjZyaXuYBXacw=
Subject key identifier:   64:37:1C:A4:39:EE:A4:0B:C7:31:5B:0C:9F:B7:D2:62:97:8B:4F:48
Authority key identifier: E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30
Certificate issuer:       /CN=A915974C/serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
Manifest number:          0C
Signing time:             Wed 25 Mar 2026 08:23:50 +0000
Manifest this update:     Wed 25 Mar 2026 08:23:49 +0000
Manifest next update:     Wed 01 Apr 2026 08:23:49 +0000
Files and hashes:         1: 6WIIUNtVhbEpkxUEf1odX72KpjA.crl (hash: z2IlVebi4oKFIQ+9Wa8RIAZUSQZNalDj4dG1KoM3nwk=)
                          2: DAB6E11C251211F18B72873CBF833773.roa (hash: nxb1U9KV8D4GDxFWHrc+spPZIPBjyjFY/XbY1esDxwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl
                          rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915974C, serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
        Validity
            Not Before: Mar 25 08:23:49 2026 GMT
            Not After : Apr  1 08:23:49 2026 GMT
        Subject: CN=69c39b96-8610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:3c:26:15:b2:6c:ad:c3:99:e3:38:5d:0a:
                    01:98:7d:81:6d:06:09:90:49:c6:90:c0:9d:9c:1b:
                    52:68:17:03:ee:61:14:ca:3e:63:21:e2:44:0f:b5:
                    5f:b0:cd:64:52:8d:1e:c0:7d:ff:88:1f:2c:5b:ae:
                    4a:6e:7a:be:10:e7:47:30:ae:32:2e:a2:3d:7a:6e:
                    e2:6b:6c:25:61:44:0e:4f:95:ee:e4:21:ed:f1:ce:
                    24:8d:38:a5:0e:55:8f:38:c8:b4:ab:47:b3:32:10:
                    30:f2:39:ed:92:96:25:7c:68:5a:25:89:53:52:46:
                    85:1c:41:f8:03:66:93:2a:5c:e7:b7:cc:b6:bb:a6:
                    6b:56:43:f0:8a:c5:eb:e6:51:6f:89:15:bc:fd:73:
                    ce:e9:48:4a:d6:34:e6:cc:b5:8d:89:a9:48:a4:e0:
                    d3:d6:c2:98:81:85:9c:c6:d5:1f:3f:9f:83:41:3b:
                    c9:4f:fb:ce:10:a4:a0:07:64:cf:c9:fa:eb:f7:d1:
                    d1:49:70:b5:f2:67:16:8d:86:44:92:cf:ba:11:17:
                    e9:43:2e:6f:5d:36:57:44:d3:49:c4:b0:2e:41:f3:
                    bf:c0:e1:53:76:b1:21:d5:da:49:ec:bb:8b:ad:00:
                    56:4c:f5:e7:42:48:79:32:fa:75:e8:45:4d:fd:a8:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:37:1C:A4:39:EE:A4:0B:C7:31:5B:0C:9F:B7:D2:62:97:8B:4F:48
            X509v3 Authority Key Identifier:
                keyid:E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:bf:1f:38:70:ed:cc:c2:b0:ef:d0:59:67:3e:58:dc:df:7e:
         4a:f8:5d:f8:d8:10:b7:8a:57:45:89:be:0d:40:f9:76:8c:ae:
         75:8b:c3:ff:d7:c6:d1:45:e5:c4:87:ed:5f:55:a5:7c:8a:9f:
         c5:0b:aa:61:05:6d:d6:b8:2b:e7:e2:fd:ed:c7:b0:93:61:14:
         e4:02:b0:f5:74:1b:7c:dc:80:58:b3:71:57:b5:28:7a:e8:9b:
         7c:d6:c3:a3:02:69:62:db:7e:2e:5d:9b:b6:4f:fe:38:64:62:
         d9:e8:2c:a9:dd:18:2f:05:7b:8d:a3:34:34:07:64:42:2d:d4:
         a4:b4:03:07:c4:bb:70:78:dd:08:f7:3c:78:09:6c:1e:90:a9:
         ee:0c:08:9a:06:e0:26:61:c1:b2:10:55:32:a9:45:43:90:07:
         00:21:9e:35:13:a3:83:1c:cf:fc:6f:1c:b2:22:3b:26:13:76:
         8d:d3:b8:91:90:cd:10:ad:e2:95:ee:35:26:cc:3a:30:35:3c:
         bf:1a:8d:01:ef:8c:b2:98:57:ba:04:7f:05:11:6b:2f:44:c3:
         4c:22:9c:fd:11:fe:2f:96:0a:19:c1:10:4f:46:58:c3:66:9b:
         f5:bd:b8:6c:22:92:8a:1d:d1:84:72:c1:74:7f:43:fd:25:46:
         64:f4:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:00 2026 by rpki-client