Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          t6CAns0MipCcwijLjf82K43+47MzOOwU9pOMu2+g+H0=
Subject key identifier:   F1:CE:EF:9F:EF:2C:3D:7A:89:B6:75:8A:2F:1A:6E:4B:3B:0F:BB:76
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0B4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0B24
Signing time:             Tue 12 May 2026 19:22:14 +0000
Manifest this update:     Tue 12 May 2026 19:22:13 +0000
Manifest next update:     Tue 19 May 2026 19:22:13 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: qWo2L2zPCF0NiLr0Us6CvhCcYE2cUygE7yF5vA483kE=)
                          2: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
                          4: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2892 (0xb4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: May 12 19:22:13 2026 GMT
            Not After : May 19 19:22:13 2026 GMT
        Subject: CN=6a037de5-d77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:11:81:75:6b:65:07:8a:5c:af:03:e7:36:
                    b8:cb:1b:e9:07:d8:f3:ea:c8:a2:ab:b5:1d:39:64:
                    2e:7c:88:92:42:09:66:18:eb:93:58:20:61:1f:de:
                    a1:99:ef:aa:e5:c3:e8:17:95:97:50:07:43:25:91:
                    b9:df:1b:ab:82:cb:23:4b:cc:99:f0:15:56:5a:2b:
                    0c:24:00:fc:4e:47:67:dd:03:9f:b4:13:8c:28:64:
                    e1:23:30:9c:40:35:8f:c6:0a:0a:74:de:8d:47:5d:
                    8d:6b:08:ba:27:c6:50:60:eb:04:71:af:92:bb:11:
                    07:b0:b1:21:f2:4f:1c:d9:3f:1c:16:b7:31:e7:87:
                    67:ad:f1:39:3b:29:f6:6f:2e:c3:72:ba:ba:35:79:
                    95:8d:2e:02:af:71:01:c4:2d:1e:a0:d4:1e:3f:75:
                    a6:b4:c6:49:63:17:23:ab:11:43:88:6b:1f:13:57:
                    0f:cd:0b:b1:c1:a1:6c:62:f8:e8:e6:1d:67:21:b3:
                    8d:9e:b4:50:bc:7d:63:73:88:46:9c:3a:f9:2a:f9:
                    d6:f7:7f:94:51:a3:89:37:11:0b:74:0f:7c:39:a6:
                    21:31:89:51:47:63:50:e3:ca:1b:a5:1d:c5:b3:af:
                    d2:bd:93:ae:4e:e8:2f:53:c0:d5:7c:58:85:9b:0b:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CE:EF:9F:EF:2C:3D:7A:89:B6:75:8A:2F:1A:6E:4B:3B:0F:BB:76
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:66:7c:b2:4a:2a:19:9b:ec:9e:63:d1:2d:b5:8c:e9:d9:
         85:53:46:14:7b:31:99:f7:cb:1d:ef:91:31:c3:3c:67:c3:7c:
         19:f0:e3:ba:d6:87:b0:40:f9:83:ea:d7:e6:e9:dd:33:f6:03:
         e7:49:46:88:6b:ab:64:4c:fe:e4:6b:63:46:a4:5b:62:56:89:
         c6:ab:8d:43:d5:cf:b3:be:69:77:62:2d:0f:ee:3f:c3:e0:4c:
         9c:61:ce:d7:29:bc:74:4a:40:58:5b:9e:b5:11:62:03:fb:8f:
         86:d7:70:fe:5d:23:d9:a0:45:c6:b3:e5:96:96:3b:19:97:ef:
         ef:18:1e:60:7b:d1:63:e3:a0:d1:42:b9:a5:33:1d:f5:20:b4:
         b8:56:96:ab:b9:3a:52:7f:33:71:7d:1b:70:76:24:2e:54:26:
         1b:d9:84:2b:f6:e6:c7:b7:16:31:c3:69:d9:b5:50:5a:6d:c5:
         cf:45:12:a2:a8:6e:56:0e:b2:0b:29:23:6b:2c:a7:7a:1d:cc:
         85:81:29:1e:f1:35:2b:5b:95:d7:b5:c3:39:9d:7c:68:ba:65:
         93:e7:3c:7d:28:e0:f6:66:47:15:51:dc:67:5b:62:68:bb:0d:
         11:75:5f:25:f1:0c:76:1f:1e:c2:bc:de:35:30:b3:74:fa:b9:
         84:6d:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:44 2026 by rpki-client